securid

["Marcus J. Ranum" <mjr @ iwi . com>]

>If, when you register a newly purchased card with the ACE hardware solutions
>(that is, the ones which have RS232 interfaces and internal databases), do
>you register the card to the database using the serial number?  If the only
>thing you need to use to register the card is the serial number, then it
>would appear that the calculation is being driven by the serial number.

	It's not. When you load your ACE server software there's a
file named yoursite.dat which contains the encrypted key records for
each card. The key records are indexed to the card's serial number.
The serial number is just a reference that allows the server software
to map the unique card to its unique key, without having to reveal
the key.

mjr.