title: WCF client - The EncryptedKey clause was not wrapped with the required encryption token
body: <p>We need to consume a DataPower webservice running SSL and WS-Security.</p>
  
  <p>I have setup a WCF web service running HTTP and custom username password authentication, to be accessed within our network. This web service is consumed from our Oracle database(Oracle cannot do direct connections with WS-Security).</p>
  
  <p>When our local web service is invoked, it makes the call to the external web service, adding in all the WS-Security headers and certificates.</p>
  
  <p>The external web service requires certificate authentication on Transport, and x509 certificates for singing and encrypting the message.</p>
  
  <p>I have setup a CustomBinding in the client app.config (web service is self-hosted as a windows service) and am able to make a connection to the external web service. The guys that maintain the external web service say they are receiving my messages successfully, processing the data and sending the response.</p>
  
  <p>The problem is when my client tries to process the response, I get a "The EncryptedKey clause was not wrapped with the required encryption token 'System.IdentityModel.Tokens.X509SecurityToken'." error.</p>
  
  <p>With the WCF logging, I can see the message I receive, and see the HTTP OK status.</p>
  
  <pre><code>&lt;?xml version="1.0"?&gt;
  &lt;configuration&gt;
    &lt;system.web&gt;&lt;compilation debug="true" /&gt;&lt;/system.web&gt;
    &lt;system.serviceModel&gt;
      &lt;client&gt;
        &lt;endpoint address="https://xxx.fff.eee/Service"
          behaviorConfiguration="WSSecBehavior" binding="customBinding"
          bindingConfiguration="Soap11_Secure" contract="xxx.yyy"
          name="ddddddd" /&gt;
      &lt;/client&gt;
      &lt;behaviors&gt;
        &lt;serviceBehaviors&gt;
          &lt;behavior name="TEST_Service_Behavior"&gt;
            &lt;serviceMetadata httpGetEnabled="true" /&gt;
            &lt;serviceDebug includeExceptionDetailInFaults="true" /&gt;
            &lt;serviceCredentials&gt;
              &lt;userNameAuthentication userNamePasswordValidationMode="Custom"
                                      customUserNamePasswordValidatorType="Test_Proxy.PasswordValidator, Test_Proxy" /&gt;
            &lt;/serviceCredentials&gt;
          &lt;/behavior&gt;
        &lt;/serviceBehaviors&gt;
        &lt;endpointBehaviors&gt;
          &lt;behavior name="WSSecBehavior"&gt;
            &lt;clientCredentials&gt;
              &lt;clientCertificate storeLocation="LocalMachine"
                                 storeName="TrustedPeople"
                                 x509FindType="FindByThumbprint"
                                 findValue="dfgasdfgsdgsgfds" /&gt;
              &lt;issuedToken defaultKeyEntropyMode="CombinedEntropy" cacheIssuedTokens="True" /&gt;
              &lt;serviceCertificate&gt;
                &lt;authentication certificateValidationMode="PeerOrChainTrust"  /&gt;
                &lt;scopedCertificates &gt; 
                  &lt;add targetUri="https://xxx.fff.eee/Service" 
                       storeLocation="LocalMachine" 
                        storeName="TrustedPeople" x509FindType="FindByThumbprint" findValue="sdfgsdfgsdfgsfdg"  /&gt;
               &lt;/scopedCertificates&gt;
                &lt;defaultCertificate storeLocation="LocalMachine" 
                        storeName="TrustedPeople" x509FindType="FindByThumbprint" findValue="sdfgsdfgsdfgsdfgsdfg"  /&gt;
              &lt;/serviceCertificate&gt;
