Re: Publish Offline Root CRL

The -f switch is only required if the object in AD does not already exist. In your case, you are just updating an existing object. Thus, the -f switch is not required. After publishing the CRL into AD you can verify the operation with certutil -viewstore

Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.