>am i still missing something? The metadata's obviously still wrong. All the documentation on how trust engines work is in the wiki. That's all the help I can give you on what has to be in the metadata. I don't know what trust engine you're trying to make work. ExplicitKey works one way, and PKIX works another. -- Scott