Educause Security Discussion mailing list archives

Any special preparations in anticipation of KB2661254 (Key Length) patch?


From: Martin Manjak <mmanjak () ALBANY EDU>
Date: Wed, 12 Sep 2012 14:53:56 -0400

MS will release their Update for Minimum Certificate Key Length to WSUS
next month.

I'm curious about any special preparations anyone may have taken to
identify certs within their domains that may not meet the new minimum
key length standard (1024).

Embedded devices, if using SSL, come to mind as a potential source of
problems.

Also, is anyone briefing their Help Desk staff on how to respond to
callers who report that they can't connect to sites because of the new
requirement?

It's hard to tell how much is going to break with this update.
Marty

-- 

Martin Manjak
CISSP, GIAC GSEC-G
Information Security Officer
University at Albany
MSC 209 518/437-3813

The University at Albany will never ask you to reveal your password.
Please ignore all such requests.


Current thread: