We are going to try using the Soft-PK client software with our Cisco 2600.
I will have to check into the certificate standards a little further, but
the person I got my info from was a tier 2 support rep at IRE and seemed
extremely knowleadgble. According to him IRE is going to begin supporting
IIS in their next release and it may be worth it to wait awhile. The tech
reccomended Netscape's product pretty strongly, but I would have to
uninstall SP4 from our server to use it and that isn't something I'm excited
about!
I will check into Thawte's services.
Thanks for the input,
Brian Politis
-----Original Message-----
From: [EMAIL PROTECTED]
[SMTP:[EMAIL PROTECTED]] On Behalf Of Vaughn Thurman
Sent: Friday, July 30, 1999 9:55 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Off Topic - Certificate Server
Are you putting in Safe-Net boxes in your facility, or just doing client
software and using an IPSEC compliant router or something? IRE has great
hardware and software, but the thing that sort of bothers me about their
program is that they really want to push their "trusted services"
certificate management program. I toured their facility in White Marsh
Maryland a few months ago and they have some impressive clients on their
program, but the "trusted services" certificate management thing is pretty
new. I can not say for sure that they are wrong about the IIS Certificate
Server, but I do know what they want to charge for one of their Certificate
Servers (Wheeoooo!) and why you would want to find something cheaper. There
is not a lot of documentation on the MS Cert Server with IIS4, but I have to
say it has done everything I have needed for internal (Intranet) security
for a client we have with 3,000 users. Client side validation, software
code-signing, server certification, SSL 2.0 and 3.0 and more are all running
from one MS cert box there. We use Java code to read the X.509 certificates
as part of our authentication scheme and have had no trouble with the MS
Certificates meeting all known standards we have run in to. I think IRE is
extremely reputable, but you still might want to do some homework on that
"won't work with IIS thing" post SP5 Cert server I think does support those
standards, but I will have to dig through the notes to see. one more place
to look at is http://www.thawte.com/enterprise/managed.html Thawte
Consulting's Enterprise PKI. They are more affordable than Verisign for
PKI\
systems and pre-recognized by all v.4 and above browsers.
Hope this helps...
-V
----- Original Message -----
From: Brian Politis <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 30, 1999 9:20 AM
Subject: RE: [IMail Forum] Off Topic - Certificate Server
> I am new to certificates, and am not sure yet what the standards listed
> below really are, but the vendor of the software I am trying to use
> specifically said their software would not work with the IIS Certificate
> Server and I needed the PKCS #7 and 10 compliancy. From that I inferred
> that IIS did not support these.
>
> The end goal is to use IRE's IPSEC VPN client to connect to our corporate
> network via the internet.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [SMTP:[EMAIL PROTECTED]] On Behalf Of Vaughn Thurman
> Sent: Thursday, July 29, 1999 10:34 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Off Topic - Certificate Server
>
> Doesn't the Certificate Server Component of IIS4 comply with that if you
do
> an advanced install on a machine that already had the domestic security
> installed? I know it is not the most user friendly thing in the world but
> it works sorta :->
> -V
> ----- Original Message -----
> From: Brian Politis <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, July 29, 1999 4:23 PM
> Subject: [IMail Forum] Off Topic - Certificate Server
>
>
> > I am looking for an in-expensive certificate server to co-exist with
> Imail,
> > and IIS 4.0 on the same box. I downloaded Netscape's Certificate server
> > 1.01 and after hours of fiddling discovered that it would not run on SP4
> or
> > SP5.
> >
> > In particular I need PKCS#7 and PKCS#10 compliancy.
> >
> > Does anyone out there have a product they can reccomend?
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
