Hi everyone,

I'm completely stumped on this.  I've got an ASP.NET Web Service Application
using a mutual X.509 Authentication policy and I can access it without any
problem from a .NET Winforms app, a regular Web (folders) ASP.NET project,
and an ASP.NET Web Application Project using the VS Development Server.  
However, if I switch the WA project over to IIS, I get the message "Object
contains only the public half of a key pair. A private key must also be
provided."

Normally I'd assume that it's a permissions issue, since IIS is running
under the Network Service account.  And indeed, if I set the application up
to impersonate a privileged user, it works.  But I've explicitly given
permissions to private key of that certificate to the Network User (and to
the Everyone group, just to be sure), so that can't be the only problem.  And
in any event, I know that the permissions are set up correctly because the
Web Service I'm trying to consume is encrypting with the exact same
certificate in the same store!

It seems like WSE is failing to even look for the private key when
configured as a service "consumer" within IIS, even though it works fine as a
service provider.  I can't fathom why this would be.

Any suggestions?

Thanks in advance,
Aaron