Re: [Ejbca-develop] EJBCA VM for production environment

[Tomas G. <to...@pr...>]

Since the VM comes with a management CA pre-installed, anyone with a 
Superadmin from one VM can be superadmin in your VM. That makes it 
unsuitable fro production, from a security perspective.
You can tweak this of course, and block default superadmin etc. But it 
all depends on what security requirements you have on your CA. If they 
are high, it is not suitable.

Regards,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see 
www.primekey.se for more information.
http://www.primekey.se/Products/EJBCA+PKI/
http://www.primekey.se/Services/Support/


On 2014-11-12 21:14, Roberto Carna wrote:
> Dear, I've been using Tinyca for a pair of years but I now I want to
> use a more robust CA software like ejbca that let me sign the
> certificates with SHA-2 as minimum.
>
> As the ejbca installation is very hard to me, I'd want to install the
> virtual machine version in my vmware platform, and my question is
> this:
>
> Is the EJBCA VM version suitable for a production environment ? Is it
> possible to adjust any parameter to use as I said ?
>
> Thanks a lot,
>
> Roberto
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>