z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


CRL processing time

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

Processing time for an authenticated revocation request must not exceed 60 minutes. (Your OCSP responder usually provides revocation information by reading the CRLs issued by PKI Services to determine revocation status.) Therefore, the CRLs in LDAP must be refreshed with sufficient time to meet the 60-minute window.
  • Applicable PKI Services settings: TimeBetweenCRLs and CRLDuration.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014