miker/Compose-Files
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

migrate

Browse Source
This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Backups/Miker/.trash/Configure AIA and CDP.md
+46
View File
@@ -0,0 +1,46 @@
**************************************************************************************************************
**Configure AIA**
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt"
**Configure AIA with OCSP**
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt\n32:http://cbp-edme-npe-wes.cbp.dhs.gov/ocsp\n32:http://cbp-edme-npe-wes2.cbp.dhs.gov/ocsp"
**Updated 6/18/2024**
~~certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%1_%3%4.crt\n32:http://~~~~cbp-npe.cbp.dhs.gov~~~~/ocsp"~~
**Updated 7/02/2024**
==certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://==cbp-npe.cbp.dhs.gov==/PKI/%1_%3%4.crt\n32:http://==cbp-npe.cbp.dhs.gov==/ocsp"==
**Review Settings**
Confirm settings: certutil -getreg CA\CACertPublicationURLs
**Configure CDP**
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
Replace ==highlighted in Blue== with correct value
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
**Updated 6/18/2024**
~~Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%3%8%9.crl~~~~\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"~~
******************************************************************************************************************************************
**Updated 7/02/2024**
==Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://==cbp-npe.cbp.dhs.gov==/PKI/%3%8%9.crl==\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
ldap:///CN===CBP-NPE-CA1==,CN===TNWG01A-V1650==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA7==,CN===TNWG01A-V3452==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA6==,CN===TNWG01A-V3453==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA3==,CN===TNWG01A-V3455==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA4==,CN===TNWG01A-V3456==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA5==,CN===TNWG01A-V3457==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN=CBP-SAT-EDME-NPE-CA2,CN=TNWG01A-V3586,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=sat,DC=cbp,DC=dhs,DC=gov
**Test certificate**
certutil -f -urlfetch -verify c:\temp\test.cer
[http://CBP-EDME-NPE-WES.cbp.dhs.gov/PKI/CBP-EDME-NPE-CA5.crl](http://CBP-EDME-NPE-WES.cbp.dhs.gov/PKI/CBP-EDME-NPE-CA5.crl)