Comments on: CA will not start… What do you mean, cannot download CRL… http://www.cupfighter.net/index.php/2010/01/ca-will-not-start-what-do-you-mean-cannot-download-crl/ A blog by Schuberg Philis colleagues Wed, 25 Jan 2012 15:13:39 +0000 hourly 1 http://wordpress.org/?v= By: Graham Zebrasky http://www.cupfighter.net/index.php/2010/01/ca-will-not-start-what-do-you-mean-cannot-download-crl/comment-page-1/#comment-5140 Graham Zebrasky Fri, 21 May 2010 18:30:02 +0000 http://www.cupfighter.net/?p=860#comment-5140 I figured out how to delete the CA certificates. You need to use the Certificates MMC snap-in on the issuing CA. 1.) Open Certificates 2.) Connect to the local computer's cert store 3.) Find the CA's certificate which needs to be deleted, then remove 4.) Restart certificates services I've implemented this on my CA and all is well with the new CDPs! Thanks for the post! I figured out how to delete the CA certificates. You need to use the Certificates MMC snap-in on the issuing CA.

1.) Open Certificates
2.) Connect to the local computer’s cert store
3.) Find the CA’s certificate which needs to be deleted, then remove
4.) Restart certificates services

I’ve implemented this on my CA and all is well with the new CDPs! Thanks for the post!

]]> By: Frank Breedijk http://www.cupfighter.net/index.php/2010/01/ca-will-not-start-what-do-you-mean-cannot-download-crl/comment-page-1/#comment-3812 Frank Breedijk Mon, 12 Apr 2010 22:24:51 +0000 http://www.cupfighter.net/?p=860#comment-3812 Since I could indeed reinstall the entire chain I did just that. Since I could indeed reinstall the entire chain I did just that.

]]> By: Michel Zehnder http://www.cupfighter.net/index.php/2010/01/ca-will-not-start-what-do-you-mean-cannot-download-crl/comment-page-1/#comment-3674 Michel Zehnder Thu, 01 Apr 2010 14:31:46 +0000 http://www.cupfighter.net/?p=860#comment-3674 What did you do to resolve this? Have you rebuilt your CA? I had a similar problem, but I was able to resolve it by issueing a new CRL file from the Root CA, and then publish this CRL in Active Directory CDP and HTTP URL as new Base CRL, and deleting all other Base CRL of the Root CA from Active Directory. Cheers Michel What did you do to resolve this? Have you rebuilt your CA?

I had a similar problem, but I was able to resolve it by issueing a new CRL file from the Root CA, and then publish this CRL in Active Directory CDP and HTTP URL as new Base CRL, and deleting all other Base CRL of the Root CA from Active Directory.

Cheers
Michel

]]>