Re: Offline Root CA CDP Expiring



Hi,
I believe that you will have to change CRL publication interval on your
offline root CA. You can do it from GUI or CMD using certutil command.
Technet article:
http://technet2.microsoft.com/WindowsServer/en/Library/6c9228ed-6a21-45e8-bb67-d66f56276c0c1033.mspx

--

************************
Best regards
Dejan
************************


<janus.toendering@xxxxxxxxx> wrote in message
news:1146033964.755128.46900@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a two-tier setup at my company with the Root CA stored away in a
safe - and an issuing CA online. I have read and followed most of the
Microsoft documentation on this subject - and I realize it is quite
complex to setup.

Everything is working though - except that every week "CDP Location #1"
of the RootCA is expiring. Is there any way to delegate this job to the
online CA - or configure any other way so that I won't have to manually
fetch the CDP from the offline CA once a week?

Hope you can help.

Best regards,
Janus N. Tøndering


.



Relevant Pages

  • Offline Root CA CDP Expiring
    ... I have a two-tier setup at my company with the Root CA stored away in a ... safe - and an issuing CA online. ... Everything is working though - except that every week "CDP Location #1" ...
    (microsoft.public.windows.server.security)
  • CDP Expired?
    ... W2K3 AD. single forest, single domain, 2 DCs. ... I have a offline root CA and an online issuing CA. I've been ... CDP location #1. ...
    (microsoft.public.windows.server.security)
  • CDP Expired?
    ... W2K3 AD. single forest, single domain, 2 DCs. ... I have a offline root CA and an online issuing CA. I've been ... CDP location #1. ...
    (microsoft.public.windows.server.security)
  • CDP Expired?
    ... W2K3 AD. single forest, single domain, 2 DCs. ... I have a offline root CA and an online issuing CA. I've been ... CDP location #1. ...
    (microsoft.public.windows.server.security)