Certificate Revocation List (CRL) Tasks

Creating a Certificate Revocation List (CRL) Object

This task allows you to create a CRL Distribution Point object in eDirectory. This object can be created in any container in the eDirectory tree. As part of the creation process, you will be asked to provide a CRL. You will need to obtain a CRL from a third-party CA. If you don't have a CRL file at the time you create the CRL Distribution Point object, you can still create the object and import the CRL later.

1. Log in to the eDirectory tree as an administrator with the appropriate rights.

   To view the appropriate rights for this task, see Creating a CRL Object.

2. Start ConsoleOne.

3. Right-click in any container in the tree > click New > click Object > click cRLDistributionPoint > click OK.

4. Type a name for the object > click Next.

5. Paste a copy of the CRL in the field or read it from a CRL file.

6. Click Finish to create the object.

Importing a Third-Party CRL

This task allows you to import a CRL signed by a third-party certificate authority into a CRL Distribution Point object. This option is only active if no CRL is present in the object.

1. Log in to the eDirectory tree as an administrator with the appropriate rights.

   To view the appropriate rights for this task, see Importing a third-party CRL.

2. Start ConsoleOne.

3. Double-click the CRL Distribution Point object that you want to import the CRL into.

4. Click Import.

   If the Import button is not active, it means that this CRL Distribution Point object already contains a CRL. You can replace the existing CRL by clicking Replace.

5. Paste a copy of the CRL in the field or read it from a CRL file.

6. Click Finish.

Exporting a Third-Party CRL

You can export the CRL that is contained in the CRL Distribution Point object to a file.

1. Log in to the eDirectory tree as an administrator with the appropriate rights.

   To view the appropriate rights for this task, see Exporting a third-party CRL.

2. Start ConsoleOne.

3. Double-click the CRL Distribution Point object that you want to export the CRL from.

4. Click Export.

   If the Export button is not active, it means that this CRL Distribution Point object does not contain a CRL. You can import a CRL by clicking Import.

5. Select the format you want to save the CRL to (binary encoded DER or text encoded Base64). Specify a filename.

   The extension for the file is .CRL by default. You can also browse to select the location that the file will be saved to.

6. Click Export.

Replacing a Third-Party CRL

1. Log in to the eDirectory tree as an administrator with the appropriate rights.

   To view the appropriate rights of this task, see Replacing a third-party CRL.

2. Start ConsoleOne.

3. Double-click the CRL Distribution Point object that contains the CRL you want to replace.

4. Click Replace.

   If the Replace button is not active, it means that this CRL Distribution Point object does not contain a CRL. You can import a CRL by clicking Import.

5. Paste a copy of the new CRL in the field or read it from a CRL file.

6. Click Finish.

Viewing a Third-Party CRL's Properties

1. Log in to the eDirectory tree as an administrator with the appropriate rights.

   To view the appropriate rights for this task, see Viewing a third-party CRL.

2. Start ConsoleOne.

3. Double-click CRL Distribution Point object.