Sorry, but I'm still having trouble finding the correct templates.

From our cert server I'll select "Request a certificate", then  I'll
select "Submit Advanced Certificate Request".

Under advanced, there are three options, one for "Create and Submit",
another for a request with base 64 encoded CMC (or renewal request), and
the last for smart cards.

So I chose the first, and then the next page offers three certificate
templates, "User", "EFS", "TLS".  I chose "User", and there is an option
for marking keys as exportable. But I don't see anything about data
signing. And I gather that an exportable key is not the same as one with
key exchange support.

There is also an option of installing the key to the local computer cert
store, which I was not selecting.  I was simply exporting the key that
was placed in my personal store after my request was submitted.

I'm using these certs for authentication, and the cert that the "User"
template gives me says in its description that it supports such use.

What am I missing -- is it that our cert server is not capable of
generating the type of cert I need?  I have been doing my development
with the certs provided with the hands-on-lab for WSE 3 and they work.

I'm sorry if I'm missing something really obvious.

Thanks.