            &lt;/clientCredentials&gt;
          &lt;/behavior&gt;
        &lt;/endpointBehaviors&gt;
      &lt;/behaviors&gt;
      &lt;services&gt;
        &lt;service behaviorConfiguration="TEST_Service_Behavior" name="Test_Proxy.TEST_Service"&gt;
          &lt;endpoint address="" binding="basicHttpBinding" bindingConfiguration="soap11Binding"
            name="Soap11" bindingName="Soap11" contract="Test_Proxy.ITEST_Service" /&gt;
          &lt;endpoint address="mex" binding="mexHttpBinding" name="mex" contract="IMetadataExchange" /&gt;
          &lt;host&gt;
            &lt;baseAddresses&gt;
              &lt;add baseAddress="http://localhost:8449/GCOS_WebService/" /&gt;
            &lt;/baseAddresses&gt;
          &lt;/host&gt;
        &lt;/service&gt;
      &lt;/services&gt;
      &lt;bindings&gt;
        &lt;basicHttpBinding&gt;
          &lt;binding name="soap11Binding" maxBufferPoolSize="2147483647"
            maxBufferSize="2147483647" maxReceivedMessageSize="2147483647"&gt;
            &lt;readerQuotas maxDepth="2147483647" maxStringContentLength="2147483647"
              maxArrayLength="2147483647" maxBytesPerRead="2147483647" /&gt;
            &lt;security mode="TransportCredentialOnly"&gt;
              &lt;transport clientCredentialType="Basic" /&gt;
            &lt;/security&gt;
          &lt;/binding&gt;
        &lt;/basicHttpBinding&gt;
        &lt;customBinding&gt;
          &lt;binding name="Soap11_Secure"&gt;
            &lt;textMessageEncoding messageVersion="Soap11" /&gt;
            &lt;security defaultAlgorithmSuite="Basic128Rsa15" allowSerializedSigningTokenOnReply="False"
              enableUnsecuredResponse="false" authenticationMode="MutualCertificate" messageProtectionOrder="SignBeforeEncrypt"
              messageSecurityVersion="WSSecurity10WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10"
              securityHeaderLayout="Strict" requireDerivedKeys="False"&gt;
            &lt;/security&gt;
            &lt;httpsTransport maxReceivedMessageSize="5000000" authenticationScheme="Negotiate"
              maxBufferSize="5000000" requireClientCertificate="true" /&gt;
          &lt;/binding&gt;
        &lt;/customBinding&gt;
      &lt;/bindings&gt;
  &lt;diagnostics performanceCounters="All" wmiProviderEnabled="True"&gt;
    &lt;messageLogging
         logEntireMessage="True"
         logMalformedMessages="True"
         logMessagesAtServiceLevel="True"
         logMessagesAtTransportLevel="True"
         maxMessagesToLog="5000"
         maxSizeOfMessageToLog="50000" logKnownPii="True"/&gt;
  &lt;/diagnostics&gt;  
    &lt;/system.serviceModel&gt;
    &lt;startup&gt;
      &lt;supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.0" /&gt;
    &lt;/startup&gt;
  &lt;system.diagnostics&gt;
        &lt;trace autoflush="true"/&gt;
  &lt;sharedListeners&gt;
    &lt;add name="sharedListener"
         type="System.Diagnostics.XmlWriterTraceListener"
         initializeData="Test_Service_Proxy.svclog" /&gt;
  &lt;/sharedListeners&gt;
  &lt;sources&gt;
    &lt;source name="System.ServiceModel" switchValue="Verbose, ActivityTracing" &gt;
      &lt;listeners&gt;
        &lt;add name="sharedListener" /&gt;
      &lt;/listeners&gt;
    &lt;/source&gt;
    &lt;source name="System.ServiceModel.MessageLogging" switchValue="Verbose"  &gt;
      &lt;listeners&gt;
        &lt;add name="sharedListener" /&gt;
      &lt;/listeners&gt;
    &lt;/source&gt;
  &lt;/sources&gt;
  &lt;/system.diagnostics&gt;
  &lt;/configuration&gt;
  </code></pre>
  
