%3CLINGO-SUB%20id%3D%22lingo-sub-1128369%22%20slang%3D%22en-US%22%3EThe%20EASY%20way%20of%20CRL%20troubleshooting%20in%20Windows%20Vista%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1128369%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%20First%20published%20on%20TECHNET%20on%20Dec%2016%2C%202006%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20Easy%20CRL%20troubleshooting%20is%20just%20one%20click%20away%20i%20%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20n%20Windows%20Vista%20%3C%2FSPAN%3E%20!%20Read%20on%20to%20learn%20how%20to%20enable%20crypto%20API2%20(CAPI2)%20logging.%26nbsp%3BFor%20Windows%20XP%20and%20Windows%20Server%202003%20you%20still%20have%20to%20use%20%3CA%20title%3D%22CAPIMON%22%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fdownloads%2Fdetails.aspx%3Ffamilyid%3D0bfe87a8-4e79-4441-9d4c-0cab35d49a01%26amp%3Bdisplaylang%3Den%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20CAPIMON%20%3C%2FA%3E%20to%20find%20out%20what's%20going%20wrong%20with%20CRL%20checking.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo3%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3ELog%20on%20with%20local%20administrator%20permissions%20to%20the%20computer%20where%20the%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20certificate%20verification%20failure%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20occurs.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo3%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20Click%20the%20%3CSTRONG%20style%3D%22mso-bidi-font-weight%3A%20normal%3B%22%3E%20Start%20%3C%2FSTRONG%3E%20menu.%20On%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Administrative%20Tools%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20menu%2C%20click%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Event%20Viewer%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo3%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3EIn%20the%20left%20pane%2C%20expand%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Application%20Logs%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20container%2C%20expand%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Microsoft%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22font-weight%3A%20normal%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%2C%20expand%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Windows%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22font-weight%3A%20normal%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%2C%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20and%20then%20expand%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20CAPI2%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20container.%20Select%20the%20Operational%20container.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo3%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3EOn%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Action%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20menu%2C%20click%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Properties%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo3%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3EIn%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20General%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20tab%2C%20select%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Enable%20logging%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22font-weight%3A%20normal%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20check%20box%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%2C%20adjust%20the%20maximum%20log%20size%20and%20log%20maintenance%20according%20to%20your%20needs%2C%20and%20then%20click%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20OK%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%22%3EWith%20CAPI2%20logging%20turned%20on%2C%20all%20chain%20validation%20operations%20are%20logged%20in%20the%20event%20log%3A%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Italic%22%3E%20%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-style%3A%20normal%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-bidi-font-size%3A%209.0pt%3B%22%3E%20%3CSTRONG%3E%20Application%20logs%20-%20Microsoft%20-%20Windows%20-%20CAPI2%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%22%3E%20.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%22%3E%20To%20find%20out%20what%20goes%20wrong%20with%20chain%20validation%20do%20the%20following%3A%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo2%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20Open%20the%20event%20log%20on%20the%20computer%20where%20the%20chain%20validation%20fails%20and%20make%20sure%20CAPI2%20logging%20is%20enabled.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo2%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3EIn%20%3CSTRONG%20style%3D%22mso-bidi-font-weight%3A%20normal%3B%22%3E%20Event%20Viewer%20%3C%2FSTRONG%3E%20%2C%20expand%20the%20following%20container%20structure%20in%20the%20left%20pane%3A%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Italic%22%3E%20%3CSTRONG%20style%3D%22mso-bidi-font-weight%3A%20normal%3B%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-style%3A%20normal%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20Application%20logs%20-%20Microsoft%20-%20Windows%20-%20CAPI2%20-%20Operational%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo2%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20In%20the%20right%20pane%2C%20select%20a%20log%20entry.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo2%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3EIn%20the%20bottom%20window%2C%20click%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Details%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20tab%2C%20and%20then%20select%20the%20%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22Bold%22%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CSTRONG%3E%20Friendly%20View%20%3C%2FSTRONG%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CBR%20%2F%3E%3CDIV%20class%3D%22NumberedList1%22%20style%3D%22margin%3A%203pt%200cm%203pt%2018pt%3B%20mso-list%3A%20l0%20level1%20lfo2%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20You%20will%20clearly%20see%20which%20process%20has%20performed%20a%20CAPI2%20operation%20and%20what%20the%20actual%20status%20code%20was.%20%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%20%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%22%3E%20Additional%20information%20about%20PKI%20troubleshooting%20on%20Vista%20is%20available%20on%20Technet.%20Refer%20to%20%3CA%20title%3D%22Troubleshooting%20PKI%20Problems%20on%20Windows%20Vista%22%20href%3D%22http%3A%2F%2Ftechnet2.microsoft.com%2FWindowsVista%2Fen%2Flibrary%2F771e1f29-4eba-40c9-9193-60043889bbf41033.mspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20Troubleshooting%20PKI%20Problems%20on%20Windows%20Vista%20%3C%2FA%3E%20or%20download%20the%20documentation%20from%20the%20Microsoft%20%3CA%20title%3D%22Troubleshooting%20PKI%20Problems%20on%20Windows%20Vista%22%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fdownloads%2Fdetails.aspx%3FFamilyID%3Dfe8eb7ea-68da-4331-9d38-bdbf9fa2c266%26amp%3BDisplayLang%3Den%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20Download%20Center%20%3C%2FA%3E%20.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%3CSPAN%20style%3D%22color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%22%3E%20Carsten%20%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1128369%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20published%20on%20TECHNET%20on%20Dec%2016%2C%202006%20Easy%20CRL%20troubleshooting%20is%20just%20one%20click%20away%20in%20Windows%20Vista!%20Read%20on%20to%20learn%20how%20to%20enable%20crypto%20API2%20(CAPI2)%20logging.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1128369%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECarstenKinder%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

First published on TECHNET on Dec 16, 2006

Easy CRL troubleshooting is just one click away i n Windows Vista ! Read on to learn how to enable crypto API2 (CAPI2) logging. For Windows XP and Windows Server 2003 you still have to use CAPIMON to find out what's going wrong with CRL checking.




    1. Log on with local administrator permissions to the computer where the certificate verification failure occurs.

 


    1. Click the Start menu. On the Administrative Tools menu, click Event Viewer .

 


    1. In the left pane, expand the Application Logs container, expand Microsoft , expand Windows , and then expand the CAPI2 container. Select the Operational container.

 


    1. On the Action menu, click Properties .

 


  1. In the General tab, select the Enable logging check box , adjust the maximum log size and log maintenance according to your needs, and then click OK .

     

 

With CAPI2 logging turned on, all chain validation operations are logged in the event log: Application logs - Microsoft - Windows - CAPI2 .

 

 

 

 

 

 

 

To find out what goes wrong with chain validation do the following:

 

 




    1. Open the event log on the computer where the chain validation fails and make sure CAPI2 logging is enabled.

 


    1. In Event Viewer , expand the following container structure in the left pane: Application logs - Microsoft - Windows - CAPI2 - Operational

 


    1. In the right pane, select a log entry.

 


    1. In the bottom window, click the Details tab, and then select the Friendly View .

 


  1. You will clearly see which process has performed a CAPI2 operation and what the actual status code was.


Additional information about PKI troubleshooting on Vista is available on Technet. Refer to Troubleshooting PKI Problems on Windows Vista or download the documentation from the Microsoft Download Center .

 

Carsten