AD Health Check dinged us for CA Base and Delta CRL Configuration is Risky
The general recommended value for a Base CRL publication frequency is between 1-7 days. The general recommended value for Delta CRL publication frequency is 12 – 24 hours. Did you guys know that? Our base was set for every 1 week, fine I guess. Our delta was set for every 4 days, bad I guess.
March 17th, 2010 1:41am

Yes, I was aware of that <G>Remember that the default behavior is a 7 day base crl and daily delta CRLsA four day delta means that at the worst case, a revoked certificate would not be recognized for up to 96 hours (just after publication).Brian
Free Windows Admin Tool Kit Click here and download it now
March 17th, 2010 4:12am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics