# Manage CRLs

### Manage CRLs <a href="#toc104792724" id="toc104792724"></a>

An officer can create Certificate Revocation Lists (CRLs) for all CAs in their group, configure automatic renewal for each CRL, and download the current CRL from the UI.

{% hint style="info" %}
**Information:**

CRLs are not automatically generated upon the creation of CAs.
{% endhint %}

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FseUgYrnV4x3yOIBtz0BF%2Fimage.png?alt=media&#x26;token=0d24de79-fd22-4067-bc0e-64b9688a1749" alt=""><figcaption></figcaption></figure>

To access the filter options, simply click on the "Search" button and the filter pop-up will appear.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FFqA3HFZdx7L3tRh9wZ9T%2Fimage.png?alt=media&#x26;token=1cef4eee-28f0-4dff-9855-38fd3125ef0b" alt="" width="260"><figcaption></figcaption></figure>

You can filter by CRL Name, CRL Status, or Next Update using equal or contains comparators. Click "search" to apply the selected filter.

If you wish to remove the filter, simply click on the "Reset" button.

Click "Export to Excel" to download the table as an XLSX file to the standard download location of your OS.

**To Active CRL Profile**

To generate a new CRL, click on<img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2F9ln1Hp6Qvg8Hiqt1HsSn%2Fimage.png?alt=media&#x26;token=5a9f59b2-49ab-4bb5-aacb-a1d71589f459" alt="" data-size="line"> the button for In-Active CRLs.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FqADIyQMnb3K2pOLbPeoG%2Fimage.png?alt=media&#x26;token=4aff0d7c-a922-4765-9b36-d5cd8f4635ef" alt=""><figcaption></figcaption></figure>

Select the "signature algorithm" and "CRL Profile" from the dropdown lists. Click "Confirm" to continue.

You will be prompted to authenticate the action using your Officer token. Press "Authenticate" to proceed.

To generate a new CRL, simply click on the "Create CRL" button.

**Edit CRL Profile**

To update the CRL frequency for existing CRLs, click <img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FatZXrC13HBdy1sZ6HxeA%2Fimage.png?alt=media&#x26;token=e7d89def-16ef-4fec-9528-6931b865ddea" alt="" data-size="line">on the designated button.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FRyWXGRnfpUWU4fae7ADS%2Fimage.png?alt=media&#x26;token=ad566c00-95e7-4339-9b84-471609544599" alt=""><figcaption></figcaption></figure>

To begin editing the fields, simply click on the "Edit" button.

To clarify, the process for editing remains unchanged from what was explained on the previous page.&#x20;

**Update**

To generate a new CRL right away, simply click on the<img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FnvDHs7c1l76sTnEiPI96%2Fimage.png?alt=media&#x26;token=fa3d597c-3e45-4e30-9ab4-8f35ce7bccd2" alt="" data-size="line"> icon.

You will need to authenticate the action in a new dialog. Use your Officer token and press "Authenticate" to proceed.

To update the CRL, simply click on the "Update" button.

**Download**

To download the latest CRL onto your computer, simply click on the download<img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FTGNO5L2qDFlJgXKozGwA%2Fimage.png?alt=media&#x26;token=479b2a78-0eab-4696-8dd7-d30707c26bb8" alt="" data-size="line"> icon.

**Scheduler Configuration**

An Officer can configure parts of the Push Service of the EmCA Application using the following UI.

{% hint style="info" %}
**Information:**

Some configurations are located on the server side underneath /opt/Scheduler/scheduler.properties. Please contact your System Administrator to change server-side configuration.
{% endhint %}

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FtGTk8N4AxRicYo83zCcf%2Fimage.png?alt=media&#x26;token=a3da7616-cb26-465d-8b5f-436bd3d762d4" alt=""><figcaption></figcaption></figure>

**Steps to Publish Certificates to LDAP**

1. On the Publish to LDAP page, Please fill in the first field with the LDAP URL.
2. Please enter the Domain Name in the second field. This is required for both certificate and CRL publication.
3. Enter the Username and Password of the LDAP system in the third and fourth fields.
4. To proceed, please press the "Confirm" button.
5. You will need to authenticate the action by pressing "Authenticate" after using your Officer token.
6. Click on "Save Settings" to save the configuration for the Push Service.
