PIX & certification authority CRL

[johnleeee]

Hi all,

Id like to ask you for a help with our big problem.

We use our Microsoft CA in a combination with our PIX and SCEP installed in server where CA is running.

But we have observed that when we revoke valid certificate in our CA this same certificate can be used again. In our PIX

we see this message: CRL polling failed for trustpoint ....

Can someone help us?

BR

jl

[oszkari]

Hi,

have you configured on the pix the revocation list checking?

revocation-check crl

you need to have access from the pix to the CA server http port.