Mike, Others have experienced similar issues - see URLs below.
The probable solution is to add the CA that generated your certificate to IE's (and Exchange's) list of "trusted CAs". If it's a RACF "self-signed" certificate, then add whatever it specified as the issuing CA in the certificate. http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/299c8ebe-223c-43ab-8cbc-c8221991813a http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/d8874af1-a342-4909-a94b-2506cc95f51f Cheers, Alan -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Ward, Mike S Sent: Monday, July 12, 2010 13:14 To: IBM-MAIN@bama.ua.edu Subject: CRL Hello all, We have z/os V1.7. I have a question. We have generated a certificate for Exchange 2010 using RACF (a process that we have used in the past and works) when they try to install the certificate they receive: "The certificate status could not be determined because the revocation check failed." We believe that this is an exchange 2010 problem because the same process works for exchange 2007. Now the windows admins are asking us where we get our CRL's from. I think that CRL stands for Certificate revocation list. I'm at a loss as to what to tell them. Can someone tell me where I can locate the CRL for the z/os mainframe? ========================== This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
