Configure Authority Information Access Extension

Authority information access (AIA) is a service location descriptor that is included in every certificate issued by the CA. Technically, it is one of the many properties of a certificate. It contains LDAP, HTTP, and CER file location points, which allow clients to access the CA's own certificate information. Figure 10-11 shows this property in a user certificate.

In order to let CA clients know where the OCSP service is on the network, you need to publish the OCSP URL in the AIA field. To do this, access CA properties in the Certification Authority console, switch to the Extensions tab, and select AIA in the drop-down. You will need to add a new HTTP URL; do this by clicking Add and then specifying a URL as shown on Figure 10-12. Click OK and back on the Extensions tab, ensure that the second check box is enabled, as shown on Figure 10-13.

FIGURE 10-11

AIA property in a certificate

General Details j Certification Path ¡ Show: I <AII>

General Details j Certification Path ¡ Show: I <AII>

Enrolled Agent Certificate Copy

Edit Properties,,

Copy to File.,

Learn more about certificate details

Edit Properties,,

Copy to File.,

Learn more about certificate details

FIGURE 10-12

Publishing an OCSP service location point in AIA

Add Location

A location can be any valid URL or path. Enter an HTTP, LDAP, file address, or enter a UNC or local path. To insert a variable into the URL or path, select the variable below and click Insert.



Description of selected variable:

Description of selected variable:

FIGURE 10-13

Adding an OCSP URL

flexecom -TORDCOl-CA Properties v X

Enrollment Agents | Auditing | Recovery Agents | Security L-e f Policy Module Bit Module

Bdensions Storage Certficate Managers

Select extension:

| Authority Infonnafion Access {AIA) Specify locations from which users can obtain the certificate for this CA.


r Include in the AJA extension of issued certificates

P? Indude in the onfine certificate status protocol (OCSP) extension



Was this article helpful?

0 0
The Ultimate Computer Repair Guide

The Ultimate Computer Repair Guide

Read how to maintain and repair any desktop and laptop computer. This Ebook has articles with photos and videos that show detailed step by step pc repair and maintenance procedures. There are many links to online videos that explain how you can build, maintain, speed up, clean, and repair your computer yourself. Put the money that you were going to pay the PC Tech in your own pocket.

Get My Free Ebook


  • Alfrida
    How to configure authority information access?
    9 years ago
  • samira
    How to enable the authority information access extension?
    7 years ago

Post a comment