Re: CA Troubles

From: Sebastian Rieger (sebastian.rieger_at_gwdg.de)
Date: 08/08/05 

Date: Mon, 08 Aug 2005 13:38:40 +0200

Jaye schrieb:
> I click OK on that warning and then try to start the Certificate
> Services and get the following error.
>
> --------------------------
> The revocation function was unable to check revocation because the
> revocation server was offline.
> --------------------------

As a quick fix you can also disable this CRL check while starting the
service via:

certutil –setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE

Bye...

Sebastian

Relevant Pages

  • Certificate Services
    ... "The revocation function was unable to check revocation ... because the revocation server was offline." ... verify the current CA certificate. ...
    (microsoft.public.windows.server.networking)
  • Re: Certificate Services
    ... Check that your server trusts all parent CAs. ... > "The revocation function was unable to check revocation ... > verify the current CA certificate. ...
    (microsoft.public.windows.server.networking)
  • Re: Smart Card Logon Failure with Windows 2003 Server (works with Windows 2000 server)
    ... certificate could not be validated because the revocation ... The error message from the event log on the CDC is in the ... revocation function was unable to check revocation because ... >> the CRL is downloaded. ...
    (microsoft.public.win2000.security)
  • Re: certificate revocation error
    ... The CA is poorly configured and does not include revocation information in its issued certificates. ... I have configured IAS and also certificate server as Enterprise ... CN=TEST DSL Gateway Device Root Certificate Authority ... CN=TEST DSL Gateway Device Root Certificate Authority, ...
    (microsoft.public.win2000.security)
  • Re: Wired 802.1x Questions
    ... IAS allows EAP-TLS clients to connect even when it does ... not perform or cannot complete a revocation check of the client's ... certificate chain. ...
    (microsoft.public.windows.server.security)
Quantcast