RSS

无法连接外网时,安装exchange补丁的时间过长

29 Nov

安装exchange service pack或者rollup时,安装包会去连接 certificate revocation list (CRL) Web site。如果连接失败,可能出现下列情景:

  • 安装时间非常长
  • 收到安装提示:

    Creating native images for .Net assemblies.

Exchange 会尝试去连接CRL来确认代码签名证书,一旦无法确认,请求CRL就会花费很多时间,导致安装暂停。

为了解决这个问题,可以取消Check for publisher’s certificate revocation 功能:

Check for publisher’s certificate revocation是一个每个账户单独的设置

打开Internet Explorer,选择Tools —> Internet Options—>Advanced —->Security

当补丁安装完后,需要还原回去。

目前我使用的办法是修改host文件,添加172.0.0.1 crl.microsoft.com,这样修改的另一个好处是开启powershell的速度变快了,希望不是心理感觉。

更多信息,请查看

http://technet.microsoft.com/en-us/library/ee221147.aspx

http://support.microsoft.com/kb/944752

Advertisements
 
Leave a comment

Posted by on November 29, 2009 in Exchange Server

 

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: