Managing Certificate Revocation Lists

Certificate revocation lists (CRLs) makes known any certificate and key that either client or server users should no longer trust. If data in a certificate changes, for example, a user changes offices or leaves the organization before the certificate expires, the certificate is revoked, and its data appears in a CRL.

ProcedureTo Install a CRL

To obtain a CRL from a CA, perform the following steps:

  1. Obtain the CA's URL for downloading CRLs.

  2. Enter the URL in your browser to access the site.

  3. Follow the CA's instructions for downloading the CRL to a local directory.

  4. Go to the configuration page in administration console.

  5. Click the Configuration> Configuration Name > Certificates > Certificate Authorities tab.

  6. Click Install CRL button

  7. Enter the full path name to the associated file or browse and select the file.

  8. Click OK.

  9. Click Deploy for changes to take effect.