certutil -crl Note The two certutil commands above set the CDP and AIA paths respectively for the Root CA. The same configuration can be accomplished using the following PowerShell cmdlet commands: $crllist = Get-CACrlDistributionPoint; foreach ($crl in $crllist) $crl.uri -Force}; Add-CACRLDistributionPoint -Uri C:\Windows\System32\CertSrv\CertEnroll\%3%8.crl -PublishToServer -Force Add-CACRLDistributionPoint -Uri http://www.contoso.com/pki/%3%8.crl -Force $aialist = Get-CAAuthorityInformationAccess; foreach ($aia in $aialist) $aia.uri -Force}; Add-CAAuthorityInformationAccess http://www.contoso.com/pki/%1_%3%4.crt -Force To view the AIA and CDP, you can run the following commands: and | format-list Get-CACRLDistributionPoint | You can also return to the Extensions tab in certification authority properties format-list. dialog box and see the changes made to the AIA and CDP. From Windows PowerShell, run the command dir C:\Windows\system32\certsrv\certenroll\*.cr*, which displays the certificates and CRLs in the default certificate store. Copy the CA certificate file and CRL to removable media. For example, if you were running commands to copy the certificate and CRL to a floppy disk drive (A:), you would run the following commands: copy C:\Windows\system32\certsrv\certenroll\*.cr* A:\ dir A:\ Tip Substitute the drive letter of your removable media for
certutil -crl Note The two certutil commands above set the CDP and AIA paths respectively for the Root CA. The same configuration can be accomplished using the following PowerShell cmdlet commands: $crllist = Get-CACrlDistributionPoint; foreach ($crl in $crllist) $crl.uri -Force}; Add-CACRLDistributionPoint -Uri C:\Windows\System32\CertSrv\CertEnroll\%3%8.crl -PublishToServer -Force Add-CACRLDistributionPoint -Uri http://www.contoso.com/pki/%3%8.crl -Force $aialist = Get-CAAuthorityInformationAccess; foreach ($aia in $aialist) $aia.uri -Force}; Add-CAAuthorityInformationAccess http://www.contoso.com/pki/%1_%3%4.crt -Force To view the AIA and CDP, you can run the following commands: | format-list and Get-CACRLDistributionPoint | format-list. You can also return to the Extensions tab in certification authority properties dialog box and see the changes made to the AIA and CDP. From Windows PowerShell, run the command dir C:\Windows\system32\certsrv\certenroll\*.cr*, which displays the certificates and CRLs in the default certificate store. Copy the CA certificate file and CRL to removable media. For example, if you were running commands to copy the certificate and CRL to a floppy disk drive (A:), you would run the following commands: copy C:\Windows\system32\certsrv\certenroll\*.cr* A:\ dir A:\ Tip Substitute the drive letter of your removable media for
Test_Lab_guide_Deploying_an_AD_CS_Two-Tier%20PKI%20Hierarchy.docx