Check in mass WBS status (user or system)

Hello Gurus,
Does someone know if there exists a standard report allowing us to display in mass the system and the user status assigned to a WBS?
Or do we have to write a specific one using function BAPI_BUS2001_GET_STATUS?
Kind regards
Chris

hi
go to cn41n and execute by entering the list of wbs or project
and select the status from the layout.
ashis

Similar Messages

Set WBS status in Project System from CRM Status

Hi Gurus
I am figuring out a solution for how to influence WBS element status in Project Systems in ECC from the campaign/Marketing plan status in CRM. Has anyone done it before or is there any BADI for it.
Your help is greatly appreciated.
Regards
-MP

Your yourself answered your question.
"Can we create our own list of system status"
"Our own" status creation and maintenance feature within SAP in called "User Status".
Please follow link below to have additional information regarding system status.
link: [http://help.sap.com/saphelp_erp60/helpdata/en/a9/8a853488601e33e10000009b38f83b/frameset.htm]

WBS status locked - system allows consumption

Dear Experts ,
I need expert opinion on the following two points.
1. My WBS status is locked. But the system allows consumption of materail (ie 261 movement) against production order assigned to the WBS
2. My WBS status is locked. But the system allows to create schedule lines against the scheduled agrrement assigned to the WBS.
Due to the above two phenomeneon , the system is allowing comitment & incurrence to happen even for closed WBS.
Are the functionality described above are part of standrad PS process.
If yes, then how to tackle these points. If no, then is there any PS configuration for providing checks.
Thanks & Regards,
Vishal Murmoo

Hi Khader Sir/ PSR
Thanks for the reply .
As suggested by PSR , the user status should be used to prohibit business transcation . In my case for Order Confirmation , Goods Receipts & Schedule delivery .
I made the configuration chnages for user status ( locked), which prohibits all the above mentioned transcation. This user status is mainatined for the concerned WBS .
But still i found that it is actaully not working .The system allows Order Confirmation , Goods Receipts & Schedule delivery .
against WBS having user staus locked.
Is it that i have missed some configuration.
Need experts suggestions on this matter
Regards,
Vishal

Posibilities of user and system status?

Hi CRM experts,
I've some doubts respect the user and system status configuration.
My client wants to stop the upload process (to R3 site) of a Sales Order document, regarding a specific user status. Then, they want to restore the uploading process regarding into a specific user status different from the firts one.
User Status -             System Status
Status 1 -                Stop uploading process
Status 2 -                Restore the uploading process
I made the following customizing in my status profile (assigned to my Sales Order transaction)
User Status - Transaction Control - Forbidden - Set
Status 1 -     To be distributed -    X -           X
Status 2 -     empty -           empty -           empty
When I save a Sales Order in Status 1, the BDOC is correctly generated and the document is not present in R3 environment. The problem occurs when I modify the Status, from Status 1 to Status 2. The document is in R3 environment (???) but the generated BDOC remains in Yellow light.
Is correct to implement this uploading behaviour regarding a user status like my configuration? May I implement some checks on the upload BADI better?
I need some help in these questions please.
Thanks in advance

Hi,
It might be easier if you could come to a scenario were one specific user status should trigger the distribution. Then you have a direct link between a user status & a system status, meaning that there is no need for additional coding.
If the bdoc remains in intermediate state, then that means there's an error in the queues or a short dump. check transactions smq1 & smq2 and ST22 in both systems.
Michael.

