Hi, I'm configuring OCSP on Windows Server 2008 but when I finish the revocation configuration, I get the following error: Type: Microsoft CRL-based revocation status provider. Revocation provider is not working on the Array controller. The revocation provider failed with the current configuration. The object identifier does not represent a valid object. 0x800710d8 (WIN32: 4312), 0x800710d8 The URL I'm using for the revocation provider is accessible through the browser (I can get the CRLs through the browser) so I don't know why I'm getting this error. Any help? Thanks, Marcela

Hi Marcela, According to our Customer Support record, it seems that you have opened a support case to Microsoft Customer Support and the problem has been resolved by changing the proxy configuration. If you would like to share the details, other customers will also benefit from it. JLaura Zhang - MSFT

Hi,Our OCSP server had no proxy configured and this was the cause of the problem. We configured the proxy using windows proxy configuration tool proxycfg.exe. We ran the following command: proxycfg -p proxy:80, where proxy is the proxy's url. Besides this, we also had problems with the delta CRL because IIS was denying requests that had double escape sequences (in this case the URL had a '+' symbol so it was not able to get the delta CRL). We changed IIS configuration with the following command:C:Windows\system32\inetsrv\appcmd set config "Default Web Site" -section:system.webServer/security/requestfiltering -allowDoubleEscaping:true

Great, thanks a lot for the sharing. :-)Laura Zhang - MSFT

Hi all, I realize this post is really old, but how is the proxycfg.exe tool used in server 2008? I cannot get this command to work and have read that this tool was replaced in server 2008. Does anyone have information on how I can set the proxy? I have also tried using netsh winhttp>set proxy proxy-server="http=www.proxy.com:80" with no luck. I get "Access is Denied" error. CAN ANYONE HELP?!? Thank you in advance! TG23

Hi,I executed on the command prompt the following to configure to proxy:proxycfg -p proxy:80, where proxy is the proxy's urlIf yoy are getting the access denied error maybe its because you are not executing the command prompt with administrative rights.

Thanks Marcela! Lack of administrator rights was the issue. I was using a domain administrator account rather than a local administrator account. Once I switched, all set! I used the command: netsh winhttp>set proxy proxy-server="http=www.proxy.com:80" The proxycfg command was not available on my system.