topic ACS - System Errors - Could not add Certificate Revocation List in Network Access Control

ACS - System Errors - Could not add Certificate Revocation List

Wil Cha — Mon, 11 Mar 2019 04:24:21 GMT

Hi All,

I'm receiving daily system errors from ACS but unsure how to fix the issue. The following is the error I receive

Severity :	Error
Time Range :	February 17, 2014 09:08:00.000 AM - February 17, 2014 09:10:00.000 AM

Generated on February 17, 2014 9:14:56 AM EST

Logged At	Severity	Message	Category	Code	Details	ACS Instance
February 17,2014 9:09:06.936 AM	ERROR	Could not add Certificate Revocation List	CSCOacs_Internal_Operations_Diagnostics	33401	LastErrorMessage=CRL PKI verification failed Certificate Revocation list Url=http://XXXca01.<omitted>.au/CertEnroll/cs-XXXCA01-CA.crl	XXXACS02
February 17,2014 9:08:31.916 AM	ERROR	Could not download Certificate Revocation List	CSCOacs_Internal_Operations_Diagnostics	33402	LastErrorMessage=Failed performing HTTP GET with error: Timeout was reached Certificate Revocation list Url=http://YYYca01.<omitted>.au/CertEnroll/cs-YYYCA01-CA.crl	YYYACS02

Looks like it is unable to perform certificate recovation on particular CA servers onsite but there doesn't seem to be much configuration options in ACS? Would this be an issue with the onsite CA server?

Thanks in advance.

Regards

Wil

ACS - System Errors - Could not add Certificate Revocation List

Wil Cha — Mon, 17 Feb 2014 03:40:29 GMT

No Cisco ACS experts available?

ACS - System Errors - Could not add Certificate Revocation List

Saurav Lodh — Mon, 17 Feb 2014 08:47:04 GMT

what ACS version it is ? Please use OCSP services , an alternative to CRL

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/user/guide/acsuserguide/net_resources.html#wp1133154

Same issue here, ACS 5.2

cmonks119 — Fri, 20 Mar 2015 21:41:38 GMT

Same issue here, ACS 5.2 (OCSP not available). Are there bugs/issues/workarounds for CRL PKI failing with ACS 5.2 and Microsoft CAs?

I am currently experiencing

benediktdiehl — Wed, 08 Apr 2015 11:44:46 GMT

I am currently experiencing the exact same issue!
Could currently need some advice from an acs expert too.

Re: ACS - System Errors - Could not add Certificate Revocation List

jayage — Thu, 18 Jan 2018 08:47:51 GMT

We got the same on 5.6
Any advice?