Cisco Systems OL-16647-01 - page 803

33-7
Cisco ASDM User Guide
OL-16647-01
Chapter 33 Configuring Certificates
CA Certificate Authentication
The methods you select are implemented in the order in which you add them. If a method detects an error,
subsequent revocation checking methods activate.
Revocation Checking Override - Click the Consider certificate valid if revocation checking returns
errors button to ignore revocation-checking errors.
CRL Retrieval Policy Configuration
With the CRL Retrieval Policy panel, you specify either the CRL Distribution Point, or a static go-to
location for the CRL revocation checking.
• Certificate CRL Distribution Point - Click the Use CRL Distribution Point from the certificate
button to direct revocation checking to the CRL DP included on the certificate being checked.
• Static URL - Click the Use Static URLs configured below button to list specific URLs to be used
for CRL Retrieval. The URLs you select are implemented in the order in which you add them. If a
specified URL errors, subsequent URLs are accessed in order.
://—Type the location that distributes the CRLs.
CRL Retrieval Method Configuration
The CRL Retrieval Method panel lets you select the method to be used for CRL retrieval.