About wbs status check ----GR/IR balance check

hi,dear all
When I set wbs to "clsd",can system check the purchment order's gi/ir balance of the wbs?(the account assignment of the po is the wbs,the po's goods receive is completed,all commitment is close ,but invoice has been done partially, not complete,the gi/ir balance is not zero.)
If it can not ,is there any else method can do this?
thank you!
maojian

Hi Jian,
Since the project is not fully complete, you can use the Status "TECO". This will ensure that no fresh commitments will be allowed. If required you can even use "lock" in the WBS to lock Master data /Account assignment or "all"
Please follow the following link for various aspects of Status management in Help.sap.com
Project system --Structure ---Status management ---System Status in WBS.
Warm regards,
Srinivas Potluri

About wbs status check ----gi/ir balance check

hi,dear all:
When I set wbs to "clsd",can system check the purchment order's gi/ir balance of the wbs?(the account assignment of the po is the wbs)
If it can not ,is there any else method can do this?
thank you!

Hi Jian Mao,
Yes, when you change the WBS elemnt to "CLS" status, system will wheck any Open PR's, PO's and Final confirmation of the Activity assigned to that.
For closing the PR's or PO's set deletion flag on header or item level OR set the delivery completed flag in PO.
For Activities you need to confirm them manually using batch or one-by-one.
Hope this will answer all your requirement.
Reward me accordingly.
Harisha

Validate the user and system status

hi sap,
i have a requirment where i need to validate
if system status = ( ISTAT = 'I0002' AND " released
ISTAT = 'I0098' AND " create
ISTAT = 'I0119' ). " active
if the system status ( ISTAT = I0119 Which is ACTIVE then
it should CHANGE the user status.
if the system status ( ISTAT = I0002 Which is RELEASED then
It should NOT CHANGE the user status.
if the system status ( ISTAT = I0098 Which is CREATE then
It should NOT CHANGE the user status.
I have and internal table like this but i dont get the data what is the worng can you pls tel me where i went wrong
how do i validate the above formula?
data:begin of wa_itab,
spras TYPE tj02t-spras,
istat TYPE tj02t-istat,
end of wa_itab.
data: sys_itab like standard table of wa_itab.
SELECT spras
istat FROM tj02t
INTO TABLE sys_itab
WHERE spras = 'E'
AND ( istat = 'I0002' AND
ISTAT = 'I0098' AND
ISTAT = 'I0119' ).

Hi ,
Use this.
DATA:BEGIN OF wa_itab,
spras TYPE tj02t-spras,
istat TYPE tj02t-istat,
END OF wa_itab.
DATA: sys_itab LIKE STANDARD TABLE OF wa_itab.
SELECT spras
istat FROM tj02t
INTO TABLE sys_itab
WHERE spras = 'EN'
AND istat in ('I0002','I0098','I0119').
Regards,
Vijay

System Status & User Status Fields/Tables for PM Order

Hi All,
May I know the PM Order System Status & User Status Field Names & Tables??
Sundar

Dear,
Table- JEST to get the status of the order &
Table- TJ02T to get the text for the internal status & TJ30 to get the text of external status.
regards
sunil

CProejcts 4.0: Relation b/w System Status, User Status & Processing Status

<b>Hi All,
Can any1 pls let me know where is the relationship maintained between System status, User stauts & Processing Status of a Project in cProjects? Ex: Project status in cProjects will be, say Created (I1700). But in the table level, it stores as "00" or "10" if its Released. Where is the relation between these maintained?
Your views would be highly appreciated..
Warm Regards,
Sujay G!</b>

Hi Sujay
The processing status of a project/phase/task is maintained in the DPR_project/phase/task table. in the field PROC_STATUS_OWN.
Its data element is: DPR_TV_PROC_STATUS_OWN and domain: DPR_PROC_STATUS. The value range of the domain specifies which value means what. eg. 00 -> CREATED
Regards,
Reema.
Pl award appropriate points to all useful answers.

