New certificate utilities   Two new utilities, createcert and viewcert, allow you to make, modify, and view security certificates. Previously, the utilities gencert, reqtool, and readcert were used for this purpose (those utilities have been deprecated).

Viewcert allows you to view several types of PKI object. Previously, you could only view certificates. Viewcert also allows you to view both PEM and DER objects; previously, you could only view PEM objects. With viewcert you can also convert between PEM and DER, as well as encrypt or decrypt passwords.

Createcert combines the functionality of the old gencert and reqtool utilities, and provides new functionality. When creating an ECC curve, you can now choose your curve; previously you had to use sect163k1. You can use key sizes from 512 to 16384 bits; previously, the size limit was 512 to 2048 bits. There is now a default GUID serial number; previously there was no default. You can now optionally create certificates that can sign other certificates. You can also specify advanced options that determine how a certificate's private key can be used. Finally, you can now use unencrypted private keys; previously, all private keys had to have a password.

1

Upgraded Certicom Security Builder for FIPS-certified support on Windows CE   SQL Anywhere products can use one of two FIPS-certified modules for encryption, both from Certicom:

See FIPS-certified encryption technology.