Re: Any special preparations in anticipation of KB2661254 (Key Length) patch?

[Louis APONTE <LouisAponte () WEBER EDU>]

A resource to check sites is available @ http://www.digicert.com/help/ 
It will check against the length requirement, Debian key vulnerability, 
expiration date and if the cert is installed correctly.
 
la

 
Louis Aponte

Weber State University

 
> > > On 9/12/2012 at 12:53 PM, in message <5050DA44.9090709 () albany edu>, Martin Manjak <mmanjak () ALBANY EDU> wrote:

MS will release their Update for Minimum Certificate Key Length to WSUS
next month.

I'm curious about any special preparations anyone may have taken to
identify certs within their domains that may not meet the new minimum
key length standard (1024).

Embedded devices, if using SSL, come to mind as a potential source of
problems.

Also, is anyone briefing their Help Desk staff on how to respond to
callers who report that they can't connect to sites because of the new
requirement?

It's hard to tell how much is going to break with this update.
Marty

-- 

Martin Manjak
CISSP, GIAC GSEC-G
Information Security Officer
University at Albany
MSC 209 518/437-3813

The University at Albany will never ask you to reveal your password.
Please ignore all such requests.