Schedule the publication of the certificate revocation list

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To schedule the publication of the certificate revocation list

  1. Log on to the system as a Certification Authority Administrator.

  2. Open Certification Authority.

  3. In the console tree, click Revoked Certificates.


    • Certification Authority (Computer)/*CA name/*Revoked Certificates
  4. On the Action menu, click Properties.

  5. In CRL publication interval, type the increment and click the unit of time to use for the automatic publishing of the certificate revocation list (CRL).


  • To open Certification Authority, click Start, click Control Panel, double-click Administrative Tools, and then double-click Certification Authority.

  • The certificate revocation list (CRL) is published by default in:


  • If the computer is a domain member and has permission to write to the Active Directory directory service, then the CRL is also published to Active Directory.

  • The publishing period for a CRL is not the same as the validity period for a CRL. By default, the validity period of a CRL exceeds the publishing period of a CRL by 10% (up to a 12-hour maximum) to allow for directory replication. For more information about revoking certificates and publishing CRLs, see Related Topics.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also


Working with MMC console files
Revoking certificates and publishing CRLs
Certificate revocation
Specify certificate revocation list distribution points in issued certificates
Revoke an issued certificate
Manually publish the certificate revocation list
View the certificate revocation list
Schedule the publication of the delta certificate revocation list