Edit

Share via


Remove-CACrlDistributionPoint

Removes the URI for the CRL distribution point (CDP) from the CA.

Syntax

Remove-CACrlDistributionPoint
      [-Uri] <String>
      [-AddToCertificateCdp]
      [-AddToFreshestCrl]
      [-AddToCrlCdp]
      [-AddToCrlIdp]
      [-PublishToServer]
      [-PublishDeltaToServer]
      [-Force]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

The Remove-CACRLDistributionPoint cmdlet removes the uniform resource identifier (URI) for the certificate revocation list (CRL) distribution point from the certification authority (CA).

Examples

Example 1: Remove all URIs for all distribution points for the specified URI

PS C:\> Remove-CACrlDistributionPoint -URI "http://corp.contoso.com/rootca.crl"

This command removes all URIs for all distribution points that contain the specified URI value http://corp.contoso.com/rootca.crl.

Example 2: Remove the URIs for all distribution points for the CDP extension of issued certificates

PS C:\> Remove-CACrlDistributionPoint -Uri "http://corp.contoso.com/rootca.crl" -AddToCertificateCdp

This command removes only the URIs that are set to a value of http://corp.contoso.com/rootca.crl and for which the AddToCertificateCdp parameter is set.

Example 3: Remove the URIs for all distribution points for the CDP and IDP extensions of issued certificates

PS C:\> Remove-CACrlDistributionPoint -Uri "http://www.contoso.com/pki/orca.crl" -AddToCertificateCdp -AddToCrlIdp

This command removes only the URIs that are unique to the URI named http://www.contoso.com/pki/orca.crl and the combination of flags that are set or included with the AddToCertificateCdp and AddToCrlIdp parameters.

Parameters

-AddToCertificateCdp

Indicates that the cmdlet removes the CDP extension of issued certificates.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToCrlCdp

Indicates that the cmdlet removes the CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToCrlIdp

Indicates that the cmdlet removes the IDP extension of issued certificates.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AddToFreshestCrl

Indicates that the cmdlet removes the most recent CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PublishDeltaToServer

Indicates that the cmdlet removes the delta CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-PublishToServer

Indicates that the cmdlet removes the base CRL.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Uri

Specifies the uniform resource identifier (URI) for the distribution point ___location of the certificate revocation list (CRL). This is the ___location from where status information about certificate revocation has been retrieved and/or the ___location the CRL was published.

Type:String
Position:1
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

String

SwitchParameter

Outputs

Microsoft.CertificateServices.Administration.Commands.CA.CrlDistributionPointResult

This cmdlet returns a property named RestartCA, which when set to True indicates that the CA service (certsvc) needs to be restarted.