Mass upload of user photos in EP

Hi All,
I have to do a mass upload of user photos in EP. I tried it in two ways.
1.     In a network folder say
173.XX.XX.XXUserPhotos, I stored the photos and then I used the Mass photo upload iview, which is available inside collaboration demo role.
2.     I created a new task and given the below parameters,
1.     Task nameà MyPhotUpload
2.     Upload from folder à
173.XX.XX.XXUserPhotos
3.     Photo Typeà NORMAL
I clicked on save and then I run the task. I didnu2019t got any errors, at the same time I didnu2019t got any output also.
Then I tried it this way.
I created a nework path in System Administration à System Configuration à KM à CMà Global Services à Network Path (really sorry if I am being stupid)
Here I specified the network path and the login credential required to access this folder and named this network path as u201CMyNetWrkPathu201D
Now, I came back to mass upload ivew, there I deleted the old task and created a new task with
a.     Task Name à MyPhotoUpload2
b.     Upload from folder à MyNetWrkPath
c.     Photo Typeà NORMAL
I clicked on Save and then I run the task. Again the same result. No errors no success.
PS: I already specified the photo type check and photo size check in System Administration à System Configuration à KM à CMà Global Services àUserPhoto
Somebody please help me.
Regards,
SrinivaS

Hi,
it seems the portal doesn't have permissions to read contents from this physical folder.
Try to import a sample photo with "apply checked conditions" unchecked in mass upload iView.
If that doesn't help then try to increase the trace level to INFO for this app in Visual Administrator and see what is causing
the problems.
The location is com.sap.netweaver.kmc.people.photo.admin .
Eventuallly try to import files from local folder instead of network share.
Hope this helps.
Regards,
Ladislav

Backend checks could not be performed. Inform system admin

Hello SAP Experts,
We have encountered the error Backend checks could not be performed. Inform system admin in a lot of POs in SRM. We are using SRM 7 and SP12.
Before the error occured, the WBS elements were not maintained in SRM but the POs were created since our SHC has automatic approval.
Currently, the WBS elements are now in SRM but the POs are stucked with the error Backend checks could not be performed. Inform system admin.
We have informed the Basis team if there are any issues in the RFC connections but there is no error.
The only POs affected were the ones wherein the WBS element was not maintained before but is now maintained in SRM.
Regards,
Romeo

Hi Chandra,
Please check the Purchasing Organization and Purchasing Group in PO if they are not populated then this error is triggered. Please also check the user settings whether Purchasing organization information is maintained or not.
Regards,
Ravi G

Present Status button is unusable in Status and Tracking System

Hi everybody:
In Status and Tracking System the Present Status is unusable. It involved set for processing ,send for approval and retrieve . They are all unusable. They are not locked, but are gray !
why ??
thanks!

What sort of user is this for? If a Super user, press the Edit button first.
If another user, or this action does not enable the buttons, probably another user is blocking. Click on the 'status' link to check.
Sephen

WBS Status Profile

How to mass change WBS Status Profile?

Hi Amit,
CNMASS is the standard transaction to carry out mass change of WBS elements,network,activities,activity elements, relationships,milestones.
I doubt whether you can caary out mass change of WBS status profile directly.
You will require ABAPer to do this.
Please see one similar post on the subject in the link below.
Mass change for user fields for WBS
Regards
Tushar
PS: Reward points if useful.

Where we check the Project closing status?T.code for List of Closing Projec

Dear Guru's,
Where can we check the Project closing status? Can we change the closing status if want to do some modification, and what is the transaction code that we to view the list of closing project.
Regards,
Kalyan

1.You can find the project status ( all the status ) in any project maintenance transaction for ex. Run Cj20n > Open you project> on the basic data tab you will find the project status.
( If you want to see the status of other PS oject than click on that object, similarly you will get the status of that object on Basic data tab. )
2.Yes you can change the closing status of proejct for midification. path is clickon the object for which you want to change the closed object > Edit> Status--> Close --> Undo.
3.For the list of Project status go to CN41
on the projectno. input line click on multiple selection--> give the proejct no. list for which you wanted to see the status. -->enter --> Excute.
Report will open in screen. in that report go to toolbar and click on 'choose filed' button.(F5) -->one pop up window will open -->right handside scroll down in that window >select 'status' field and move it to left side>enter
project status will be shown against you project list. you can verify the same in maintenance txn.
If you have activated user status the same will also get populated.
You can downlaod the same in Excle file path is : Evaluation menu>export>save to file. ( via filtering in Excle you call do all the analysis realted to project status how amny are in clised status etc. )
Regards
Nitin