  <p>Any help or direction please.</p>
  
  <p>Request sent:</p>
  
  <pre><code>&lt;s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;
      &lt;s:Header&gt;
          &lt;o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt;
              &lt;u:Timestamp u:Id="uuid-1717e10e-8265-4ada-9dee-d01782ed03a9-1"&gt;
                  &lt;u:Created&gt;2013-10-27T18:14:45.248Z&lt;/u:Created&gt;
                  &lt;u:Expires&gt;2013-10-27T18:19:45.248Z&lt;/u:Expires&gt;
              &lt;/u:Timestamp&gt;
              &lt;o:BinarySecurityToken&gt;
                  &lt;!-- Removed--&gt;
              &lt;/o:BinarySecurityToken&gt;
              &lt;e:EncryptedKey Id="_0" xmlns:e="http://www.w3.org/2001/04/xmlenc#"&gt;
                  &lt;e:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/&gt;
                  &lt;KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
                      &lt;o:SecurityTokenReference&gt;
                          &lt;o:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"&gt;5ldE9AdwhGZ/xckWL9rimuji1eY=&lt;/o:KeyIdentifier&gt;
                      &lt;/o:SecurityTokenReference&gt;
                  &lt;/KeyInfo&gt;
                  &lt;e:CipherData&gt;
                      &lt;e:CipherValue&gt;HPG3N2VwCSqS3ImLrKLzodnK/I23oPFk097vp8Iru2ZVmR7EotdnL9tU61C6/b8fUU36ntkDVnsECdp0nYqSSbgu9Hoo6LUIEXVLEySqjcj7M3YNeutHwuY1SK5FKdcfFcTuT7a5drxXHzkpJAEyiW7PAxF4c7BF/iVNYXhgcm0lZDpAct2cGhzdSx6gq+K4SMUVq44Vg6Z89yUVyQsERN3nY++DuJC4yn0Z718fD1+tiNlNXNuX2d1JAP1kh9UO0sYIb06lgg5lXmHAzU2XC5MFcPoK6w0HmKH3cyVThFDfnCMeB//xtVcUS7lgDo81o6YF2sstpH+aLHUemuhQTg==&lt;/e:CipherValue&gt;
                  &lt;/e:CipherData&gt;
              &lt;/e:EncryptedKey&gt;
              &lt;c:DerivedKeyToken u:Id="_1" xmlns:c="http://schemas.xmlsoap.org/ws/2005/02/sc"&gt;
                  &lt;o:SecurityTokenReference&gt;
                      &lt;o:Reference URI="#_0"/&gt;
                  &lt;/o:SecurityTokenReference&gt;
                  &lt;c:Offset&gt;0&lt;/c:Offset&gt;
                  &lt;c:Length&gt;16&lt;/c:Length&gt;
                  &lt;c:Nonce&gt;
                      &lt;!-- Removed--&gt;
                  &lt;/c:Nonce&gt;
              &lt;/c:DerivedKeyToken&gt;
              &lt;e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"&gt;
                  &lt;e:DataReference URI="#_3"/&gt;
              &lt;/e:ReferenceList&gt;
              &lt;Signature xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
                  &lt;SignedInfo&gt;
                      &lt;CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                      &lt;SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/&gt;
                      &lt;Reference URI="#_2"&gt;
                          &lt;Transforms&gt;
                              &lt;Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                          &lt;/Transforms&gt;
                          &lt;DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;
                          &lt;DigestValue&gt;eBkrZ4r7IEHLDZANylfLVRCNnrc=&lt;/DigestValue&gt;
                      &lt;/Reference&gt;
                      &lt;Reference URI="#uuid-1717e10e-8265-4ada-9dee-d01782ed03a9-1"&gt;
                          &lt;Transforms&gt;
                              &lt;Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                          &lt;/Transforms&gt;
                          &lt;DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;
                          &lt;DigestValue&gt;EqW8YFzg8XMFLjUNfDlxY6fQR5k=&lt;/DigestValue&gt;
                      &lt;/Reference&gt;
                  &lt;/SignedInfo&gt;
                  &lt;SignatureValue&gt;CGzogpiUa6jTUmLdd9EiqQdd7VeV3naM59raFqjtjtEf5pPk1a4uwk0ihuzWR7RZTXCa+oieqEE/oEQgEdXzjvDxXUUrmEcIV+be5HSBRw0GPj52Cp55kBHV5hfOCUfsmXcgGQ2mxFNyFQchbKQ20sAGgse+z/GzLnkFnGy/RWQ=&lt;/SignatureValue&gt;
                  &lt;KeyInfo&gt;
                      &lt;o:SecurityTokenReference&gt;
                          &lt;o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-1bb3eb61-bd9e-42a9-9d0d-81de76cbbe73-3"/&gt;
                      &lt;/o:SecurityTokenReference&gt;
                  &lt;/KeyInfo&gt;
              &lt;/Signature&gt;
          &lt;/o:Security&gt;
      &lt;/s:Header&gt;
      &lt;s:Body u:Id="_2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"&gt;
          &lt;e:EncryptedData Id="_3" Type="http://www.w3.org/2001/04/xmlenc#Content" xmlns:e="http://www.w3.org/2001/04/xmlenc#"&gt;
              &lt;e:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/&gt;
              &lt;KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
                  &lt;o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt;
                      &lt;o:Reference ValueType="http://schemas.xmlsoap.org/ws/2005/02/sc/dk" URI="#_1"/&gt;
                  &lt;/o:SecurityTokenReference&gt;
              &lt;/KeyInfo&gt;
              &lt;e:CipherData&gt;
                  &lt;e:CipherValue&gt;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&lt;/e:CipherValue&gt;
              &lt;/e:CipherData&gt;
          &lt;/e:EncryptedData&gt;
      &lt;/s:Body&gt;
  &lt;/s:Envelope&gt;
  </code></pre>
  
