question

BahramMaleki-9659 avatar image
0 Votes"
BahramMaleki-9659 asked BahramMaleki-9659 commented

Enable revocation checking on Subordinate CA

Hello ,

I disabled "revocation checking" to make sure that was really the problem by running following commands:
"Certutil.exe -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE"

Now, I have to enable it but dont know how to do that.

Could someone help with that?

Thanks

azure-cache-redis
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AnuragSharma-MSFT avatar image
0 Votes"
AnuragSharma-MSFT answered BahramMaleki-9659 commented

Hi @BahramMaleki-9659, welcome to Microsoft Q&A forum.

Command would be similar except you need to change '+' to '-' as below:

 Certutil –setreg ca\CRLFlags -CRLF_REVCHECK_IGNORE_OFFLINE

You can refer to below articles for the same:

Certificate Services – Disable CRL Checking
Resolving Issues Starting a CA due to an Offline CRL

Please let us know if this helps.


If answer helps, please mark it 'Accept Answer'




· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you Anurag.

0 Votes 0 ·