Hi,
   I am in the process of trying to implement a simple x509 certificate
policy example. My policy file looks like below, this is on the server. I am
running client and server on the same machine for testing. I have installed
the private key Client Private.pfx and Server Public.cer on my
Certificates - Current User -> Personal -> Certificates and Public.cer in my
Certificates - Local Computer -> Personal -> Certificates. My understanding
was that this was the requirement to get certificates to work on a single
machine. I  get the error when I execute my code:

"Referenced security token could not be retrieved".

Am I missing something simple??

Thanks in advance.

<?xml version="1.0" encoding="utf-8"?>

<policyDocument xmlns="http://schemas.microsoft.com/wse/2003/06/Policy">

<mappings xmlns:wse="http://schemas.microsoft.com/wse/2003/06/Policy">

<endpoint uri="http://localhost/StockTraderSecurePolicy/StockTrader.asmx">

<defaultOperation>

<request policy="#Encrypt-X.509" />

<response policy="" />

<fault policy="" />

</defaultOperation>

</endpoint>

</mappings>

<policies
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurit
y-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy"
xmlns:wssp="http://schemas.xmlsoap.org/ws/2002/12/secext"
xmlns:wse="http://schemas.microsoft.com/wse/2003/06/Policy"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
ty-secext-1.0.xsd"
xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing">

<!-- This policy ensures that the message is encrypted with an x.509
Certificate -->

<wsp:Policy wsu:Id="Encrypt-X.509">

<!-- The MessagePredicate indicates where to apply the polciy -->

<wsp:MessagePredicate wsp:Usage="wsp:Required"
Dialect="http://schemas.xmlsoap.org/2002/12/wsse#part">

wsp:Body()

</wsp:MessagePredicate>

<!--The Confidentiality assertion is used to ensure that the SOAP Body is
encrypted.-->

<wssp:Confidentiality wsp:Usage="wsp:Required">

<wssp:KeyInfo>

<!--The SecurityToken element within the KeyInfo element describes which
token type must be used for Encryption.-->

<wssp:SecurityToken>

<wssp:TokenType>http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509
-token-profile-1.0#X509v3</wssp:TokenType>

<wssp:TokenIssuer>CN=Root Agency</wssp:TokenIssuer>

<wssp:Claims>

<!--By specifying the SubjectName claim, the policy system can look for a
certificate with this subject name in the certificate store indicated in the
application's configuration, such as LocalMachine or CurrentUser. The WSE
X.509 Certificate Tool is useful for finding the correct values for this
field.-->

<wssp:SubjectName
MatchType="wssp:Exact">CN=WSE2QuickStartServer</wssp:SubjectName>

<wssp:X509Extension OID="2.5.29.14"
MatchType="wssp:Exact">bBwPfItvKp3b6TNDq+14qs58VJQ=</wssp:X509Extension>

</wssp:Claims>

</wssp:SecurityToken>

</wssp:KeyInfo>

<wssp:MessageParts
Dialect="http://schemas.xmlsoap.org/2002/12/wsse#part">wsp:Body()</wssp:Mess
ageParts>

</wssp:Confidentiality>

</wsp:Policy>

</policies>

</policyDocument>