Currently the Root CA in my environment could not publish any CRL. There isn't any error found in Event Viewer however when publishing a new CRL the CRL file in C:\Windows\System32\... does get modified however the serial number in the CRL file does not reflect the latest revoke certificate. Many thanks in advance !

Hi, please refer the following link to apply a policy setting: Manage Revocation Checking Policy http://technet.microsoft.com/en-us/library/cc753863.aspx Hope this helps! Best Regards Elytis Cheng Elytis Cheng TechNet Community Support

Hi Elytis, Thanks for the link, however it didn't work Even when i restart my root CA and publish the CRL in another local drive. Still the CRL was published however it does not update its list of revoke certificates but the effective date and published date has been changed. Many thanks in advance !