Unanswered AD CS online responder not working

  • jeudi 26 avril 2012 07:24
     
     

    Hi,

    I have a single 2008 R2 enterprise CA configured which also has the online responder service installed. This was previously working correctly but now my online responder is giving errors.

    When I tried recreating the revocation configuration and received this error:

    I am then able to click the Provider button (no locations are shown). I entered:

    ldap:///CN=CACommonName,CN=CAHostName,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=Fabrikam,DC=com?certificateRevocationList?base?objectClass=cRLDistributionPoint

    and

    http://hostname/CertEnroll/hostname.crl

    However I'm still having the error.

    Can anyone help?

    Thanks.

Toutes les réponses

  • jeudi 26 avril 2012 08:11
     
     
    This is because you haven't entered Delta CRL location.

    My weblog: http://en-us.sysadmins.lv
    PowerShell PKI Module: http://pspki.codeplex.com
    Windows PKI reference: on TechNet wiki

  • jeudi 26 avril 2012 09:50
     
     

    Thanks for point me in the right direction. There was no CRL locations configured(!!!). I've created a http, ldap and unc locations. They are reporting OK although i had to manually publish the CRL to AD. I now have another issue... the deltaCRL Location #2 (ldap) is unable to download. Any idea why this would be?

    Thanks.