Certificates Services error

i have certification authority server (subord ca) running w2k3 enterprise r2 sp2.  recently, i'm getting event id: 22 error.  description follows:

certificate services not process request 64208 due error: revocation function unable check revocation because revocation server offline. 0x80092013 (-2146885613). request e=tom.martin@xyz.com, cn=tom.martin, ou=users, ou=atl, dc=xyz, dc=com. additional information: error verifying request signature or signing certificate.

besides that, realized issued certificates in certification authority has not issued any new certificates past few days.  see @ least 1 new certificate day not last 3 days.

i have right mouse click on revoked certificates in certification authority, tasks, published , select new crl re-publish new cert. no success.

your appreciated.

thanks in advance.

hi,

error may caused expired crl of issuing ca certificate. open pkiview.msc, find if there certificate expired, if any, please try renew crl.

or run command below disable feature checks revocation on certificates in pki hierarchy.

certutil –setreg ca\crlflags +crlf_revcheck_ignore_offline

restart ca , test.
 
reference:

custom ca configuration--->ignore offline crl errors on ca:
http://technet.microsoft.com/en-us/library/cc784789(ws.10).aspx
 
online enterprise issuing cas:
http://technet.microsoft.com/en-us/library/cc737481(ws.10).aspx

thanks.

---

this posting provided "as is" no warranties, , confers no rights.

Windows Server  >  Security