I have a simple scenario on my Enterprise Issuing CAs"
CRL Validity = 15 days.
I want the Next CRL publish to be on the 7th day rather than the 14th day which is only one day before the CRL expires to avoid any risks.
I ran the the following
certutil -setreg CA\CRLOverlapPeriodunits 7
certutil -setreg CA\CRLOverlapPeriod "Days"
This doesnt seen to work. Do we have a command like certutil -setreg CA\NextCRLPublish or something.
I checked for this value in the registry and its there.
Brian, Pls help.
-RAM.