46 lines
4.3 KiB
Markdown
46 lines
4.3 KiB
Markdown
**************************************************************************************************************
|
|
|
|
|
|
**Configure AIA**
|
|
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt"
|
|
|
|
**Configure AIA with OCSP**
|
|
certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%1_%3%4.crt\n2:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%1_%3%4.crt\n32:http://cbp-edme-npe-wes.cbp.dhs.gov/ocsp\n32:http://cbp-edme-npe-wes2.cbp.dhs.gov/ocsp"
|
|
**Updated 6/18/2024**
|
|
~~certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%1_%3%4.crt\n32:http://~~~~cbp-npe.cbp.dhs.gov~~~~/ocsp"~~
|
|
|
|
**Updated 7/02/2024**
|
|
==certutil -setreg CA\CACertPublicationURLs "1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:http://==cbp-npe.cbp.dhs.gov==/PKI/%1_%3%4.crt\n32:http://==cbp-npe.cbp.dhs.gov==/ocsp"==
|
|
|
|
**Review Settings**
|
|
Confirm settings: certutil -getreg CA\CACertPublicationURLs
|
|
|
|
**Configure CDP**
|
|
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
|
|
|
|
Replace ==highlighted in Blue== with correct value
|
|
Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://cbp-edme-npe-wes.cbp.dhs.gov/PKI/%3%8%9.crl\n6:http://cbp-edme-npe-wes2.cbp.dhs.gov/PKI/%3%8%9.crl\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
|
|
|
|
**Updated 6/18/2024**
|
|
~~Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://~~~~cbp-npe.cbp.dhs.gov~~~~/PKI/%3%8%9.crl~~~~\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"~~
|
|
|
|
******************************************************************************************************************************************
|
|
**Updated 7/02/2024**
|
|
==Certutil -setreg CA\CRLPublicationURLs "65:C:\Windows\system32\CertSrv\CertEnroll\%3%8%9.crl\n65:ldap:///CN=CBP-EDME-NPE-CA6,CN=TNWG01A-V3453,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov\n6:http://==cbp-npe.cbp.dhs.gov==/PKI/%3%8%9.crl==\n65:file://\\cbp-edme-npe-wes.cbp.dhs.gov\PKI\%3%8%9.crl\n65:file://\\cbp-edme-npe-wes2.cbp.dhs.gov\PKI\%3%8%9.crl"
|
|
|
|
|
|
ldap:///CN===CBP-NPE-CA1==,CN===TNWG01A-V1650==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA2==,CN===TNWG01A-V1651==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA7==,CN===TNWG01A-V3452==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA6==,CN===TNWG01A-V3453==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA3==,CN===TNWG01A-V3455==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA4==,CN===TNWG01A-V3456==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
ldap:///CN===CBP-EDME-NPE-CA5==,CN===TNWG01A-V3457==,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=ad,DC=cbp,DC=dhs,DC=gov
|
|
|
|
|
|
ldap:///CN=CBP-SAT-EDME-NPE-CA2,CN=TNWG01A-V3586,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=sat,DC=cbp,DC=dhs,DC=gov
|
|
|
|
**Test certificate**
|
|
certutil -f -urlfetch -verify c:\temp\test.cer
|
|
|
|
[http://CBP-EDME-NPE-WES.cbp.dhs.gov/PKI/CBP-EDME-NPE-CA5.crl](http://CBP-EDME-NPE-WES.cbp.dhs.gov/PKI/CBP-EDME-NPE-CA5.crl) |