Jochen,

Thanks, I'll try again. I initially placed the kyrtool.exe file in the program folder w/o success. I kept getting the 0xc0000007b error. I ran as administrator, etc. The wiki mentions extracting the ZIP file in the program directory. This creates the subfolders, of course. I'm using Windows 7 Professional. I'm assuming you're just launching from a CMD window. This seems so simple, not certain why I'm encountering problem. I'm wondering whether my A/V or some other program is interfering. I might boot into safe mode or something to isolate other applications on my end.

Best regards,
Michael

Michael -- Try using the 32-bit version of kyrtool.exe (located in the kyrtool\w32 folder of the kyrtool.zip file).  I can duplicate the error message you receive when I try the 64-bit version.

Richard

Richard,

Update: I'm just wondering how many people are using the internal (Domino) CA vs. a 3rd party. I have always gone with 3rd party SSL certificates when external users accessed. If internal only and using LAN or VPN connection, I could see using the Domino CA process. What about internal users only accessing from the Internet? Would a keyring with certificate issued by the Domino CA be acceptable for internal users accessing a site? I just want to make sure there are no issues (e.g. Traveler, etc.).

Thanks, I'm certain I tried the 32-bit version earlier. It worked this time. I might have only attempted execution from w32 folder vs. directly in the program directory. When I copied to the program folder, it worked. There's definitely an issue with the 64-bit version.

Regards,
Michael

Michael --

You're welcome.

Would a keyring with certificate issued by the Domino CA be acceptable for internal users accessing a site?

Absolutely.

I'm just wondering how many people are using the internal (Domino) CA vs. a 3rd party. I have always gone with 3rd party SSL certificates when external users accessed. If internal only and using LAN or VPN connection, I could see using the Domino CA process. What about internal users only accessing from the Internet?

If "external users" means the general public then it may make more sense to use third-party certificates instead of managing your own. But if your target audience is under your control (regardless of whether or not they access your servers internally or from the internet) as long as they're all able/willing to install your certificates, it probably makes better economic sense to create, manage and distribute your own (as Dave Kern from IBM points out in this thread). Domino is powerful enough to do this already so why pay a third party to do what you can do yourself at no additional cost?

Richard