Sometimes when you publish new CRLs or check Application eventlog on CA server you may get error message: The directory name is invalid. 0x8007010b (WIN32/HTTP:267):
Usually this happens after incorrect CDP extension configuration on CA server. This error means that CA server was unable to publish one or more CRL file to a local, network folder or LDAP directory. Unfortunately error message doesn't contain a detailed explanation, so you will have to manually check all possible problem sources. At first you need to retrieve CDP extension paths used for physical file publication. Run the following command on CA server:
certutil –getreg CA\CRLPublicationURLs
and select paths with the following publication flags:
CA server uses them to publish files. If this is a local path (for example, D:\CertData\<somepath>) make sure if it exist. If local path exist, check folder security permissions. System (LocalSystem) account must have FullControl rights. If this is a network path (for example \\Server\Share\<somepath> or file://\\Server\Share\<somepath>) than make sure if:
If one of this condition fails, you will get mentioned error message. Additionally check path syntax, because it is common to miss some characters in long paths.
If this is LDAP path make sure if the following conditions are valid:
When all these conditions are valid (after corresponding problem resilution) try to publish new CRLs again by running the following command
certutil –CRL