| Event Source: | Microsoft-Windows-OnlineResponder |
| Event ID: | 27 (0x1B) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_CACONFIG_UPDATE_THREAD_FAILED |
| Event text (English): | The signing certificate for Online Responder configuration %1 was not updated(%2). |
| Event text (German): | The signing certificate for the online responder configuration %1 was not updated.(%2) |
Category: Online Certificate Status Protocol (OCSP)
Details of the event with ID 17 of the source Microsoft-Windows-OnlineResponder
| Event Source: | Microsoft-Windows-OnlineResponder |
| Event ID: | 17 (0x11) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | Online Responder Service was started. |
| Event text (German): | The online responder service has been launched. |
Details of the event with ID 18 of the source Microsoft-Windows-OnlineResponder
| Event Source: | Microsoft-Windows-OnlineResponder |
| Event ID: | 18 (0x12) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | Online Responder Service was stopped. |
| Event text (German): | The online responder service has been terminated. |
Details of the event with ID 20 of the source Microsoft-Windows-OnlineResponder
| Event Source: | Microsoft-Windows-OnlineResponder |
| Event ID: | 20 (0x14) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_GENERIC_STARTUP_FAILURE |
| Event text (English): | The Online Responder Service did not start: %1. |
| Event text (German): | The online responder service was not started: %1. |
Details of the event with ID 17 of the source Microsoft-Windows-OnlineResponderRevocationProvider
| Event Source: | Microsoft-Windows-OnlineResponderRevocationProvider |
| Event ID: | 17 (0x11) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_FAILED_TO_INITIALIZE |
| Event text (English): | For configuration %1, Online Responder revocation provider either has no CRL information or has stale CRL information. |
| Event text (German): | The online responder blocking provider either has no revocation list information or has outdated revocation list information to configure %1. |
Details of the event with ID 18 of the source Microsoft-Windows-OnlineResponderRevocationProvider
| Event Source: | Microsoft-Windows-OnlineResponderRevocationProvider |
| Event ID: | 18 (0x12) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | For configuration %1, Online Responder revocation provider found a delta CRL referring to a newer Base CRL. |
| Event text (German): | When configuring %1, the online responder blocking provider found a delta revocation list that referenced a newer base revocation list. |
Details of the event with ID 16 of the source Microsoft-Windows-OnlineResponderRevocationProvider
| Event Source: | Microsoft-Windows-OnlineResponderRevocationProvider |
| Event ID: | 16 (0x10) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | For configuration %1, Online Responder revocation provider failed to update the CRL Information: %2. |
| Event text (German): | The online responder blocking provider could not update the revocation list information to configure %1: %2. |
Details of the event with ID 19 of the source Microsoft-Windows-OnlineResponderWebProxy
| Event Source: | Microsoft-Windows-OnlineResponderWebProxy |
| Event ID: | 19 (0x13) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | The Online Responder web proxy is unloaded. |
| Event text (German): | The online responder web proxy is unloaded. |
Details of the event with ID 20 of the source Microsoft-Windows-OnlineResponderWebProxy
| Event Source: | Microsoft-Windows-OnlineResponderWebProxy |
| Event ID: | 20 (0x14) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | The Online Responder web proxy detected an invalid configuration for the %1 property. The value was changed from %2 to %3. |
| Event text (German): | The online responder web proxy has detected an invalid configuration for the property "%1". The value has been changed from "%2" to "%3". |
Details of the event with ID 21 of the source Microsoft-Windows-OnlineResponderWebProxy
| Event Source: | Microsoft-Windows-OnlineResponderWebProxy |
| Event ID: | 21 (0x15) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | The Online Responder web proxy did not process an extremely long request from %1. This may indicate a denial-of-service attack. If the request was rejected in error, modify the MaxIncomingMessageSize property for the service. This error will only be logged every 20 minutes. |
| Event text (German): | The online responder web proxy has not processed a very long request from %1. This may be an indication of a denial of service attack. If the request was incorrectly denied, change the "MaxIncomingMessageSize" property for the service. This error is logged every 20 minutes. |
Details of the event with ID 18 of the source Microsoft-Windows-OnlineResponderWebProxy
| Event Source: | Microsoft-Windows-OnlineResponderWebProxy |
| Event ID: | 18 (0x12) |
| Event log: | Application |
| Event type: | Information |
| Symbolic Name: | MSG_E_MISMATCHED_BASE_DELTA_CRL |
| Event text (English): | The Online Responder web proxy is successfully loaded. |
| Event text (German): | The online responder web proxy was loaded successfully. |
Details of the event with ID 17 of the source Microsoft-Windows-OnlineResponderWebProxy
| Event Source: | Microsoft-Windows-OnlineResponderWebProxy |
| Event ID: | 17 (0x11) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_INVALID_CRL |
| Event text (English): | The Online Responder web proxy failed to Initialize. %1 |
| Event text (German): | The online responder web proxy could not be initialized. %1 |
Basics: Checking the revocation status of certificates
If a valid, unexpired certificate is to be withdrawn from circulation, it must be revoked. For this purpose, the certification authorities maintain corresponding revocation lists in which the digital fingerprints of the revoked certificates are listed. They must be queried during the validity check.
Continue reading „Grundlagen: Überprüfung des Sperrstatus von Zertifikaten“Use the Onlineresponder (OCSP) with a SafeNet Hardware Security Module (HSM)
With the SafeNet Key Storage Provider it is not possible to set permissions on the private keys: the Microsoft Management Console (MMC) will crash.
Continue reading „Den Onlineresponder (OCSP) mit einem SafeNet Hardware Security Module (HSM) verwenden“Use HTTP over Transport Layer Security (HTTPS) for the revocation list distribution points (CDP) and the online responder (OCSP).
With regard to the design of the infrastructure for providing revocation information - i.e. the CRL Distribution Points (CSP) as well as the Online Responders (Online Certificate Status Protocol, OCSP) - the question arises whether these should be "secured" via Secure Sockets Layer (SSL) or Transport Layer Security (TLS).
Continue reading „Verwenden von HTTP über Transport Layer Security (HTTPS) für die Sperrlistenverteilungspunkte (CDP) und den Onlineresponder (OCSP)“
English 
Deutsch