10. Install and Configure the OCSP Responder Role service

[@matthewbishop89]

Great tutorial, I was having issues until you shared the steps to revoke CA Exchange and issue new one. Next, trying to figure out why custom template is not getting displayed in dropdown.

[@davidburic538]

Hello, thanks a lot for these videos. I have one question regarding the 2-tier pki. If I have two subordinate CAs, is it possible to have just one OCSP transponder? I mean, if both my subordinate CAs would have the AIA configured to the same URL/host, which would "host" the configuration for both?

[@mus2007]

Thanks a lot for these vedeos, very helpfull

[@wisher77]

in the revocation provider properties no http base crl appears, only a ldap base crl is there. How would i manually add a http base crl or what am I doing wrong that it isn't automatically there?

[@nandalgmovie]

Are we saying even the OCSP server also have certificate Authority and Certificate Authority Web enrollment installed. I thought we need to install certificate Authority and Certificate Authority Web enrollment only in the CA server. Please clarify

[@LakshmiNarayanaRao.V]

Hello, Please create video on renewing Subordinate and OCSP renewal process. Its not there anywhere in KZbin or Internet.

[@imaneziad8827]

I can't find OCSP response signing in Enable Certificate Templates, what can be the problem?

[@hariclassic8235]

My CDP and AIA location is not working either with server fqdn or web name fqdn, Can you help?

[@kamaljeetsingh3778]

Excellent Sir !!!

[@zyzzzyzz105]

Lot of learning bro ❤️

[@_trust9994]

Thanks my friend!

[@MSFTWebCast]

Thank you too!

[@anuchaub26]

If I don't have server. Can i create certificate add ocsp ?

[@iamneo8115]

you are the best!

[@MSFTWebCast]

Thank You..

[@ahmedsaad-lk2og]

thanks

[@jeffer8762]

what is the CA exchange template for ?

[@MSFTWebCast]

CA Exchange certificate is used by key archival process.

[@jeffer8762]

@@MSFTWebCast so the step for CA Exchange certificate template is necessary ?

[@MSFTWebCast]

@@jeffer8762 yes.

[@fbifido2]

@@MSFTWebCast The Issuing server don't have CA exchange Template, so how does it give it out? I can see only 2 templates on this server: User & OCSP Responder. Do you need to add computer, domain controller, web server, etc ... what is the minimum template to fully make ADCS work properly ?

[@GTGeek88]

Wow, the accent makes it really hard to understand.

[@MSFTWebCast]

My bad, apologies but thats how I sound.

[@samuel-ff2sl]

It doesn't and this comment is unnecessarily rude.

[@RabidMullet]

@@samuel-ff2sl Agreed. This was incredibly helpful and not hard understand at all.