Steps to modify pkiserv.conf general settings
Before you begin
- Refer to the sample configuration file directives in Sample PKI Services configuration file directives for IdenTrust compliance.
- For more information about creating directives for certificate policies, see Using certificate policies in Customizing PKI Services.
Procedure
Perform the following steps to
modify the PKI Services configuration
file (pkiserv.conf) to configure certain general
settings for IdenTrust compliance:
- Change your current setting to TimeBetweenCRLs=30m.
________________________________________________________________
- Change your current setting to CRLDuration=60m.
________________________________________________________________
- Optionally, change your current setting to CRLDistSize=0.
This change is required only if your OCSP responder does not support
distribution point CRLs.
________________________________________________________________