Federation Manager Installation and Upgrade Guide › Key Tool Reference › Add Revocation Information

Add Revocation Information

Use the addRevocationInfo option to specify the location of a CRL. The certificate data store references the location of the CRL.

Arguments for this option include the following:

-accessLegacyKS

Specifies that the option applies to the legacy smkeydatabase. If you do not supply this argument, the option applies to the r12.5 certificate data store.

-issueralias issuer_alias

Required. Specifies the alias of the Certificate Authority who issues the CRL.

Example: -issueralias verisignCA

-type (ldapcrl | filecrl)

Required. Specifies if the CRL is LDAP–based or file–based.

-location location

Required. Specifies the location of the CRL.

• (File-based) The full path to the file.

  Example: -location c:\crls\siteminder_root_ca.crl

• (LDAP directory service) The full path to the LDAP server node.

  Example: -location "http://localhost:880/sn=siteminderroot, dc=crls,dc=com"