Certificate Revocation List (CRL) & locally cached copy

[Thomas]

Dear ng,

How is it possible to force a client computer to stop using its locally
cached CRL & get the new CRL (before the validity period expires) ?

Cheers

- Thomas -

 

[a-chadl [MSFT]]

| Dear ng,
|
| How is it possible to force a client computer to stop using its locally
| cached CRL & get the new CRL (before the validity period expires) ?
|
| Cheers
|
| - Thomas -
|
|
|

When you manually publish a CRL, this does not affect the regular scheduled
publication schedule. It also does not replace cached copies of the
previous CRL that clients have stored locally. The cached CRL will still be
valid until it expires (by default, a CRL's validity period extends 10
percent past the publication period). It is very important to keep this in
mind when you manually publish CRLs. Clients can manually download a new
CRL by connecting to the CA's Web page (http://<server name>/certsrv) with
Internet Explorer.




Chad A. Lacy
Windows 2000 Directory Services

==================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Thomas]

Hi Chad,

Thx for your reply.
Is that the only way for client computers to get a new CRL before its
validity period expires ?
I'm looking for a more scalable way ....

- Thomas -