Hi Guy,
My company wanna create OU for users on Domino.
Following the guide, there are a field which is Secure Type for administration to choose the certifier license type.
However I don’t see this field in registration dialog box.
As usual, all our certs. were register with International but the OU certs are North Amercia
How to reg them in International? Thank you.
Subject: No need for “International” IDs any more
The “US” vs “International” differentiation was due to US export regulations which were relaxed around 2000. Starting in N/D 5.0.3 IDs have been created as a “world-wide” type, which was essentially a relabeling of the old “US” ID file type. I believe that modern versions of N/D will completely ignore the “international” bit in ID files.
Export of cryptography from the United States - Wikipedia https://en.wikipedia.org/wiki/Export_of_cryptography_from_the_United_States
https://www-10.lotus.com/ldd/dominowiki.nsf/dx/supported-key-sizes-in-notesdomino https://www-10.lotus.com/ldd/dominowiki.nsf/dx/supported-key-sizes-in-notesdomino
If you still have any International-grade IDs kicking around, I would recommend upgrading or replacing them. A well-known 512 bit RSA key was factored in 2014 with a few thousand dollars worth of EC2 compute time, and computers just keep getting faster and less expensive. If you can, you should upgrade your entire hierarchy to 2048 bit RSA, with an emphasis on upgrading the smallest keys and the most critical keys first.