Answered by:
The certificate status could not be determined because the revocation check failed

Question
-
I installed Exchange 2010 on an isolated lab network without Internet access. windows 2008 x64. When I tried to install a wildcard certificate from Digicert, I got this error:
The certificate status could not be determined because the revocation check failed. I've seen kb article 979694 which refers to a proxy server. We don't have a proxy server. When I run the netsh winhttp show proxy command from that article, I get: Direct access <no proxy server>.
So I'm guessing that the certificate needs to go out to the internet to get validated It can't get out, so I get this error. I did not get this error installing a certificate on an Exchange 2003 IIS certificate on the same isolated subnet.
Please help.
Friday, July 1, 2011 4:39 PM
Answers
-
Yes by design you have to disable the revocation check.
Configuring Exchange Servers Without Internet Accesshttp://blogs.technet.com/b/exchange/archive/2010/05/14/3409948.aspx
James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com- Marked as answer by emma.yoyo Friday, July 8, 2011 1:35 AM
Friday, July 1, 2011 5:19 PM -
By the way, if this is an isolated lab for test only, a self-signed certificate or internal CA one is enough.
More information about Exchange certificate:
Certificate Use in Exchange Server 2007Frank Wang
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by emma.yoyo Friday, July 8, 2011 1:35 AM
Monday, July 4, 2011 7:16 AM
All replies
-
Yes by design you have to disable the revocation check.
Configuring Exchange Servers Without Internet Accesshttp://blogs.technet.com/b/exchange/archive/2010/05/14/3409948.aspx
James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com- Marked as answer by emma.yoyo Friday, July 8, 2011 1:35 AM
Friday, July 1, 2011 5:19 PM -
By the way, if this is an isolated lab for test only, a self-signed certificate or internal CA one is enough.
More information about Exchange certificate:
Certificate Use in Exchange Server 2007Frank Wang
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by emma.yoyo Friday, July 8, 2011 1:35 AM
Monday, July 4, 2011 7:16 AM -
Hi MangroveGuy,
Any updates?
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.Tuesday, July 5, 2011 8:30 AM -
You can assign a self assinged cerificate
Tuesday, July 5, 2011 8:39 AM -
Hi MangroveGuy,
Any updates?
Frank WangThursday, July 7, 2011 1:37 AM