修复AX Client客户端登陆等待时间长的问题

As in my client’s environment accessing to internet is limited, and their DNS is not configured to further resolve the name to crl.microsoft.com, so we recommend to completely turn off the CRL for ax32.exe.

Basically KB947988 suggests either turning off CRL on a machine basis or enabling internet connection tohttp://crl.microsoft.com.

1. Turning off CRL is a good option for those in a reliable/hardened environment by turning off the “Software Restriction Policies” (http://technet.microsoft.com/en-us/library/bb457006.aspx#EAAA), or by by unchecking an option from Internet Explorer, “Tools | Options |Advanced | Security |Check for publisher’s certificate revocation”.

2. Enabling internet connection to http://crl.microsoft.com means to ensure the DNS naming resolution fine on crl.microsoft.com.

3. A better fix with restricted impact on other applications: Apart from the above 2 options we can also disable the CRL checking for AX32.exe alone – this is going to only impact AX32.exe as we are pretty sure all .NET assemblies being loaded by AX32.exe are reliable and fully trusted. This can be done:

a) Create a new text-base file named c:\program files\Microsoft Dynamics AX\50\Client\Bin\ax32.exe.config

b) The content for ax32.exe.config shall look like below:

<configuration>

<runtime>

<generatePublisherEvidence enabled="false"/>

</runtime>

</configuration>