Hi John,

>I finally created a stand-alone DLL of the CryptoAPI, exposing all its members, and once again; everything works just great under every processing scenario but IIS/ASP.

CryptoAPI uses certificates stored in the user profile. Unlike the ASP.NET user account, the IIS_ and IWAM_ user accounts do not have a profile. You can configure IIS to impersonate a particular user, or call LogonUser() yourself to change identity of your ASP application.