Mastering Active Directory - Second Edition

CRL time limits

The CRL also has some time limits associated:

Certutil -setreg CA\CRLPeriodUnits 13Certutil -setreg CA\CRLPeriod "Weeks"Certutil -setreg CA\CRLDeltaPeriodUnits 0Certutil -setreg CA\CRLOverlapPeriodUnits 6Certutil -setreg CA\CRLOverlapPeriod "Hours"

In the preceding commands, the following is true:

• CRLPeriodUnits: This specifies the number of days, weeks, months, or years for which the CRL will be valid.
• CRLPeriod: This specifies whether the CRL validity period is measured by days, weeks, months, or years.
• CRLDeltaPeriodUnit: This specifies the number of days, weeks, months, or years that the delta CRL is valid for. Offline CAs should disable this.
• CRLOverlapPeriodUnits: This specifies the number of days, weeks, months, or ...