Configuring the Certification Distribution Point and Authority Information Access settings
  1. guides
  2. en
  3. Administrator's Guide
  4. Managing certificates
  5. Managing certificates using Microsoft Certificate Authority through SCEP
  6. Configuring the Certification Distribution Point and Authority Information Access settings

Configuring the Certification Distribution Point and Authority Information Access settings

Configure the Certification Distribution Point (CDP) and Authority Information Access (AIA) settings for Certificate Revocation List (CRL).
  1. From Server Manager, click
    Tools
    Certification Authority
    .
  2. From the left panel, right‑click the CA, and then click
    Properties
    Extensions
    .
  3. In the Select extension menu, select
    CRL Distribution Point (CDP)
    .
  4. In the certificate revocation list, select the
    C:\Windows\system32\
     entry, and then do the following:
    1. Select
      Publish CRLs to this location
      .
    2. Clear
      Publish Delta CRLs to this location
      .
  5. Delete all other entries except for
    C:\Windows\system32\
    .
  6. Click
    Add
    .
  7. In the Location field, add
    http://
    serverIP
    /CertEnroll/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl
    , where
    serverIP
    is the IP address of the server.
    If your server is reachable by using the FQDN, then use the
    <ServerDNSName>
     instead of the server IP address.
  8. Click
    OK
    .
  9. Select
    Include in the CDP extension of issued certificates
     for the created entry.
  10. In the Select extension menu, select
    Authority Information Access (AIA)
    .
  11. Delete all other entries except for
    C:\Windows\system32\
    .
  12. Click
    Add
    .
  13. In the Location field, add
    http://
    serverIP
    /CertEnroll/<ServerDNSName>_<CAName><CertificateName>.crt
    , where
    serverIP
    is the IP address of the server.
    If your server is reachable by using the FQDN, then use the
    <ServerDNSName>
     instead of the server IP address.
  14. Click
    OK
    .
  15. Select
    Include in the AIA extension of issued certificates
     for the created entry.
  16. Click
    Apply
    >
    OK
    .
    If necessary, restart the certification service.
  17. From the left panel, expand the CA, right‑click
    Revoked Certificates
    , and then click
    Properties
    .
  18. Specify the value for CRL publication interval and for Publish Delta CRLs Publication interval, and then click
    Apply
    OK
    .
  19. From the left panel, right‑click
    Revoked Certificates
    , click
    All Tasks
    , and then publish the New CRL.

This site uses cookies for various purposes including enhancing your experience, analytics, and ads. By continuing to browse this site or by clicking "Accept and close", you agree to our use of cookies. For more information, read our Cookies page.