"Unable to check revocation" error while checking CDP from non-domain user account

Hi!
I use 3-tier PKI infrastructure:
Stand-alone offline Root CA: RootCA;
Stand-alone offline Intermediate subordinate CA: SubCA;
Enterprise CA: EntSubCA.
In certificate we have three CDP point for CRL check:
ldap:///, http:// and file://
I have Windows 2008 R2 server joined to domain.
I use command certutil –verify –urlfetch <filename.cer> >check.txt for revocation checking of certificate.
When I use domain user account for revocation checking, all OK.
I have access to any CDP and all fine.
But when i use local server user account, I haven't access to ldap:/// and process failed although all other links is OK.
My question is "why check fail with non-domain user accout while other CDP point succesfully verifed"?
Here is the logfile from local user:
Issuer:
CN=EntSubCA
DC=DED
DC=ROOT
Subject:
CN=servername.domain_name
Cert Serial Number: 5a896145000300006ee2
dwFlags = CA_VERIFY_FLAGS_ALLOW_UNTRUSTED_ROOT (0x1)
dwFlags = CA_VERIFY_FLAGS_IGNORE_OFFLINE (0x2)
dwFlags = CA_VERIFY_FLAGS_FULL_CHAIN_REVOCATION (0x8)
dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN (0x20000000)
HCCE_LOCAL_MACHINE
CERT_CHAIN_POLICY_BASE
-------- CERT_CHAIN_CONTEXT --------
ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
ChainContext.dwErrorStatus = CERT_TRUST_REVOCATION_STATUS_UNKNOWN (0x40)
ChainContext.dwErrorStatus = CERT_TRUST_IS_OFFLINE_REVOCATION (0x1000000)
ChainContext.dwRevocationFreshnessTime: 5 Days, 23 Hours, 15 Minutes, 48 Seconds
SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
SimpleChain.dwErrorStatus = CERT_TRUST_REVOCATION_STATUS_UNKNOWN (0x40)
SimpleChain.dwErrorStatus = CERT_TRUST_IS_OFFLINE_REVOCATION (0x1000000)
SimpleChain.dwRevocationFreshnessTime: 5 Days, 23 Hours, 15 Minutes, 48 Seconds
CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=1000040
Issuer: CN=EntSubCA, DC=DED, DC=ROOT
NotBefore: 05.02.2015 20:03
NotAfter: 05.02.2016 20:03
Subject: CN=servername.domain_name
Serial: 5a896145000300006ee2
SubjectAltName: DNS Name=servername.domain_name
Template: Machine
70 e4 6b 16 05 a1 62 e3 6d 24 96 ff 44 74 ee a2 3e ce df 18
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
Element.dwErrorStatus = CERT_TRUST_REVOCATION_STATUS_UNKNOWN (0x40)
Element.dwErrorStatus = CERT_TRUST_IS_OFFLINE_REVOCATION (0x1000000)
---------------- Certificate AIA ----------------
Failed "AIA" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
ldap:///CN=EntSubCA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?cACertificate?base?objectClass=certificationAuthority
Verified "Certificate (0)" Time: 0
[1.0] file://\\ca\crl\EntSubCA.crt
Verified "Certificate (0)" Time: 4
[2.0] http://webserver/crl/EntSubCA.crt
---------------- Certificate CDP ----------------
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?certificateRevocationList?base?objectClass=cRLDistributionPoint
Verified "Base CRL (018d)" Time: 0
[1.0] file://\\ca\crl\EntSubCA.crl
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
[1.0.0] ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?deltaRevocationList?base?objectClass=cRLDistributionPoint
Old Base CRL "Delta CRL (018d)" Time: 0
[1.0.1] file://\\ca\crl\EntSubCA.crl
