How To: Manually Add a CDP for CRL Verification

Applies to:

Venafi Encryption Director v10

Summary:

In order for a CRL (Certificate Revocation Point) to be monitored, a CDP (CRL distribution point) that points to it must be added to a Root or Intermediate certificate in Trust Protection Platform.

More Information:

To manually add a CDP:

1. Log into WebAdmin (for versions prior to 21.2) or the Policy Tree (For 21.2 and newer) for your TPP installation.
2. Go to the Roots tree
3. Select the appropriate existing Root or Intermediate object (or import a new one)
4. Select the CRL Verification tab and the CRL Distribution Points sub-tab
5. Click the Add button
6. In the popup, specify the location of the CDP (IE: http://EVSecure-crl.verisign.com/pca3-g5.crl)
7. 
   
8. http:// and file:// are the supported URI types.
9. Add a description, if desired
10. Click OK

More information about the CRL Verification feature available here: https://docs.venafi.com/Docs/current/TopNav/Content/CRL/c-CRL-validatingCertRevocationLists.php 

and here: https://support.venafi.com/entries/24847797-Info-CRL-Verification