Hi Bob,

I'm interested in the "other story". My instances are on separate computers
in separate Windows domains. The gap in my understanding is around the use of
certificates for authenticating the service broker transport.

I have done a good deal of reading, and haven't yet found a "worked example"
of the use of certificates for this purpose.

So far, here's what I've got:
1. InstanceA is the initiator, InstanceB is the target.

2. On InstanceB, I create CertificateB. I create an endpoint on InstanceB,
using CertificateB. Then I export CertificateB to a file, and move it to
InstanceA.

3. On InstanceA, I create CertificateA. I create an endpoint on InstanceA,
using CertificateA. Then I export CertificateA to a file, and move it to
InstanceB.

4. On InstanceA, I create a login, LoginB; a user, UserB; then I create a
certificate from file created in step 2, "CREATE CERTIFICATE CertificateB
AUTHORIZATION UserB FROM FILE = '...'

5. On InstanceA, I grant connect permission on the endpoint to LoginB.

6. Back on InstanceB, I create a login, LoginA; a user, UserA; then create a
certificate from the file created in step 3, "CREATE CERTIFICATE CertificateA
AUTHORIZATION UserA FROM FILE = '...'

7. On InstanceB, I grant connect permission on the endpoint to LoginA.

I create a pair of messages, a contract, queues and services, and routes.

When I send a message, these are the symptoms:
- Only one row in the initiator's sys.conversation_endpoints. There should
be two, one for each direction of the conversation, right?
- In the initiator's sys.transmission_queue, the transmission_status column
is empty.

Service broker *is* enabled:
SELECT is_broker_enabled FROM sys.databases WHERE database_id = DB_ID() ;
returns 1 in both the initiator and target databases.

Pinging works, as does telnet to the port in my routes' addresses, in both
directions, so the firewalls are not getting in the way (heck, they're
disabled for now).

The event log has no messages on either machine.

Any suggestions about how to identify what is not working here? Is it
authentication? or is there some other issue?

Thanks,
--Craig.