Created
February 23, 2018 13:19
-
-
Save Celoxocis/13ab36622922a3e5d5bbb0b919237d28 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $crllist = Get-CACrlDistributionPoint; foreach ($crl in $crllist) {Remove-CACrlDistributionPoint $crl.uri -Force}; | |
| Add-CACRLDistributionPoint -Uri C:\Windows\System32\CertSrv\CertEnroll\BEDROCK-ECA%8%9.crl -PublishToServer -PublishDeltaToServer -Force | |
| Add-CACRLDistributionPoint -Uri file://\\webserv1.bedrock.domain\pki\BEDROCK-ECA%8%9.crl -PublishToServer -PublishDeltaToServer -Force | |
| Add-CACRLDistributionPoint -Uri http://pki.bedrock.domain/pki/BEDROCK-ECA%8%9.crl -AddToCertificateCDP -AddToFreshestCrl -Force | |
| Get-CAAuthorityInformationAccess | where {$_.Uri -like '*ldap*' -or $_.Uri -like '*http*' -or $_.Uri -like '*file*'} | Remove-CAAuthorityInformationAccess -Force | |
| Add-CAAuthorityInformationAccess -AddToCertificateAia http://pki.bedrock.domain/pki/BEDROCK-ECA%3%4.crt -Force | |
| certutil.exe -setreg CA\CRLPeriodUnits 2 | |
| certutil.exe -setreg CA\CRLPeriod "Weeks" | |
| certutil.exe -setreg CA\CRLDeltaPeriodUnits 1 | |
| certutil.exe -setreg CA\CRLDeltaPeriod "Days" | |
| certutil.exe -setreg CA\CRLOverlapPeriodUnits 12 | |
| certutil.exe -setreg CA\CRLOverlapPeriod "Hours" | |
| certutil.exe -setreg CA\ValidityPeriodUnits 5 | |
| certutil.exe -setreg CA\ValidityPeriod "Years" | |
| certutil.exe -setreg CA\AuditFilter 127 | |
| restart-service certsvc |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment