Meant to post this to all others too (long time reader, first time poster to Oracle-L...so bear with me if I don't Reply All). Thanks for the input and validation, great answers all around. These are 10g databases, all internally managed PKI. Here's the kicker too...they won't even allow DP on development and testing databases. I'm definitely not discounting the decades of experience that these two have on me (one of the reasons I took the job), but it comes down to new technologies displacing outdated policies in my opinion. Thanks again! Bill