Hi Mark,

If you have an internal windows certificate server available, it's
convenient to use it for creating test certificate. You can just use the
certificate server to publish a server certificate which contains private,
public key pairs. After install it on the server machine(which host your
WSE server application), you can use the windows certificate management
console(can lauch it through MMC snap-in) to view that installed
certificate, and we can also export it without private key, and the
certificate exported without private key(only public key) is just the one
which can be used as client certificate.  If you want to make a certificate
for client which also need sign and encrypt, you also need to create a
certificate which contains private key for client(just like the server
certificate).

In addition, if you're going to use the makecert tools to create test
certificates, you can have a look at the WSE samples' setup.bat file, it
contains script code which use makecert.exe to create test certificate
(both server and client ones).

Hope this helps.

Regards,

Steven Cheng
Microsoft Online Community Support

==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.