We plan to use the MS certificate services on W2K as our certificate server, with a High Secure Module to protect the CA key.
Is anyone aware of security holes in that product? I think that the current MS cryptographic-related products or implementations (CSP, Kerberos, ...) are now as secure as other implementations since MS relies on experts from security companies like Entrust. But I would be sure that their Certificate Server is ok with respect to security. Pierre De Boeck Sr System Engineer Mission Critical (Belgium) Phone: +32 2 757 10 15 Fax: +32 2 759 276 0 email: [EMAIL PROTECTED] /// (. .) ---------------------------------oOO--(_)--OOo---------------------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]