Mandrakesoft in Bid For EAL5 Certification
181350
Linux vendor Mandrakesoft is teaming with a consortium of European partners in an effort to win Common Criteria Evaluation Assurance Level 5 (EAL5), the highest security certification for defense and other highly sensitive areas of governmental IT
680637
Mandrakelinux 10.1 Officiel comes with extended support for mobile devices, better hardware compatibility and application upgrades.
406178
EJBCA is an enterprise class Certificate Authority using J2EE technology. EJBCA builds on the J2EE platform to create a robust, high performance, platform independent, flexible, and component based CA to be used standalone or integrated in any J2EE app.   We are proud to announce EJBCA 3.5.0, with enhanced features all over, both enterprise class stuff, and simpler stuff.  This is a major release with many new interesting features and framework improvements. Read the changelog for details. Notable changes in no specific order:  - PKCS#11 interface to HSMs, support for Utimaco CryptoServer, and improved auto-activation of HSMs. - Much enhanced Webservice API for administration. - Import CA function supports HSM, possible to create initial CA on HSM and initial admin on smart card. - Soft CA keystores uses same framework as HSMs, possible to give private password to every soft CA. - New options for specifying certificate validity, per end entity, fixed date etc. - Possible to keep configuration/modifications in an external directory. - Possible to use different profiles in CMP RA mode. - you can now require approvals for revocation. - Support multiple email altNames in admin-GUI. - Option to choose reverse DN for a CA. - Root-less install, using custom SSL truststore for JBoss/Tomcat. - Lots of other small fixes and improvements, 69 issues resolved.   For upgrade instructions, please se UPGRADE.  Because there are binary files in EJBCA_HOME/lib and many massive changes there is no patch file for upgrading EJBCA 3.4.x to 3.5.0. Use the full package from EJBCA 3.5.0 and follow the upgrade instructions.  Changes: ------- New Feature     * [ECA-81] - Editing validity per End Entity     * [ECA-115] - Serial Number Check     * [ECA-138] - HardToken PIN data should be encrypted in database     * [ECA-249] - Possible to configure specific validity dates in certificate profiles     * [ECA-398] - Support multiple email altnames in admin-GUI     * [ECA-414] - Possibility to choose reverse DN for a CA     * [ECA-419] - Improve CA softs security to use individual passwords     * [ECA-470] - PKCS11 tokens for new CA and support for Utimaco CryptoServer (using pkcs11)     * [ECA-472] - Custom Logging     * [ECA-480] - Import Hard Token Data in CLI     * [ECA-489] - New ant argument that outputs the version number of the EJBCA installation.     * [ECA-505] - Enable download of CA certificate as jks-file from Basic Functions in Admin GUI.     * [ECA-516] - Present warning in the Admin GUI when JCE Unlimited Strength Jurisdiction Policy Files isn't used.     * [ECA-520] - Experimental reporting functionality using JasperReports     * [ECA-526] - Possible to install with initial AdminCA on HSM     * [ECA-527] - Possible to retrieve entity certs with CLI     * [ECA-545] - Allow initial superadmin enroll on smartcard     * [ECA-573] - Root-less install, use custom SSL truststore for JBoss/Tomcat  Improvement     * [ECA-35] - make better looking public enroll pages     * [ECA-232] - When listing administrators in access rights, make the link clickable     * [ECA-291] - Option to specify certificate validity begin time drift     * [ECA-331] - Hide HardToken Puk Data in View HardToken page     * [ECA-426] - Include nonce in requests from OCSP client     * [ECA-461] - Build script does not check for actual version of java that is used.     * [ECA-462] - Possible to keep configuration/modifications in an external directory     * [ECA-465] - Possible to use different profiles in CMP RA mode     * [ECA-468] - Create a PKCS7 with the web service interface to import it in IE     * [ECA-471] - New Calls in the EJBCA Web Services interface     * [ECA-473] - Interface of UserDataSources improved for support of UserData Deletion     * [ECA-475] - Improved functionality in Extended CMS Service     * [ECA-482] - Move scep servlet to its own web application     * [ECA-494] - Better default datasource for ScepRAServer in External RA     * [ECA-495] - ScepRAServer in External RA will process the same message until it is approved     * [ECA-502] - build.xml should use $JAVA_HOME/bin/keytool instead of first one in path, if available.     * [ECA-507] - Add description on UPN field.     * [ECA-508] - When using Validity Override, don't allow validity to start before current time.     * [ECA-509] - When using Validity Override, don't allow validity to to extend beyond the validity of the certificate profile     * [ECA-510] - AD Publisher should use different container for certificateRevocationList     * [ECA-513] - Not consequent text in profiles menu choices     * [ECA-514] - Java exception when removing newly added service     * [ECA-518] - Support new key purpose CAKEYPURPOSE_HARDTOKENENCRYPT     * [ECA-531] - Improve Approvals with multiple steps of non-executable approvals     * [ECA-532] - Support Approvals for the getHardTokenData and genTokenCertificates call     * [ECA-536] - Import CA function supports HSM CAs     * [ECA-537] - Require approvals for revocation     * [ECA-572] - Confusing text in conf/ejbca.properties.sample     * [ECA-581] - Bad presentation of approvalId, sometimes it is displayed with - sign in notification     * [ECA-584] - Not possible to use comma in CA DN when creating CA  Bug     * [ECA-412] - Try to create service after re-deploy gives exception     * [ECA-413] - When choosing "Hard Token Type", all previously made "Settings" are deleted.     * [ECA-443] - If you execute ./ejbca.sh batch in "ejbca/bin" the script creates ejbca/bin/p12 and puts the new p12:s in there instad of ejbca/p12     * [ECA-460] - Get certificate chain link in public enroll pages does not work when CA is signed by external Root.     * [ECA-467] - Private EC keys report different algorithm after application server restart     * [ECA-501] - Weblogic throws TransactionRolledBackLocalException on duplicate log lines     * [ECA-512] - Java exception when editing services     * [ECA-525] - ExtRATestClient not working according to doc     * [ECA-539] - Removing any but last of dynamic fields in an End Entity Profile generates errors when creating an end entity.     * [ECA-548] - Automatic token activation fails when using nCipher HSM     * [ECA-549] - No space triming in DN of a CA     * [ECA-556] - Security: XSS possibility on public web     * [ECA-559] - Autoactivate of Hard CA tokens does not show as active in Admin-GUI     * [ECA-560] - Renew of keys for soft token CA must not regenerate encryption keys     * [ECA-561] - CA levels displayed incorrectly in Basic Functions at depth > 2     * [ECA-571] - PKCS#11 times out after some time on Utimaco     * [ECA-574] - Wrong validity of created CAs, maximum two years     * [ECA-583] - Bug in advances access rules view, UserDataSources displayed id instead of name i rule  Task     * [ECA-491] - Remove support for JDK 1.4     * [ECA-538] - Remove CA import restrictions depending on keyusage field in CA-cert.     * [ECA-576] - Remove support for JBoss
541486
PLEASANTON, Calif., May 31  /PRNewswire/ -- AdventNet(TM), Inc. today announced that its ManageEngine Firewall Analyzer has achieved OPSEC (Open Platform for Security) certification from Check Point Software Technologies Ltd. , the worldwide leader in securing the Internet.
631685
With the closure of IETF&#39;s MARID group a month ago, many of us have left Microsoft&#39;s Sender-ID standard for the dead. After being rejected by the Apache Foundation and the Debian Project over licensing issues
600874
Chinese company has signed a five-year deal for customer services and support.
352873
Electronic Arts ERTS.O said on   Monday that it had bought Sweden's Digital Illusions CE, or   DICE, known for the Battlefield game franchise, for about 175.5   million SEK ($24 mln).
