I recently took over management of a few environments which have security locked down so internet access is not allowed. The problem that I am running into is misc server related functions trying to access the internet and locking up until the connection times out. This is usually related to validation of certificates for programs, dll files, and so on. How can I make things act properly without the online validation? For instance a custom IIS application locks up for the first 60 seconds or so because it is trying to validate certificates of dll files being loaded into memory.
Now on the domain I have disabled the following checks via GPO:
Check for server certificate revocation
Check for publisher's certificate revocation
They seem to have set on the servers but we still see large amounts of latency restarting IIS and performing some admin operations in Windows. Is there a setting that I am missing? Does anyone have ideas on how to essentially let Windows and applications know they are offline and to cut out the checks?
I recently took over management of a few environments which have security locked down so internet access is not allowed. The problem that I am running into is misc server related functions trying to access the internet and locking up until the connection times out. This is usually related to validation of certificates for programs, dll files, and so on. How can I make things act properly without the online validation? For instance a custom IIS application locks up for the first 60 seconds or so because it is trying to validate certificates of dll files being loaded into memory.
Now on the domain I have disabled the following checks via GPO:
Check for server certificate revocation
Check for publisher's certificate revocation
They seem to have set on the servers but we still see large amounts of latency restarting IIS and performing some admin operations in Windows. Is there a setting that I am missing? Does anyone have ideas on how to essentially let Windows and applications know they are offline and to cut out the checks?
Thanks All
Share this post
Link to post
Share on other sites