June 2017
Beginner to intermediate
742 pages
18h 29m
English
Content preview from Mastering Active Directory
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
CA and CRL time limits
CA and CRL time limits also need to be adjusted. This can be done using the following command:
certutil -setreg CA\CRLPeriodUnits 7certutil -setreg CA\CRLPeriod "Days"certutil -setreg CA\CRLOverlapPeriodUnits 3certutil -setreg CA\CRLOverlapPeriod "Days"certutil -setreg CA\CRLDeltaPeriodUnits 0certutil -setreg ca\ValidityPeriodUnits 3certutil -setreg ca\ValidityPeriod "Years"
Once all this is done, in order to complete the configuration, restart the certificate service using the following command:
restart-service certsvc
Last but not the least, run the following command:
certutil -crl
Once all done, to generate CRLs, we can run PKIView.msc to verify the configuration:
PKIView.msc was first introduced with Windows ...