Link to home
Start Free TrialLog in
Avatar of Spiraliz68
Spiraliz68Flag for Norway

asked on

Certificate Services - Error: "AIA location - Unable to Download" and "OCSP location - Error" in PKI view.

Hi Experts!

I have resently installed a root CA on a Windows server 2008 R2 member server. Everything seems to work fine except for a few errors in PKI view.

AIA locations pointing at ldap and http works ok but AIA location pointing at file locations does not work.
OCSP pointing at the same locations does not work (http).

I have tried to copy and paste the url in to IE and it seems to work both for AIA url and OCSP url.

This is an export of the view in PKIview:


Name      Status      Expiration Date      Location
CA Certificate      OK      29.07.2020 08:05      
AIA Location #1      OK      29.07.2020 08:05      ldap:///CN=servername,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=subdomain,DC=domain,DC=net?cACertificate?base?objectClass=certificationAuthority
AIA Location #2      OK      29.07.2020 08:05      http://servername.subdomain.domain.net/CertEnroll/servername.subdomain.domain.net_servername(2).crt
AIA Location #3      Unable To Download            file://servername.subdomain.domain.net/CertEnroll/servername.subdomain.domain.net_servername(2).crt
AIA Location #4      Unable To Download            file://servername.subdomain.domain.net/CertEnroll/servername.subdomain.domain.net_servername(1).crt
CDP Location #1      OK      05.08.2010 20:15      ldap:///CN=servername,CN=servername,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=subdomain,DC=domain,DC=net?certificateRevocationList?base?objectClass=cRLDistributionPoint
DeltaCRL Location #1      OK      31.07.2010 20:15      ldap:///CN=servername,CN=servername,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=subdomain,DC=domain,DC=net?deltaRevocationList?base?objectClass=cRLDistributionPoint
OCSP Location #1      Error            http://servername.subdomain.domain.net/CertEnroll/servername.subdomain.domain.net_servername(2).crt
OCSP Location #2      OK            http://servername/ocsp
OCSP Location #3      Error            http://servername.subdomain.domain.net/CertEnroll/servername.subdomain.domain.net_servername(1).crt






Does anyone have a clue of why i get these errors?

Greatful for answers!
AIA.JPG
ASKER CERTIFIED SOLUTION
Avatar of Paranormastic
Paranormastic
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial