Cisco ISE Support for Certificate Revocation List ( CRL )

[sawosankung]

Dear Support,

I would like to know whether Cisco ISE model 3395 supports delta CRL (certificate revocation list)  and how do we configure it to retrieve  the information from a CA server's initial response.

Many thanks.                

Sankung  

[Anas Naqvi]

Hi Sankung,

Following link might be helpful,

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_man_cert.html

[ikatz]

Delta CRL is not supported (at least not on ISE 2.0 and the earlier versions).
In that case you can use Online Certificate Status Protocol (OCSP).