How to Publish the CRL on a Separate Web Server

The Configuration Manager Support Team Blog — Tue, 05 May 2009 16:06:47 GMT

Just in case you missed it, Carol Bailey has another fantastic post over on this System Center Configuration

re: How to Publish the CRL on a Separate Web Server

tomt — Fri, 12 Jun 2009 16:29:58 GMT

hi carol,

thank you for this great blog!

but I have one question: how (where) can I specify the http url for the DELTA crl??? I'm able to auto-update the full crl on a web server, but the delta crl is always trying to connect to the standard http url... is there a possibility to change this?

best reguards

thomas t.

re: How to Publish the CRL on a Separate Web Server

Carol Bailey - MSFT — Thu, 13 Aug 2009 04:24:53 GMT

Thanks for your feedback Thomas, and I'm sorry it's taken me a while to investigate this. To publish the delta CRL, the instructions were missing the variable <DeltaCRLAllowed> in the paths, and I've now added this and updated the instructions.

As a rule, I'm not fond of adding variables in documentation when they are not needed for basic functionality, but this one is needed for delta CRLs. I also added <CaName> so that you can publish CRLs from different CAs into the same location (for example, you have a tiered CA hierarchy), and <CRLNameSuffix> according to best practices (http://technet.microsoft.com/en-us/library/dd379469(WS.10).aspx).

re: How to Publish the CRL on a Separate Web Server

Founda — Wed, 19 Aug 2009 20:41:01 GMT

Thats:

http://<FQDN_of_Web_Server>/<CRL_directory_name>/<CaName><CRLNameSuffix><DeltaCRLAllowed>.crl

re: How to Publish the CRL on a Separate Web Server

Josh — Mon, 28 Sep 2009 22:28:23 GMT

Carol, Excellent post. What about the AIA? Does it also need to be accessible over the internet for clients that cannot access the AIA publication location within the intranet?

Thanks,

Josh