Tips:

1. When you restore CA database, it expects the same CA storage path. By default, CA creates the database and log files under c:\WINDOWS\system32\certlog. When you restore to another machine, it should have the same path.

2. Enabling debug logging

- certutil -setreg ca\debug 0xffffffe3

Log files are in  %systemroot%\cert*.log

Conventional security solution requires users to understand lots of security jargons and to make decisions so they are responsible all afterwards. In abstracted way, there is a s/w entity, which exposes lots of entry points that external s/w entities to access. Conventional secuirty approach might go over all public interfaces and make sure the external party has the proper access right.  Usually beefed up security means more restricted and granular control on who gets what matrix. Does this solve the security problem? For this to make, there are lots of things we need to assume:

- We have to able to enumerate all public interfaces effectively and provide security check

- Policy setter has to have a really good understanding on security setting. Generally I feel like we are asking too much from end users.

- App developers have to be aware of security settings and they shouldn't allow any loophole in their end. This is hard and application development is getting more complicated and harder and expensive due to security consequences.

My day dreaming idea is:

- An intelligent agent equipped with machine learning capability. For every user action, it intercepts and analyzes the consequences beforehand. This agent can talk to each other or Mother agent to exchange information and to be smarter on fighting with viruses.

I guess there are some researchers doing this already and wonder how come I haven't heard anything yet.

Dan

Also I read Gucci makes around $180 leather case of pocket PC. Hmm...it might look nice with Gucci logoed cell showing off.