Manage Network Retrieval and Path Validation

§

To be effective, certificate-related data such as trusted root certificates, cross- certificates, and certificate revocation lists (CRLs) must be updated in a timely manner. Network retrieval and path validation settings allow administrators to:

  • Automatically update certificates in the Microsoft Root Certificate Program.

  • Configure retrieval timeout values for CRLs and path validation (larger default values may be useful if network conditions are not optimal).

  • Enable issuer certificate retrieval during path validation.

  • Define how frequently cross-certificates are downloaded.

This topic includes procedures for the following tasks:

Managing CRL retrieval

Obtaining timely certificate revocation data is an important element in secure certificate use. However, problems can arise if validation checking and retrieval of certificate revocation data and cross-certificates time out because more data is being transferred than originally anticipated.

Network retrieval options in public key Group Policy allow administrators to manage network retrieval timeout values.

Increasing the retrieval timeout option for large CRLs for a local computer

Administrators is the minimum group membership required to complete this procedure.

☞ To increase the retrieval timeout option for large CRLs for a local computer
  1. Click Start, type gpedit.msc in the Search programs and files box, and then press ENTER.

  2. In the console tree under Local Computer Policy\Computer Configuration\Windows Settings\Security Settings, click Public Key Policies.

  3. Double-click Certificate Path Validation Settings, and then click the Network Retrieval tab.

  4. Select the Define these policy settings check box.

  5. Under Default retrieval timeout settings, enter a timeout value in the Default URL retrieval timeout (in seconds) box, and then click OK to apply the new settings.

Increasing the retrieval timeout option for large CRLs for a domain

⇒⇒Certificate Manager "certmgr.msc" Manual

✍: Microsoft

2016-07-17, 5495🔥, 0💬