Steps to modify pkiserv.conf general settings

Before you begin

Refer to the sample configuration file directives in Sample PKI Services configuration file directives for IdenTrust compliance.
For more information about creating directives for certificate policies, see Using certificate policies in Customizing PKI Services.

Procedure

Perform the following steps to modify the PKI Services configuration file (pkiserv.conf) to configure certain general settings for IdenTrust compliance:

Change your current setting to TimeBetweenCRLs=30m.
________________________________________________________________
Change your current setting to CRLDuration=60m.
________________________________________________________________
Optionally, change your current setting to CRLDistSize=0. This change is required only if your OCSP responder does not support distribution point CRLs.
________________________________________________________________

When you are done: You have configured your general PKI Services settings for IdenTrust compliance.