Remove-CACrlDistributionPoint

Removes the URI for the CRL distribution point (CDP) from the CA.

Syntax

Remove-CACrlDistributionPoint
      [-Uri] <String>
      [-AddToCertificateCdp]
      [-AddToFreshestCrl]
      [-AddToCrlCdp]
      [-AddToCrlIdp]
      [-PublishToServer]
      [-PublishDeltaToServer]
      [-Force]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

The Remove-CACRLDistributionPoint cmdlet removes the uniform resource identifier (URI) for the certificate revocation list (CRL) distribution point from the certification authority (CA).

Examples

Example 1: Remove all URIs for all distribution points for the specified URI

PS C:\> Remove-CACrlDistributionPoint -URI "http://corp.contoso.com/rootca.crl"

This command removes all URIs for all distribution points that contain the specified URI value http://corp.contoso.com/rootca.crl.

Example 2: Remove the URIs for all distribution points for the CDP extension of issued certificates

PS C:\> Remove-CACrlDistributionPoint -Uri "http://corp.contoso.com/rootca.crl" -AddToCertificateCdp

This command removes only the URIs that are set to a value of http://corp.contoso.com/rootca.crl and for which the AddToCertificateCdp parameter is set.

Example 3: Remove the URIs for all distribution points for the CDP and IDP extensions of issued certificates

PS C:\> Remove-CACrlDistributionPoint -Uri "http://www.contoso.com/pki/orca.crl" -AddToCertificateCdp -AddToCrlIdp

This command removes only the URIs that are unique to the URI named http://www.contoso.com/pki/orca.crl and the combination of flags that are set or included with the AddToCertificateCdp and AddToCrlIdp parameters.

Parameters

-AddToCertificateCdp

Indicates that the cmdlet removes the CDP extension of issued certificates.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToCrlCdp

Indicates that the cmdlet removes the CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToCrlIdp

Indicates that the cmdlet removes the IDP extension of issued certificates.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToFreshestCrl

Indicates that the cmdlet removes the most recent CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PublishDeltaToServer

Indicates that the cmdlet removes the delta CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-PublishToServer

Indicates that the cmdlet removes the base CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Uri

Specifies the uniform resource identifier (URI) for the distribution point location of the certificate revocation list (CRL). This is the location from where status information about certificate revocation has been retrieved and/or the location the CRL was published.

Type:String
Position:1
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

String

SwitchParameter

Outputs

Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult

This cmdlet returns a property named RestartCA, which when set to True indicates that the CA service (certsvc) needs to be restarted.