Try Re-installing the Exchange 2010 Update Rollup for Exchange. Here I am installing it from the command prompt.
Open Command Prompt in Administrator Mode. Cd to the location where update rollup is present.
Note: You can even run it by double-clicking on the update file.
The Certificate Revocation List(CRL) error will not appear now. Proceed with a successful update of Exchange Server 2010.
Alternate way to disable Certificate Revocation check:
- Open Regedit on the Exchange Server going to be updated.
- Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing.
- Change Value “State” to 146944 Decimal or 0x00023e00 Hexadecimal.
- Restart the Exchange Server and try performing the rollup update again. It will complete successfully
Note: Disabling the revocation check in the production environment is not recommended. Please do enable it back once the update is successful.
Understanding its importance:
Enabling this option will help your server to check for Certificate Revocation and check whether the certificate being used has been revoked by the certificate authority before it was set to expire. It protects our clients against the use of invalid server authentication certificates as they have expired or revoked. In the Internet Explorer browser, this option is checked by default.
In our Exchange Server Update Rollup scenario, let’s find out the easy way out to disable it. I highly recommend you to enable it back once you update your Exchange Server 2010 in the production environment.
Friends, thank you so much for reading my blog. If I helped you in any way please let me know by commenting below. It is very much appreciated. I will see you in the next blog.
Ajey Kumar Gupta