The value of tmnxPkiCAProfAtCrlUpdScheduleT specifies the type of time scheduler to update the CRL. The value of tmnxPkiCAProfAtCrlUpdScheduleT must be either of 'nextUpdateBased (1)' or 'periodic (2)': Values: nextUpdateBased(1) The system starts updating a CRL file in tmnxPkiCAProfAtCrlUpdPreUpdTime seconds prior to the 'nextUpdate' value of the current CRL. It will try to download the CRL file from each URL location in order until it finds one that qualifies. If none of the configured URLs work or none of the downloaded CRLs qualifies, the system will wait for tmnxPkiCAProfAtCrlUpdRetryIntv seconds before attempting to download the CRL file again. In this case, if tmnxPkiCAProfAtCrlUpdRetryIntv is zero, the system will stop attempting to update the CRL file and tmnxPkiCAProfCrlCurUpdStatus is set to 'stopped (4)'. If the 'nextUpdate' field is missing from the CRL, then the system cannot schedule the next CRL update and tmnxPkiCAProfCrlCurUpdStatus is set to 'stopped (4)'. If the CRL is expected to be issued without a 'nextUpdate' field, then the periodic scheduler type should be used instead. periodic(2) The system updates the CRL file every tmnxPkiCAProfAtCrlUpdPrdcUpdIntv seconds. It will try to download a CRL from each URL location in order until it finds one that qualifies. If none of the configured URLs work or none of the downloaded CRLs qualifies, the system will try again in tmnxPkiCAProfAtCrlUpdPrdcUpdIntv seconds. The 'nextUpdate' field of the CRL, if present, is ignored in this mode. The cases that a downloaded CRL does not qualify are: - the downloaded CRL file cannot be decoded by the system (e.g., wrong file type, truncated content) - the downloaded CRL is not issued by the correct Certificate Authority (CA) - the downloaded CRL has expired or is not yet valid - the downloaded CRL has not been updated The URLs are configured using tmnxPkiCAProfUrlTable.