Skip to content

Instantly share code, notes, and snippets.

@jespernohr
Last active October 23, 2016 10:46
Show Gist options
  • Save jespernohr/4563a4e7c477618c2dfa87c96ed034b5 to your computer and use it in GitHub Desktop.
Save jespernohr/4563a4e7c477618c2dfa87c96ed034b5 to your computer and use it in GitHub Desktop.
$crllist = Get-CACrlDistributionPoint; foreach ($crl in $crllist) {Remove-CACrlDistributionPoint $crl.uri -Force};
Add-CACRLDistributionPoint -Uri E:\pki\%3%8%9.crl -PublishToServer -Force
Add-CACRLDistributionPoint -Uri http://pki.azureedge.net/%3%8%9.crl -AddToCertificateCDP -Force
$aialist = Get-CAAuthorityInformationAccess; foreach ($aia in $aialist) {Remove-CAAuthorityInformationAccess $aia.uri -Force};
Add-CAAuthorityInformationAccess -AddToCertificateAia http://pki.azureedge.net/%1_%3%4.crt -Force
Certutil -setreg CA\CRLPeriodUnits 2
Certutil -setreg CA\CRLPeriod "Weeks"
Certutil -setreg CA\CRLDeltaPeriodUnits 1
Certutil -setreg CA\CRLDeltaPeriod "Days"
Certutil -setreg CA\CRLOverlapPeriodUnits 12
Certutil -setreg CA\CRLOverlapPeriod "Hours"
Certutil -setreg CA\ValidityPeriodUnits 5
Certutil -setreg CA\ValidityPeriod "Years"
certutil -setreg CA\AuditFilter 127
restart-service certsvc
certutil -crl
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment