Solved

PKI Error Message

Posted on 2014-09-25
4
484 Views
Last Modified: 2014-10-06
I have created a Root CA and a subordinate.  When I import the certificate from root CA to the subordinate I get the followin
error message :

Cannot verify certificate chain. Do you wish to ignore the error and continue ? The revocation function was unable to check revocation because revocation server was offline.

After click on OK and try to start the CA service the following error appear :

The revocation function was unable to check revocation because the revocation server was offlilne.

Has anyone a resolution for the issue ?
0
Comment
Question by:CaussyR
  • 2
  • 2
4 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 40345366
Tear down and rebuild time.  When you setup the root CA you didn't specify the location that is available for the certificate revocation and probably the AIA records as well. You need to point these to a webserver that already exists on your network.
0
 

Author Comment

by:CaussyR
ID: 40345493
Hi David, appreciate your help.

I do have the followingin the post script :

::Apply the required AIA Extension URLs
certutil -setreg CA\CACertPublicationURLs "1:%windir%\system32\CertSrv\CertEnroll\%%1_%%3%%4.crt\n2:ldap:///CN=%%7,CN=AIA,CN=Public Key Services,CN=Services,%%6%%11\n2:http://CertCentral.stbc3.jstest3.net/CertData/%%1_%%3%%4.crt"

Therefore, do I need this entry to be run ? Can I add the AIA extenstion later ?  Also, does the URL http://CertCentral.stbc3.jstest3.net have to just be available in DNS or does the installation require access to an online site ?  If the installation requires access to an online site, do I need to install the Web Authority option first ?
0
 
LVL 78

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 40348250
A web authority and a CRL are two distinct web pages.
Brian Komar - How not to Screw up your PKI
0
 

Author Closing Comment

by:CaussyR
ID: 40363339
Thanks David for all your assistance and links.
0

Featured Post

Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now