Smart Card logon on W2K Network...

[Guest]

Hi security gurus,

I'm currently trying to implement smart card logon on my company's W2K AD
network. So far, I've set up (in a test environment of course) an internal
Enterprise CA and am also using third-party certificates to validate the
cards. My question pertains to CRL's, or specifically, the retrieval of the
CRL. Currently, the CDP on the card points to an LDAP site, but for testing
purposes I am operating in a closed network.

My question is, if I have a current copy of the CRL, how exactly do I enter
it into AD and point the cards to retrieve it from there instead of the site
that's on the card? Is this even possible? Thank you in advance.

 

[Steven L Umbach]

The computer/application will refer to the certificate details page - CRL
distribution points to find the CRL so you need to configure such before you
start issuing certificates. The link below should be able to help you out on
how to modify CRL distribution points. Possibly an internal website or
fileshare would work for you. --- Steve

http://www.microsoft.com/technet/security/topics/cryptographyetc/tshtcrl.mspx