I'm using Glassfish. What I understand is that I have to modify the sun-ejb.xml file to specify that I want message-level protection. I'll try that, then I'll have to figure out how to secure the WSC, i.e. have the client send signed data.
Jean-Noel
[Message sent by forum member 'jncolin' (jncolin)]
http://forums.java.net/jive/thread.jspa?messageID=209857