27 Jan 2011

Exchange 2010 - Certificate Status: RevocationCheckFailure

I was configuring Exchange 2010 for a customer who bought GoDaddy certificates to use with Exchange. When I tried to verify installed certificate using Get-ExchangeCertificte | FL
command, the certificate Status was RevocationChekFailure. The certificate was displayed correctly under MMC console, so it was obviously problem with access to CRL Publication Point.
Exchange 2010 was installed on Windows 2008 R2 and a proxy server was needed to connect to the Internet.
Exchange 2010 uses WinHttp service to connect to the Internet. This service doesn't import proxy settings from Internet Explorer configuration.
You have two options to configure WinHttp:
1. WPAD - If WPAD is deployed on the network then WinHttp service will get configuration automatically
2. Manual configuration - If you don't have WPAD you must configure WinHttp service manually. I'm going to describe this method.

To verify current settings:
Run netsh winhttp show proxy from Command Line. You will see your current settings. Direct access means that there is no proxy for WinHttp

To set proxy run the following command:
netsh winhttp set proxy proxy-server="http=yourhtpproxyserver:8080;https=yourhttpsproxyserver:8080" bypass-list="*.yourADdomain.local"

The above command is correct only for Windows 2008 R2, for Windows 2008 use this command:
netsh winhttp set proxy-server="http=yourhtpproxyserver:8080;https=yourhttpsproxyserver:8080" bypass-list="*.yourADdomain.local"

Optionally you can clear CRL Cache with the following command certutil -urlcache crl delete

Notice: Please remember to set value of bypass-list parameter to your local Active Directory domain FQDN. If you pass over this part you won't be able to connect to your Exchange using Exchange Management Console nor PowerShell.

1 comment:

Unknown said...

Why casinos are rigged - Hertzaman - The Herald
In the UK, casino apr casino games are rigged and 바카라 there is evidence mens titanium wedding bands of fraud, crime or disorder or an individual's involvement. There are also many