Leon Clarke wrote: > I was under the impression that if you wanted your system to be used > for RESTRICTED data, i > needed to be certified to EAL 2 Not of necessity. http://www.cesg.gov.uk/products_services/iacs/ctas/index.shtml ian