Old Base CRL "Delta CRL (018d)" Time: 4
[1.0.2] http://webserver/crl/EntSubCA.crl
Verified "Base CRL (018d)" Time: 4
[2.0] http://webserver/crl/EntSubCA.crl
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
[2.0.0] ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?deltaRevocationList?base?objectClass=cRLDistributionPoint
Old Base CRL "Delta CRL (018d)" Time: 0
[2.0.1] file://\\ca\crl\EntSubCA.crl
Old Base CRL "Delta CRL (018d)" Time: 4
[2.0.2] http://webserver/crl/EntSubCA.crl
---------------- Base CRL CDP ----------------
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?deltaRevocationList?base?objectClass=cRLDistributionPoint
OK "Base CRL (018d)" Time: 0
[1.0] file://\\ca\crl\EntSubCA.crl
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
[1.0.0] ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?deltaRevocationList?base?objectClass=cRLDistributionPoint
Old Base CRL "Delta CRL (018d)" Time: 0
[1.0.1] file://\\ca\crl\EntSubCA.crl
Old Base CRL "Delta CRL (018d)" Time: 4
[1.0.2] http://webserver/crl/EntSubCA.crl
OK "Base CRL (018d)" Time: 4
[2.0] http://webserver/crl/EntSubCA.crl
Failed "CDP" Time: 0
Error retrieving URL: Logon failure: unknown user name or bad password. 0x8007052e (WIN32: 1326)
[2.0.0] ldap:///CN=EntSubCA,CN=ca,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=DED,DC=ROOT?deltaRevocationList?base?objectClass=cRLDistributionPoint
Old Base CRL "Delta CRL (018d)" Time: 0
[2.0.1] file://\\ca\crl\EntSubCA.crl
Old Base CRL "Delta CRL (018d)" Time: 4
[2.0.2] http://webserver/crl/EntSubCA.crl
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
CRL 018d:
Issuer: CN=EntSubCA, DC=DED, DC=ROOT
33 af 4d be 0e 35 45 94 bc 8b 3f d9 c1 60 e7 0c c4 83 17 b6
Application[0] = 1.3.6.1.5.5.7.3.2 Client Authentication
Application[1] = 1.3.6.1.5.5.7.3.1 Server Authentication
CertContext[0][1]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=SubCA
NotBefore: 13.11.2014 19:12
NotAfter: 13.11.2017 19:22
Subject: CN=EntSubCA, DC=DED, DC=ROOT
Serial: 6109015b000100000008
Template: SubCA
9b 04 17 9f c5 fe 52 ca a5 58 49 6c c6 18 fa db 13 b3 92 9e
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
Failed "AIA" Time: 0
Error retrieving URL: The network path was not found. 0x80070035 (WIN32: 53)
file://\\sub_ca\CertEnroll\sub_ca_SubCA(1).crt
Verified "Certificate (0)" Time: 0
[1.0] file://\\ca\crl\SubCA.crt
Verified "Certificate (0)" Time: 4
[2.0] http://webserver/crl/SubCA.crt
---------------- Certificate CDP ----------------
Verified "Base CRL (32)" Time: 0
[0.0] file://\\ca\crl\SubCA.crl
Verified "Base CRL (32)" Time: 4
[1.0] http://webserver/crl/SubCA.crl
---------------- Base CRL CDP ----------------
No URLs "None" Time: 0
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
CRL 32:
Issuer: CN=SubCA
8d a9 9d 51 65 a3 8e 77 02 22 40 57 62 70 e8 f6 c5 2e 60 1e
CertContext[0][2]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=RootCA
NotBefore: 28.05.2008 12:09
NotAfter: 28.05.2058 12:19
Subject: CN=SubCA
Serial: 616bd19f000100000004
Template: SubCA
06 d2 47 e7 dc 8f a7 97 a2 b8 c3 92 03 19 24 0c 47 45 22 14
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
Verified "Certificate (0)" Time: 0
[0.0] file://\\ca\crl\RootCA.crt