113909
Chartered Semiconductor's process validated, sources claim Singapore's Chartered Semiconductor looks set to continue its foundry partnership with AMD into the 65nm era, if industry-insider claims that the chip maker has validated Chartered's 65nm production facility.â¦
718927
(InfoWorld) - Just a day afterÂ debuting a new initiative to produce more industry-specific functionalityÂ for users of its Dynamics business applications, Microsoft Tuesday announced it had purchased IP (intellectual property) and code relevant to the manufacturing sector. Previously, Microsoft relied on its partners to meet the industry-specific needs of its customers, but in response to feedback from those communities, itÂ is now working to add in capabilities to its ERPÂ applications in five key vertical markets -- manufacturing, distribution, retail, services, and the public sector. Microsoft said Tuesday at its Convergence conference in San Diego that it has acquired the IP and code for eBECS's lean manufacturing module. EBECS is a Microsoft partner and reseller of Dynamics AX based in Chesterfield in the U.K. The companies didn't reveal any financial details around the deal. Lean manufacturing is an approach designed to streamline manufacturing, ensuring the shortest time between receiving a customer's order and shipping that order by getting rid of any inherent waste of resources involved in the manufacturing process. Microsoft will use the eBECS module to extend the existing core functionality of its Dynamics AX ERP software so that users can better optimize their processes and connect and integrate their entire supply chains from their customers through to their supply partners, according to Glenn Bray, senior director of Microsoft's industry solutions. By the end of this year, Microsoft will make the English-language module available to its customers, with plans to integrate the code into the next version of Dynamics AX and fully localize it to support all of the 40 languages in which its ERP software is available. Partners who've been trying to attract high-end customers told Microsoft that they were keen for the software giant to become more proactive about industry-specific offerings. "They want Microsoft to stand behind a solution," Bray said. Customers are keen to know they can still count on Microsoft's support should a particular partner change the focus of their business to a different industry or run into some kind of trouble. Microsoft highlighted acquisition as one way it plans to build in additional vertical functionalities to its Dynamics ERP families along with internal development and strategic alliances with its partners. Back in January, the vendor announced a co-development effort with public-sector information management software vendor Tyler Technologies. The two companies are working together to provide public-sector accounting functionality for Dynamics AX with an enhanced version of the ERP software due to appear in the latter half of 2009. Looking ahead, Microsoft expects to create multiple relationships with partners in each of its five chosen industries, Bray said. He doesn't believe that Microsoft getting more involved in providing industry-specific functionality will lead to cannibalization of existing offerings from its partners. There'll be no requirement for partners, for example, to use Microsoft's own lean manufacturing module, Bray said. Instead, partners will be free to choose whichever software is most appropriate for them, so offerings from Microsoft and its partners addressing the same industry needs will coexist. Â
115761
Rogue Wave Software and Sun Microsystems have formed an alliance intended to help enterprises quickly and easily migrate legacy applications to Sun's Solaris 10 OS. The agreement calls for Rogue Wave to port and certify its enterprise C++ development toolkits including SourcePro Core, SourcePro Net, SourcePro DB, SourcePro Analysis, and Rogue Wave LEIF on Solaris 10 for both Sparc- and AMD Opteron-based systems. These tools are particularly aimed at helping help developers in the financial services, telecommunications, and government sectors to migrate existing Windows apps and develop new applications on Solaris 10.
19817
Solving the 'interoperability puzzle' The European Commission is considering the feasibility of an interoperable electronic identity (eID) system across Europe.â¦
741746
Companies will offer a service that authenticates movies, music, and games.
535933
Solaris with Trusted Extensions, due later this year, is under evaluation for Common Criteria certification.
61682
Four small security software vendors have teamed up to develop a set of technical criteria for tools designed to secure Web applications. They also invited Cisco and other large IT vendors to take part in the certification program.
395153
Five online security software and service providers have formed an alliance to help e-commerce and financial services companies fight online fraud.