  <p>Response Received:</p>
  
  <pre><code>&lt;soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"&gt;
      &lt;soap:Header&gt;
          &lt;wsse:Security soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt;
              &lt;xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"&gt;
                  &lt;xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"/&gt;
                  &lt;dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"&gt;
                      &lt;wsse:SecurityTokenReference&gt;
                          &lt;wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"&gt;y1cWMPtJ5ta+ZXxOOHKhkAwG5zM=&lt;/wsse:KeyIdentifier&gt;
                      &lt;/wsse:SecurityTokenReference&gt;
                  &lt;/dsig:KeyInfo&gt;
                  &lt;xenc:CipherData xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"&gt;
                      &lt;xenc:CipherValue&gt;T1TGYnixXqFJcR82RDV9t43jzD6w31zg8uV3Yv84ZG2+wXms2ajayviZ9Ps7+ak4nPVd8uP4u/zYl2jLCpCwEquA2mJ13P6guqcLQt4091ndJAjnBv1EljANCUB7sE4+W6VLZ6zZLhU7kzdH8dF1SUiDS4soSv8/hfWjK3OOrS4=&lt;/xenc:CipherValue&gt;
                  &lt;/xenc:CipherData&gt;
                  &lt;xenc:ReferenceList&gt;
                      &lt;xenc:DataReference URI="#body"/&gt;
                  &lt;/xenc:ReferenceList&gt;
              &lt;/xenc:EncryptedKey&gt;
              &lt;wsu:Timestamp wsu:Id="Timestamp-3c6a0000-8873-44a3-a1ce-7020c285baed" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;
                  &lt;wsu:Created&gt;2013-10-27T18:14:55Z&lt;/wsu:Created&gt;
                  &lt;wsu:Expires&gt;2013-10-27T18:19:55Z&lt;/wsu:Expires&gt;
              &lt;/wsu:Timestamp&gt;
              &lt;wsse:BinarySecurityToken&gt;
                  &lt;!-- Removed--&gt;
              &lt;/wsse:BinarySecurityToken&gt;
              &lt;Signature xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
                  &lt;SignedInfo&gt;
                      &lt;CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                      &lt;SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/&gt;
                      &lt;Reference URI="#Id-9c1b48c4-0bde-48af-9086-f8ce71eb74dd"&gt;
                          &lt;Transforms&gt;
                              &lt;Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                          &lt;/Transforms&gt;
                          &lt;DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;
                          &lt;DigestValue&gt;F3pP+zcm2Iq8GewW/A4GX5kK8aU=&lt;/DigestValue&gt;
                      &lt;/Reference&gt;
                      &lt;Reference URI="#Timestamp-3c6a0000-8873-44a3-a1ce-7020c285baed"&gt;
                          &lt;Transforms&gt;
                              &lt;Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;
                          &lt;/Transforms&gt;
                          &lt;DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;
                          &lt;DigestValue&gt;MiDu5ZphIhMIAb9ISBj1EKOIfOY=&lt;/DigestValue&gt;
                      &lt;/Reference&gt;
                  &lt;/SignedInfo&gt;
                  &lt;SignatureValue&gt;gEjjen88BeWVuTD7t2txOCFXfEOE2g2bvDbWnxS24tSJYpvywl+PEzif5Is/AXTzgmL/McU8/GOgxt8ZKTLe1k3Ux4ZlGCFQiuEyk/1rmEJ1UYt4wn6O0k3PU34HOgCJDjC/0CYjdNFEgG9rwFk6+H8nldCcbI8ZMsM+6OwvECthB5CNgwM3FZcIIZJmTUkEQLEsszw08xaao7kyZCMbs5HBvUr5kNrIiim0pbYO0o5eFF2A59NBfNugo8EYwvC9mkcy8/RJv7aDflxoLxPNgyV7HCFTyt5lwApo1yzOQFVFduGxCyQACBJdR5kevkmfiqBWTYWk6+/YcqaacNXKPg==&lt;/SignatureValue&gt;
                  &lt;KeyInfo&gt;
                      &lt;wsse:SecurityTokenReference xmlns=""&gt;
                          &lt;wsse:Reference URI="#SecurityToken-1e313a32-f22f-43bf-a2d7-a2a24b98a3ef" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/&gt;
                      &lt;/wsse:SecurityTokenReference&gt;
                  &lt;/KeyInfo&gt;
              &lt;/Signature&gt;
          &lt;/wsse:Security&gt;
      &lt;/soap:Header&gt;
      &lt;soapenv:Body wsu:Id="Id-9c1b48c4-0bde-48af-9086-f8ce71eb74dd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"&gt;
          &lt;xenc:EncryptedData Id="body" Type="http://www.w3.org/2001/04/xmlenc#Content" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"&gt;
              &lt;xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/&gt;
              &lt;xenc:CipherData&gt;
                  &lt;xenc:CipherValue&gt;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&lt;/xenc:CipherValue&gt;
              &lt;/xenc:CipherData&gt;
          &lt;/xenc:EncryptedData&gt;
      &lt;/soapenv:Body&gt;
  &lt;/soap:Envelope&gt;
  </code></pre>