CA status "revocation check failed" RRS feed

  • Question

  •    Dear All

       our office have echange 2010 server and have 2 DC  that OS is windows 2008 but domain and forest is 2003, yesterday DC01 that is FSMO and Cert server mainboard is broken, so I promote DC02 to FSMO and Cert server, I can export root cer and Cert db server from DC01 and import to DC02 but I see on EMC all exchange server that have status of exchange certificate is "The certificate status could not determined because the revocation check failed" please tell me how to fix it. I used exchange CA for IIS and SMTP

    Thursday, February 16, 2012 3:58 PM


All replies

  • Hi,

    Can you check within the Exchange certificate wich CRL lists are used? Maybe they are reffering to the CRL list published on your DC01.


    Bart Timmermans

    KPN Consulting - Technical Consultant

    Thursday, February 16, 2012 4:19 PM
  • Dear Bart

       Thank you for your help, and please tell me how to check  CRL list

    Thursday, February 16, 2012 5:12 PM
  • Hi,

    If you double click on the certificate you can go to the tab Details and scroll down to CRL distribution points. Take a look at the attached image.

    KPN Consulting - Technical Consultant

    Thursday, February 16, 2012 5:45 PM
  • Hi,

    Any updates?

    KPN Consulting - Technical Consultant

    Saturday, February 18, 2012 8:20 AM
  • Dear  Bart

        sorry that respond to you late, I check CRL it still remember CRL server  that old domain controller and can not edit, What is next step

    Monday, February 20, 2012 2:53 AM
  • Hi there,

    I believe the questions is more about Cert server, so I'd suggest you pose it in the server forum here:

    Your understanding would be appreciated.

    Fiona Liao

    TechNet Community Support

    Monday, February 20, 2012 8:25 AM
  • The solution contains a link which show an forum overview.

    I`m having exactly the same issue and would be happy if anybody coud give me a hint or a link how he solved it.

    Thanks a lot!

    • Proposed as answer by insideAC Wednesday, July 4, 2012 7:55 AM
    • Unproposed as answer by insideAC Wednesday, July 4, 2012 7:55 AM
    Wednesday, July 4, 2012 7:36 AM