Monitoring my revocation List in a Windows 2008 AD, Issuing CA in a two tiered approach.
I am not quite sure how to look at or monitor my revocation list?
September 28th, 2011 8:05pm
what you mean about monitoring CRL? I think you need to look more to PKI Health Tool (pkiview.msc):
http://blogs.technet.com/b/pki/archive/2011/02/28/quick-check-on-adcs-health-using-enterprise-pki-tool-pkiview.aspxMy weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference:
on TechNet wiki
Free Windows Admin Tool Kit Click here and download it now
September 28th, 2011 8:30pm
what you mean about monitoring CRL? I think you need to look more to PKI Health Tool (pkiview.msc):
http://blogs.technet.com/b/pki/archive/2011/02/28/quick-check-on-adcs-health-using-enterprise-pki-tool-pkiview.aspxMy weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference:
on TechNet wiki
September 28th, 2011 8:30pm
You can also use the CAmonitor.vbs script:
http://gallery.technet.microsoft.com/ScriptCenter/164e8047-d7bf-4774-91cf-90d46b82e725/
From memory, for the script to work on a Windows Server 2008 CA, you need to install
capicom_dc_sdk.msi and run the script as follows:
C:\Windows\SysWOW64\cscript <Path>\camonitor.vbs
Cheers
JJ
Jason Jones |
Forefront MVP | Silversands Ltd | My Blogs:
http://blog.msedge.org.uk and
http://blog.msfirewall.org.uk
Free Windows Admin Tool Kit Click here and download it now
September 29th, 2011 1:40am