A certificate revocation list (CRL) may be used to identify server keys that have been revoked. These CRL may be generated within MFT Server or from external applications. In the event that the CRL is managed in an external application you may wish to periodically verify your server keys against this CRL. This can be performed manually from the Server Keys tab in your desired Keys Manager module (See Key management overview) by clicking the Revocation List > Verify button. To automate this process you can associate a CRL URL with the server key during the creation process. See Revoking a key for details.
Figure 229
CRL file - A valid CRL file.