689284
IBM&#39;s $5 billion acquisition of business intelligence software vendor Cognos took a step forward on Thursday as European regulators gave their approval to the deal.After examining the acquisition, the European Commission said in a statement that it &quot;would not give rise to competition concerns, since the parties&#39; combined market share would be moderate.&quot;IBM announced its intention to buy Cognos, based in Ottawa, in November, saying it hoped to combine the Cognos software with IBM&#39;s back-end database products. They hope to close the deal by the end of March, but there are still a few regulatory requirements to be met, including the approval of Canada&#39;s minister of industry.Business intelligence software is used to analyze data from different sources within a company and help management get a better picture of the business. Several business intelligence software vendors have been acquired recently, including&#160;Hyperion, purchased by Oracle, and&#160;Business Objects, purchased by SAP.IBM to date has partnered with business intelligence software vendors, providing the back-end infrastructure components. But changing customer demands sparked its interest in Cognos, according to Ambuj Goyal, general manager of information management in IBM&#39;s software group and a key player in the Cognos deal.&quot;Now, more and more clients are saying, &#39;We are not an integration technology business, we are in a business-outcome business. You do the integration,&#39;&quot; he said in a recent interview. &quot;More and more clients are not doing best-of-breed purchases.&quot;(Chris Kanaracus in Boston contributed to this story.)&#160;
360148
Tycho:  I should have all the science lined up by the end of the week, ready to stuff into the piano black lozenge I've obtained to celebrate my return to personal computing.  Wish me luck; I've never before had the opportunity to fry four processors at once.       I know things.  Specifically, things that may be of interest to you.  For example, I know if playing Eye of Judgment online is an onerous as it might seem.  It is not!  I cannot express my relief.    Well, let's try.  In my last, vast expose, I broke down a card's unique language and expressed some misgivings about online play - ultimately just accepting it, because what they're trying to do is so weird that there's no prior art.  Essentially, you "register" your thirty card deck with the system itself, where it is stored and named for future use.  This process is extremely straightforward:  it is simply a matter of you laying your cards anywhere on the mat, a few at a time.  It will probably take two minutes if you really keep on it.  Then, you jump online, choose what nation you want to play for, and track down a partner.  At this point, the game will "draw" you your five card hand by showing you the card art onscreen.  You get one Mulligan (or redraw), but if you like your hand you move into the game proper.  We laid out our deck by element, face up, and this smoothed the turn to turn process considerably.      In the build we have, and I hope this is changed for release, it shows you these cards in a single file line without their name or text - just the art.  Once you got familiar with these images, slightly modified from their card format, it's pretty quick - but the names should be displayed on this screen.  You can use the controller to pull up the names, but let's be serious - at no point should the player be forced to interact with a mundane controller once the game is underway.     You should know that the game really wants a well-lit environment.  You don't need a flare gun or anything, but we didn't have what we needed before and certain squares would slow down the game flow with partial reads that would only resolve after several attempts and minute card adjustments.  I should state that here in the office, we removed all the overhead lights, installing a single track of illumination that we point at the ceiling, where lights used to be.  We tend to transform any place we live into a cave.  So, our scenario might be somewhat atypical.    Also, I know if playing Rock Band with all the instruments off of a USB hub is onerous.  You will be happy to know that it is not - we played said instruments spread out on an actual stage, and found it more than satifactory.  The reality is that the drum kit already needs its own wire, so it isn't as though the future had actually arrived anyway.  Plus, the mic isn't wireless either. This makes the contrived brouhaha over wired guitars a fairly transparent traffic ploy.    This is a matter quite apart from Microsoft's reticence to play ball with unique, third party hardware.  And when I say "play ball," I'm taking about the shakedown operation they've got going licensing their wireless technology, which either makes products for their system more expensive or (in the salient case of Rock Band) results in them bundling a wired controller for the same price as a wireless one on a competitor's system.  This is the last holiday they can get away with this sort of thing...  right?