PKIView OCSP Location#1 Error

Posted by Ahmed Nabil In | 4 comments»
After configuring and installing OCSP on an Enterprise Certification Authority I noticed that the OCSP location in the PKIView is displaying an error as per below screen shot.



The OCSP was working fine with current certificate and I verified and validated it using the

Certutil -url (Check below article for more details)

http://blogs.technet.com/b/askds/archive/2009/06/29/implementing-an-ocsp-responder-part-iii-configuring-ocsp-for-use-with-enterprise-cas.aspx

It turned to be that the original AIA path that was used has been changed on my CA extensions with another path which led to this error. So in order to fix this issue, the following was done:


  1. Revoked the Latest CA Exchange certificate, this can be done by checking your Certification Authority - Issued Certificate - Arrange them by Certificate template and check the latest CA Exchange Certificate                                                                                                                                                                                                                                                                                                                                       
                                                                                                                                                                                                                   
  2. From an Admin Command prompt run "certutil -cainfo xchg"                                                                                                                                                                                                                                   
                                                                                                                                                                                            
This did the trick and it was fixed back in the PKIView.



4 Comments
Comments

4 comments:

Stefan Källroos Says:

Thank you! This saved my day!

Unknown Says:

Really good info. Thanks a lot for sharing. Appreciate it.

Unknown Says:

Saved me from rebuilding !! thank you Sir

Ahmed Nabil Says:

Best of Luck. Thanks for the comment

Post a Comment