If your out to get a larger CA server (works for smaller installations too) check out ejbca, build on Enterprise Java Beans. ejbca.sf.net / http://sourceforge.net/projects/ejbca //Henrik Andreasson