We have a Ex 2007 single server deployment, with CAS/HT/MB roles. We also have a MS Internal CA services that was used to issue a certificate to Ex 2007 during installation. Now our Ex2007 certificate has expired & while attempting to renew the certificate we get this error when we send a renewal request "Your certificate request was denied. Your Request Id is 7. The disposition message is "Error Constructing or Publishing Certificate". At the CA server end there is an application error log entry that says "Certificate Services denied request 7 because The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613). The request was for CN=mail1.galaxy.edu, OU=IT, O=Galaxy, L=mum, S=maha, C=IN. Additional information: Error Constructing or Publishing Certificate How do we resolve this? There seems to be no help available on the net.

Hi, It sounds as though your internal certificate servers are not all responding. the recovation server is the server holding the CRL for all certificates issued and this needs to be online for the servers to check if certificates are valid. If you have another team resposible for the PKI you should ask them, if not then check the CA that you located the error on and see if you pointed out a CRL for servers to check against. /MartinExchange is a passion not just a collaboration software.

Agree with mracket, seems like the internal CA has some issues. You can try to restart the Certificate services and test again. If the issue persists, please run the certutil -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE on the CA, and restart the Certificate services.Frank Wang

Hi CosmicStorm, Any updates on your issue?Frank Wang

Hi CosmicStorm, Any updates?Frank Wang