Comments on: Exchange 2010 Certificate Revocation Checks and Proxy Settings

By: Paul Cunningham

Paul Cunningham — Sat, 17 Mar 2012 13:27:50 +0000

As the article suggests, using this tip can break your Exchange tools connection to the server. The solution is explained in the post – use a bypass in your IE settings or when running the netsh command.

By: Imi

Imi — Tue, 13 Mar 2012 12:35:57 +0000

Using the above has broken my connection and I cant get it back. EMC wont connect. STUCK

By: Andrew

Andrew — Mon, 27 Feb 2012 06:45:18 +0000

What if you are using a proxy.pac on IE for proxy settings, how do u proceed in the shell because i also have the revocation check failure issue?

By: Matt

Matt — Fri, 24 Feb 2012 01:22:01 +0000

Sorted…

I found in our case we needed to use an IP address vs a hostname, had to state the port as it was not a standard one, had to include a bypass for the domain the server was in,

netsh winhttp set proxy proxy-server=”http=192.168.0.1:8090;https=192.168.0.1:8090″ bypass-list=”*.mydomain.co.nz”

…after that we “refreshed” and CRL error disappeared and the certificate red x changed to a tick inidcating no issues.

We also had an invalid CRL URL in the Thawte certificate but thats another story we managed to sort with a host file entry pointing at the IP address of the correct server.

By: Matt

Matt — Fri, 24 Feb 2012 00:26:40 +0000

At what point does the CRL URL get checked? Can it be manually initiated?

By: Zannuzi

Zannuzi — Tue, 20 Dec 2011 01:37:04 +0000

Excellent !!!! no where i could find this info. thankssss

By: Steve

Steve — Fri, 25 Nov 2011 03:14:19 +0000

Thanks for the info, this helped me alot!!

By: Tobias

Tobias — Thu, 10 Feb 2011 21:36:05 +0000

Thanks as well.. fixed my issues too!

By: Chantal

Chantal — Thu, 13 Jan 2011 13:13:16 +0000

Finally, we found that our proxy server was preventing the Exchange servers to access the required crl check
URLs.

So we had to create a isa access rule to allow all exch servers to access the URLs and now, it works fine !

By: Neil

Neil — Thu, 13 Jan 2011 01:32:11 +0000

Huge Thanks! Solved my issue.

Neil