4.3 KiB
Configure AIA
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt"
Configure AIA with OCSP
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt\n32:http://cbp-edme-npe-wes.cbp.dhs.gov/ocsp\n32:http://cbp-edme-npe-wes2.cbp.dhs.gov/ocsp"
Updated 6/18/2024
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll%1_%3%4.crt\n2:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%1_%3%4.crt\n32:http://~~~~cbp-npe.cbp.dhs.gov~~~~/ocsp"
Updated 7/02/2024
==certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll%1_%3%4.crt\n2:http://==cbp-npe.cbp.dhs.gov==/PKI/%1_%3%4.crt\n32:http://==cbp-npe.cbp.dhs.gov==/ocsp"==
Review Settings
Confirm settings: certutil -getreg CA\CACertPublicationURLs
Configure CDP
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll%3%8%9.crl\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\cbp-edme-npe-wes.cbp.dhs.gov\PKI%3%8%9.crl\n65:file://\cbp-edme-npe-wes2.cbp.dhs.gov\PKI%3%8%9.crl"
Replace ==highlighted in Blue== with correct value
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll%3%8%9.crl\n65:ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\cbp-edme-npe-wes.cbp.dhs.gov\PKI%3%8%9.crl\n65:file://\cbp-edme-npe-wes2.cbp.dhs.gov\PKI%3%8%9.crl"
Updated 6/18/2024
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%3%8%9.crl~~~~\n65:file://\cbp-edme-npe-wes.cbp.dhs.gov\PKI%3%8%9.crl\n65:file://\cbp-edme-npe-wes2.cbp.dhs.gov\PKI%3%8%9.crl"
Updated 7/02/2024
==Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://==cbp-npe.cbp.dhs.gov==/PKI/%3%8%9.crl==\n65:file://\cbp-edme-npe-wes.cbp.dhs.gov\PKI%3%8%9.crl\n65:file://\cbp-edme-npe-wes2.cbp.dhs.gov\PKI%3%8%9.crl"
ldap:///CN===CBP-NPE-CA1==,CN===TNWG01A-V1650==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA7==,CN===TNWG01A-V3452==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA6==,CN===TNWG01A-V3453==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA3==,CN===TNWG01A-V3455==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA4==,CN===TNWG01A-V3456==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN===CBP-EDME-NPE-CA5==,CN===TNWG01A-V3457==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
ldap:///CN=CBP-SAT-EDME-NPE-CA2,CN=TNWG01A-V3586,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=sat,DC=cbp,DC=dhs,DC=gov
Test certificate
certutil -f -urlfetch -verify c:\temp\test.cer
http://CBP-EDME-NPE-WES.cbp.dhs.gov/PKI/CBP-EDME-NPE-CA5.crl