# Setting up OCSP for MS Windows Server

<div id="bkmrk-question">## Question

</div><div class="page view" id="bkmrk-how-do-i-set-up-an-o"><div class="wiki-content" id="bkmrk-how-do-i-set-up-an-o-1">How do I set up an OCSP for server based on Microsoft Windows Server?

## Answer

Enable OCSP Stapling on Windows Server:

</div></div>1\. Ensure you are using Windows Server 2008 or above.

- Windows Server 2008 and above – OCSP Stapling is enabled by default.
- Versions below 2008 do not support OCSP Stapling.

Please upgrade to Windows Server 2008 or later to enable OCSP Stapling.

2.Check whether OCSP stapling is already enabled or not:

- Use [openssl](https://wiki.openssl.org/index.php/Binaries) command:

```
openssl s_client -connect login.live.com:443 -tls1 -tlsextdebug -status
```

- Scroll down to "[OCSP](https://openprovider.help/books/ssl-certificates/page/what-is-ocsp) response:"
- If OCSP is enabled, the “[OCSP](https://openprovider.help/books/ssl-certificates/page/what-is-ocsp) Stapling” is

```
OCSP Response Status: successful (0x0)
```

- If OCSP is not enabled, you won’t see any OCSP Response Data:

```
OCSP response: no response sent
```

If you see the ‘No response sent’ message and are using Windows Server 2008 or above, then it is possible you need to (re)enable OCSP stapling. [Please consult Microsoft’s documentation for help](https://technet.microsoft.com/en-us/library/hh826044%28v=ws.10%29.aspx).

3\. If you are still having issues, please check your Windows Server 2008+ can connect to Comodo’s OCSP servers at the following locations:

<div class="table-wrap" id="bkmrk-dns-hostname%28s%29-dest"><table class="confluenceTable"><tbody><tr><td class="confluenceTd">DNS HOSTNAME(S)</td><td class="confluenceTd">Destination IP</td><td class="confluenceTd">Port</td></tr><tr><td class="confluenceTd">[OCSP.ComodoCA.com](http://ocsp.comodoca.com/)  
[OCSP.usertrust.com](http://ocsp.usertrust.com/)</td><td class="confluenceTd">178.255.83.1 or 2a02:1788:2fd::b2ff:5301</td><td class="confluenceTd">Tcp/80</td></tr></tbody></table>

For example, if you use telnet, use the following command:</div>```
telnet <a class="external-link" href="http://ocsp.comodoca.com/">OCSP.ComodoCA.com</a> 80
```

If the test is successful the reply will state ‘Connected to [OCSP.ComodoCA.com](http://ocsp.comodoca.com/)’ for at least one of the ‘Destination IP’ addresses in the table above.

If the connection test is unsuccessful please make the required network changes to allow your server to connect to our OCSP servers. Once complete, we advise you to re-run the test in step 2 to establish whether OCSP stapling is now enabled.