PKISolutions / PSPKI

PowerShell PKI Module
Microsoft Public License
369 stars 58 forks source link

Add-OnlineResponderArrayMember not synchronized #147

Open bencoremans opened 3 years ago

bencoremans commented 3 years ago

With the Add-OnlineResponderArrayMember I managed to add an online responder tot the ocsp array, but with an error. In the console their is a message: "Array Membership information is not synchronized". Is this still by design and will I have to manage this through the mmc? I know in the past it was possible to add an array member with powershell, but there were issues with this. What I saw was that the console didn't work anymore. With your cmdlets this behavior is gone, but do I still have to sync manual between array controller and array member?

Crypt32 commented 3 years ago

Is this still by design and will I have to manage this through the mmc?

it is by design, a limitation of API. What you can try is to restart ocspsvc service to force configuration synchronization with array controller.

bencoremans commented 3 years ago

Ok, thank you. Restarting the ocspsvc service or server doesn't do the trick unfortunately.

Crypt32 commented 3 years ago

Sorry, I don't have an answer to this question. I'm still researching this. MMC uses some hidden APIs which aren't documented. I was able to track down to DLLs used by MMC, but not exact exported functions.

bencoremans commented 3 years ago

It's not a big issue, but it's a minor flaw in our automated environment. I hope you will find the answer on this in the future, so I can take away this minor flaw. Thank you for your awesome work!