Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 199

3. Select the issuing point name below the Issuing Points entry.
4. Configure how and how often the CRLs are updated by supplying information in the Update tab
for the issuing point. This tab has two sections, Update Schema and Update Frequency.
• The Update Schema section has the following options:
• Enable CRL generation. This checkbox sets whether CRLs are generated for that issuing
point.
• Generate full CRL every # delta(s). This field sets how frequently CRLs are created in
relation to the number of changes.
• Extend next update time in full CRLs. This adds the nextUpdate field to the published
CRLs, which indicates the date by which the next CRL will be issued.
• The Update Frequency section sets the different intervals when the CRLs are generated and
published to the directory.
• Every time a certificate is revoked or released from hold. This sets the Certificate
Manager to generate the CRL every time it revokes a certificate. The Certificate Manager
attempts to publish the CRL to the configured directory whenever it is generated. Publishing
a CRL can be time consuming if the CRL is large. Configuring the Certificate Manager to
publish CRLs every time a certificate is revoked may engage the server for a considerable
amount of time; during this time, the server will not be able to update the directory with any
changes it receives.
This setting is not recommended for a standard installation. This option should be selected
to test revocation immediately, such as testing whether the server publishes the CRL to a flat
file.
Configuring CRLs for Each Issuing Point
177