For starters, could you show us your sun-ejb-jar.xml (in particular the <ior-security-config> definitions), the stacktrace you get (what kind of unrecoverable failure), and the way you start up your client application (what port are you accessing, how are you passing the keystore and truststore settings)?
[Message sent by forum member 'dkoper' (dkoper)]
http://forums.java.net/jive/thread.jspa?messageID=263062