CDP Expired

Question

Hi experts,

Upon checking, I have found out that CDP location is expired as below:-

I have tried the following as stated in microsoft article as below:-

1. certutil -CRL

Upon doing so, I can see the new .crl being generated in

C:\Windows\System32\certsrv\CertEnroll

2. Then I did the following command, Certutil -f -dspublish CertificateFile.crl NetBiosNameofCAServer

However, it prompts out as below

3. After that, I restarted the ADCS service and launch pkiview.msc again but it still show as expired as in the 1st figure as above.

Am I missing some steps?

Peter

Answer 1

Hi,

First of all i want to confirm that is it a 2 tier PKI with a offline CA and enterprise CA or a 1 tier PKI with only one enterprise CA?

If in a 2 tier PKI, we need to publish the CRL for Offline Root CA manually step by step as following:

If in a 1 tier PKI,after publish the CRL, try to copy the new published CRL to the Web server, usually, under the copy \webserver.pki.com\C$\CertEnroll\
If there are any progress, welcome to share here!
Fan