Verified "Certificate (0)" Time: 4
[1.0] http://webserver/crl/RootCA.crt
---------------- Certificate CDP ----------------
Verified "Base CRL (1c)" Time: 4
[0.0] http://webserver/crl/RootCA.crl
Verified "Base CRL (1c)" Time: 0
[1.0] file://\\ca\crl\RootCA.crl
---------------- Base CRL CDP ----------------
No URLs "None" Time: 0
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
CRL 1c:
Issuer: CN=RootCA
dc 98 2f 8d 16 9c 64 6e b2 74 89 95 9a 6c 1b 77 fd 58 63 fb
CertContext[0][3]: dwInfoStatus=10c dwErrorStatus=0
Issuer: CN=RootCA
NotBefore: 27.05.2008 16:10
NotAfter: 27.05.2110 16:20
Subject: CN=RootCA
Serial: 258de6fbd3bbab92460530e9e9f10536
5d e4 56 38 13 0a 52 aa 66 51 25 61 19 33 c9 d7 a2 c7 dd 38
Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
---------------- Certificate AIA ----------------
Verified "Certificate (0)" Time: 0
[0.0] file://\\ca\crl\RootCA.crt
Verified "Certificate (0)" Time: 4
[1.0] http://webserver/crl/RootCA.crt
---------------- Certificate CDP ----------------
Verified "Base CRL (1c)" Time: 0
[0.0] file://\\ca\crl\RootCA.crl
Verified "Base CRL (1c)" Time: 4
[1.0] http://webserver/crl/RootCA.crl
---------------- Base CRL CDP ----------------
No URLs "None" Time: 0
---------------- Certificate OCSP ----------------
No URLs "None" Time: 0
CRL 1c:
Issuer: CN=RootCA
dc 98 2f 8d 16 9c 64 6e b2 74 89 95 9a 6c 1b 77 fd 58 63 fb
Issuance[0] = 1.2.700.113556.1.4.7000.233.28688.7.167403.1102261.1593578.2302197.1
Exclude leaf cert:
5b 8d 96 39 f8 a3 6f af f3 89 bc 8d 78 e2 da 53 21 b8 ff aa
Full chain:
ca 99 30 47 9b ad ab ce 97 cc 70 80 a5 4e 11 b3 1a 83 98 78
Verified Issuance Policies: None
Verified Application Policies:
1.3.6.1.5.5.7.3.2 Client Authentication
1.3.6.1.5.5.7.3.1 Server Authentication
ERROR: Verifying leaf certificate revocation status returned The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613)
CertUtil: The revocation function was unable to check revocation because the revocation server was offline.
CertUtil: -verify command completed successfully.

What you have discovered is the reason to *not* use LDAP URLs for CDP and AIA extensions in your PKI. To access those URLs, the account must access to the URLs. In your output, it is quite clear that the local account does not have necessary permissions
(you also use FILE URLs for publication, which again is not recommended).
The best practice is to use a single URL for the CDP extension. It should be an HTTP URL that is hosted on a highly available (internally and externally accessible) Web cluster.
For the AIA extension, it should contain two URLs: one for the CA certificate - again to an internally and externally accessible, highly available Web cluster and one for the OCSP service - also
an internally and externally accessible, highly available Web cluster.
the other issue is that the root CA is *not* trusted when run by a non-domain account. How are you adding the trusted root CA. It is recommended to do this by running
certutil -dspublish -f RootCA.crt.
This will ensure that the computer account trusts the root CA. In your output, the root CA certificate is not trusted.
Brian

Check in mass WBS status (user or system)

Similar Messages

Maybe you are looking for