I am trying to publish CRL to file share location which is on a different server in the environment joined to the domain. Though i am able to publish the CRL to the file share ,but when i open my ‘PKIVIEW.msc’ to check for the CDPs and AIAs it shows that the CDP cannot be downloaded. I have also checked from the client computers using the ‘certutil –url abc.cer’ command but there also the CDP shows unreachable.

(abc.cer -> Certificate issued to clients)

The permissions which i have applied are :

1. the CRL folder is in C drive of the server.

2. I have given modify permissions to the CA computer and the administrator on that shared folder.

3. I have also given security permissions to the CA computer.

4. I have configured the CRL as ->
file://\\Server1.contoso.com\dump\<CaName.crl

(Note -> I have also tried a different format for the url but still the CRLS gets published to the file share but through PKIVIEW.msc and client computers it is not getting downloaded.)

5. I am not using delta CRL. The duration of Base CRL is 1 weeks.

Thanks and Regards,
Rahul Kumar

Thank you. I correct my post.