Difference between revisions of "Windows certificate authority subca offline root"

From UVOO Tech Wiki
Jump to navigation Jump to search
(Created page with " https://learn.microsoft.com/en-us/answers/questions/1320695/the-revocation-function-was-unable-to-check-revoca ``` The revocation function was unable to check revocation beca...")
 
Line 10: Line 10:
 
scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\
 
scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\
 
```
 
```
 +
 +
Certificate Authority (Local) and right click and start Certificate Authority service and it should come up green

Revision as of 17:20, 18 November 2023

https://learn.microsoft.com/en-us/answers/questions/1320695/the-revocation-function-was-unable-to-check-revoca

The revocation function was unable to check revocation because the revocation server was offline

Fix - Turn on rootca1 and copy *.crl files to subca(s)

scp rootca1.example.com:\Windows\System32\CertSrv\CertEnroll ./
scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\

Certificate Authority (Local) and right click and start Certificate Authority service and it should come up green