CRLOverlap time limited to 12 hours?
Hi, http://technet.microsoft.com/en-us/library/cc731104.aspx clearly states that the overlap time for CRLs ist limited to a maximum of 12 hours. Examples in literature say otherwise, e.g. 2 weeks in Brian Komar. Is this limitation a fact and if so, why? Technically, it appears no problem to specify e.g. 2 days. The contents of the generated CRLs (next publication versus next update) seem to be correct. Perhaps someone can shed some light on this? Thanks - Stef
November 23rd, 2010 10:31am

This is true for Delta CRLs, but not for Base CRLs.http://en-us.sysadmins.lv
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 10:43am

Stef, There's no "absolute" maximum Base CRL overlap period (within the bounds of reason)... it can be equivalent to your Base CRL validity period... but never greater. e.g. you could have a twenty-six week Base CRL and a corresponding twenty-six week Base CRL Overlap period. Cheers, Dave
November 24th, 2010 5:00pm

Thanks!
Free Windows Admin Tool Kit Click here and download it now
November 29th, 2010 8:46am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics