is it okay to disable the Certificate Revocation in production?

Topics: General Questions, Support
Mar 25, 2015 at 5:40 PM
In studying what the certificate revocation does - I was unable to decide if it's something that should be in place in prod - can anyone check in on this to help clarify? I get that it causes a delay - but is it a necessary delay - in production?
thanks in advance!
Mar 25, 2015 at 5:41 PM
paisleygo wrote:
In studying what the certificate revocation does - I was unable to decide if it's something that should be in place in prod - can anyone check in on this to help clarify? I get that it causes a delay - but is it a necessary delay - in production?
thanks in advance!
Disable Certificate Revocation List checks
If ($xmlinput.Configuration.Install.Disable.CertificateRevocationListCheck -eq "True")
Mar 25, 2015 at 5:43 PM
You should only disable Certificate Revocations Checks if your SharePoint server does not have access to the Internet. As it will try to check if those certificates are valid, and obviously fail as there is no internet access. This is what causes the delay.

Cheers,
Ivan
Mar 25, 2015 at 5:57 PM
Got it (brain hasn't kicked in yet this morning) Thanks for the speedy response Ivan!