Just a note to let lafaserem know that the code ((StubExt)port).setConfigName("Standard WSSecurity Client"); is JBossWS-specific. I prefer to keep my Java code generic and place container-specific things into configuration files, make the code easier to port. Now, if the config name could be set using an annotation, that would be ideal because other containers would ignore the annotation. I also remembered an excellent description of keystores and truststores, perhaps that will be helpful http://www.jboss.com/index.html?module=bb&op=viewtopic&t=94406 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4121100#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...