Revocation Errors When Activating

Background

In occasional instances a P11D Organiser installation can fail to activate, and the message that comes back relates to the Revocation Server. The message ("It was not possible to connect to the revocation server or a definitive response could not be obtained") is Windows itself generating the message, not P11D Organiser, it comes from Windows checking the digital signature on the server to confirm the certificate we sign it with hasn't been revoked. If the PC/server can't reach the certificate authority's revocation server at that moment, Windows shows this warning.

Even if a firewall is correctly configured to check the server (MyP11D.com marked as insecure or having invalid certificate), Windows may keep showing the same warning for a while, because it caches the result of revocation checks locally, and that cache is tied to the individual Windows user profile, not the machine as a whole.

So a user who already hit the failure (maybe there was an intermittent connectivity issue) will keep seeing it until their own cached result is cleared, even though the underlying network issue is resolved. On a shared PC or terminal/RDS server, this means each affected user profile needs clearing individually, as the restored connectivity won't retroactively resolve it for everyone.

There are two ways to clear the cache - via command line prompts that your IT team should be able to run, or more simply by allowing the server to 'clear' the flag itself. Therefore, to correct this:

1. Type in Internet Options in the Windows menu
2. Pick the Advanced tab and then scroll down to the Security section as shown below.
3. Then turn off or uncheck Check for server certificate revocation, again, highlighted below.
4. Click OK at the bottom of the window.

If you then run the P11D Organiser application again, it should then activate correctly. Once you have confirmed the issue is resolved, you should be able to repeat the above process, but the re-check the box again to re-enable the revocation check.