1. Create a keystore with a private key that has a different password than the keystore: keytool -genkey -alias mykey -keypass changeit -storepass changeit2 -keystore client.keystore 2. Create a jboss-wsse-client.xml config with <key-passwords> 3. Set up a WS client that uses the WSS config.

A keystore can contain a private key that has a different password to the password of the keystore. To use the key in a web service client, the key-password pair must be defined in the <key-password> element in the <filename>jboss-wsse-client.xml</filename> configuration file. Previously, the WS client or WS endpoint that used the configuration file did not process the <key-password> element as the jbossws service failed to pick up the element. The service now detects and picks up the <key-password> element as expected and the problem no longer occurs.