RE: Security newbie: how to get test certificates?

From: Donna Lambert [MS] (dlambert@online.microsoft.com)
Date: 08/16/02 

From: dlambert@online.microsoft.com (Donna Lambert [MS])
Date: Fri, 16 Aug 2002 16:32:24 GMT

Gustavo,
Most Vendors offer an option of trying out a "test certificate." These
will usually last a couple of weeks to a couple of months, and are very
effective for evaluating both the vendor, and SSL in general.
I would suggest you contact some vendors and simply ask if they offer test
certificates. Though I cannot specifically recommend one vendor over
another, I do know that Verisign at one time provided test certificates.
You can start with any vendor, ask, and if not keep moving down the list.

The second question is much more in depth. I would suggest that you
consider looking at some Non-Microsoft books (either from your public
library, or to purchase if you like) to get the background on SSL that you
are require. For example, and again, this is not an endorsement, one book
that might give you a good foundation would be Network Security Essentials
(I think there is a subtitle of like Applications and Standards). You
could see what other books are included in this section of your library and
pick one that is at your knowledge level. Microsoft offers coursework on
Network Security as well, I believe, you could contact Microsoft Sales for
information about Education Partners that might offer it.

You can of course browse through all of the documents in the KB, but those
are really not going to give you the foundation you need.

I hope these suggestions are helpful.
Donna Lambert
Microsoft SQL Server Support.

Disclaimer:
This posting is provided “AS IS” with no warranties, and confers no rights.

Are you secure? For information about the Microsoft Strategic Technology
Protection Program and to order your FREE Security Tool Kit, please visit
http://www.microsoft.com/security.

Recent viruses on the Internet underscore the threat to all computer users
and highlight challenges facing the entire industry in providing security
that everyone needs to conduct business. I encourage you to sign up to
receive automatic notification of Microsoft Security Bulletins by visiting
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/notify.asp. For more information on security, our Strategic
Technology Protection Program and to order your FREE Security Tool Kit,
please visit http://www.microsoft.com/security. We will be happy to answer
any questions or provide assistance with your security needs.

--------------------
| From: "Gustavo Merle" <gmerle@yahoo.com>
| Subject: Security newbie: how to get test certificates?
| Date: Fri, 16 Aug 2002 16:25:19 -0600
| Lines: 22
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
| Message-ID: <u4Sd4gSRCHA.3936@tkmsftngp12>
| Newsgroups: microsoft.public.sqlserver.security
| NNTP-Posting-Host: 212.205.93.251
| Path: cpmsftngxa06!cpmsftngxa08!tkmsftngp01!tkmsftngp12
| Xref: cpmsftngxa06 microsoft.public.sqlserver.security:7582
| X-Tomcat-NG: microsoft.public.sqlserver.security
|
| I want to make some protocoll comparissons on SQL2000 (SQL Developer
Edition
| running on W2K Pro)
|
| Trying to force encryption on the server network utility I realize that
SQL
| does not start with no certificate installed
|
| I searched in Technet, ms/security, etc. but could not find a concrete
| answer to my probably too basic question:
|
| How can I install a certificate only for testing purposes with no CA
| authorities available in my envrionment?
|
| Second question: I need to urgently get up to speed on these issues: does
| anyone has suggestions about where (and in which order) I can learn about
| security management with certificates on Win2K / XP (my random search
shows
| lots of documents but these refer to terms I still don't understand)
|
| Thanks in advance for your patience and help
|
| Gustavo
|
|
|

Relevant Pages

  • Re: [fw-wiz] Security dumming down - the kings clothes
    ... >page index or their security index which goes back to Nov. 25. ... >great lengths to avoid criticizing the vendor in question. ... Even you avoided naming Microsoft, ... point about marketing bullsh*t applied to computer security. ...
    (Firewall-Wizards)
  • Re: Security newbie: how to get test certificates?
    ... > effective for evaluating both the vendor, ... I do know that Verisign at one time provided test certificates. ... > that might give you a good foundation would be Network Security Essentials ... Microsoft offers coursework on ...
    (microsoft.public.sqlserver.security)
  • Re: September 2003, Cumulative Patch - Possible Warning!
    ... Microsoft Outlook, Microsoft Outlook Express, and ... Support Services Security Team is issuing this alert to advise customers to ... Please contact your Antivirus Vendor for additional details on this virus. ...
    (microsoft.public.security)
  • Vendor notification
    ... Just a question...on your security incident checklist is there a step ... Example secure@microsoft.com for Microsoft ... emails and pull in a case that should have had vendor notification much ...
    (Incidents)
  • [NEWS] Wonderware SuiteLink Denial of Service Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Vendor Information, Solutions and Workarounds ... Core sends the advisory draft to Wonderware support team. ...
    (Securiteam)