Great. Thanks Sean ________________________________ From: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com] On Behalf Of Andrew Wnuk Sent: Thursday, November 05, 2009 5:22 PM To: pki-users(a)redhat.com Subject: Re: [Pki-users] Crl Generation question On 11/05/09 13:27, Veale, Sean wrote: Hi, Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days? If so, how do you do that? Thanks Sean _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users Yes, you can configure CA through CA console to "Update CRL ever: 1440 minutes" with "Next update grace period: 5760 minutes" or through CS.cfg . . . ca.crl.<CRL-Issuing-Point-Name>.autoUpdateInterval=1440 . . . ca.crl.<CRL-Issuing-Point-Name>.nextUpdateGracePeriod=5760 . . . Andrew