This article explains that Certificate Revocation List (CRL) checks cannot be bypassed for Personal Identity Verification (PIV) or smart card authentication.
- Smart Card Authentication
- PIV Authentication
Access to the CRL distribution points is required at all times for PIV and smart card authentication to support the certificate revocation process. Revocation checking is a critical security process. There is no supported method to disable or bypass CRL checks for smart card authentication, including for testing purposes.
Authentication fails if the CRL endpoint is not reachable. For testing, the environment must be configured to ensure its accessibility. For more information, please review Troubleshoot smart card or PIV authentication.
