>He can delete it, or copy it to another machine. Can be password protected and/or non exportable from the certificate store :) (Could also be linked in a DB with a MAC address so cert only works with a particular host ;) ) alan