CRL configurations issue with spaces

Question

Our Root cert has spaces in its name. (that was an obvious bad idea but it is what we have)

I am having issues publishing it now. I have tried editing the registry using %20 , I have tried delimiting it with quotes and it is not working. WHAT do we do to correct this as I cannot move forward with scep or any revocation work until I have resolved the CA server, unfortunately, is 2012R2 and the one article with a patch (which I cannot install on my r2 box) for a similar space issue does not seem to correct our issue.

Active Directory Certificate Services could not publish a Base CRL for key 0 to the following location: c:\Windows\system32\CertSrv\CertEnroll\"MyDomain Root Certificate Authority.crl". The filename, directory name, or volume label syntax is incorrect. 0x8007007b (WIN32/HTTP: 123 ERROR_INVALID_NAME).

In addition the

Active Directory Certificate Services could not publish a Delta CRL for key 0 to the following location: c:\Windows\system32\CertSrv\CertEnroll\"MyDomain Root Certificate Authority.crl". Operation aborted 0x80004004 (-2147467260 E_ABORT).

I have a remote web server in addition and it has the same exact errors in this CA trying to publish there as well.

How do we address this please I cannot find any helpful documentation.

Answer 1

Double-quotes are not valid characters in file system paths. Only single-quotes are allowed. This is why CA complains. You have to edit CDP extension to remove double-quotes. Spaces are perfectly legit, so it is not the problem.