If Certificate Manager is configured to add CRL-related extensions to certificates, it issues a CRL every 24 hours with a validity of 7 days. You can download the CRLs from http://<cluster_FQDN>/ejbca/publicweb/webdist/certdist?cmd=crl&format=PEM&issuer=CN%3DCertificate+Manager+CA%2cO%3DAvaya.
Use this procedure to manually generate a CRL immediately.
Procedure
Log in to the Certificate Manager EJBCA web console at https://<CLUSTER_FQDN>/ejbca/adminweb/.
Navigate to CA Functions > CA Structure & CRLs.
From the Basic Functions section, click Create CRL to create a newly updated CRL.
