Difference between revisions of "Windows certificate authority subca offline root"
Jump to navigation
Jump to search
(Created page with " https://learn.microsoft.com/en-us/answers/questions/1320695/the-revocation-function-was-unable-to-check-revoca ``` The revocation function was unable to check revocation beca...") |
|||
Line 10: | Line 10: | ||
scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\ | scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\ | ||
``` | ``` | ||
+ | |||
+ | Certificate Authority (Local) and right click and start Certificate Authority service and it should come up green |
Revision as of 17:20, 18 November 2023
The revocation function was unable to check revocation because the revocation server was offline
Fix - Turn on rootca1 and copy *.crl files to subca(s)
scp rootca1.example.com:\Windows\System32\CertSrv\CertEnroll ./ scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\
Certificate Authority (Local) and right click and start Certificate Authority service and it should come up green