Most folks with crypto hardware usually include and maintain their ENGINE manipulation as part of their SDK. Is there any reason why this approach doesn't work here? -- Senior Architect, Akamai Technologies IM: richsalz at jabber.at Twitter: RichSalz