Security

Once we add the CRL on the clear pass Administration--->Certificate-Revocation list -->URL

May i know where we can view the Serial numbers of certificates which are revoked on the CPPM?

and i have the EAP-tls service is there anything else i need to confgure to do CRL check?

You would need to look at the CRL contents directly via the URL. We do not have a way to view the contents in the GUI. 

So i need to use the URL put on a web browser and able to see the Serail numbers of Certificates.

Is my understanding is correct?

Yes, or look at your Certificate Authority. Raw CRLs and OCSP responses were never really designed for human consumption :)

Thanks a lot

Hi,

After you configured the CRL, did you then have to reference this in your service? I'm reviewing our EAP-TLS service but can only see references to OSCP configuration? 

With this in mind, is it the case that once the CRL is configured that the EAP-TLS service inherently uses this CRL without it being explicitly configured?

Thanks

Agree regarding the OCSP comment, we are being given a steer by our internal PKI team to use a CRL :(

Thanks for confirming.