Re: Slow Certificate Access



In article
<ZLOdnR8Gn_aLOmfYnZ2dnUVZ_r6vnZ2d@xxxxxxxxxxx>, mjc-
post@xxxxxxxxxxxxxxxxxxxxx says...
Hello,

I'm running Windows Server 2003 R2. I have a certificate that I'm using
to access a secure web service, stored in the certificate store under
"Personal". Using the Certificates snap-in, when I pull up this
certificate and click the "Details" tab, it takes about 20-40 seconds
for it to display. Other certificates do the same thing, but not all of
them. This also has an impact in the code I'm writing, as I see the
same delay there, too. However, this same certificate works fine on
another machine, both in code and in the Certificates snap-in.

I've tried deleting and re-adding the certificate; but it does not seem
to help. It does have a private key associated with it.

Can the certificate store be corrupt? Is there a way to delete/restore
it? Other than my one certificate, I only have the "default" entries
that get installed with Windows, so in theory I could get them from
another machine.

Any help would be greatly appreciated.

Thanks,
-Mike

It sounds like revocation issues.
If you export the certificate to a .cer file and then
run:
certutil -verify -urlfetch <certificate.cer>, are there
any revocation or root trust issues?
Brian
.



Relevant Pages

  • Re: Slow Certificate Access
    ... That led me down the path of checking the AD entry for the computer in the domain controller. ... I have a certificate that I'm using to access a secure web service, stored in the certificate store under "Personal". ... Using the Certificates snap-in, when I pull up this certificate and click the "Details" tab, it takes about 20-40 seconds for it to display. ... It sounds like revocation issues. ...
    (microsoft.public.windows.server.security)
  • Request a new certificate
    ... I'm running Windows Server 2003 SBS and trying to export an SSL ... certificate of a web site. ... After selecting the appropriate certificate, ... choose Server Certificate under Directory Security. ...
    (microsoft.public.windows.server.general)
  • Request a new certificate
    ... I'm running Windows Server 2003 SBS and trying to export an SSL ... certificate of a web site. ... After selecting the appropriate certificate, ... choose Server Certificate under Directory Security. ...
    (microsoft.public.windows.server.sbs)
  • Slow Certificate Access
    ... I'm running Windows Server 2003 R2. ... I have a certificate that I'm using to access a secure web service, stored in the certificate store under "Personal". ... Using the Certificates snap-in, when I pull up this certificate and click the "Details" tab, it takes about 20-40 seconds for it to display. ...
    (microsoft.public.windows.server.security)
  • Re: Smart Card Logon Failure with Windows 2003 Server (works with Windows 2000 server)
    ... certificate could not be validated because the revocation ... The error message from the event log on the CDC is in the ... revocation function was unable to check revocation because ... >> the CRL is downloaded. ...
    (microsoft.public.win2000.security)