Got into playing with the management API over the weekend, and got wrapped around the axle when it came to getting an API certificate.  This post saved me a lot of time and effort:

http://www.davidaiken.com/2009/12/21/how-to-create-a-x509-certificate-for-the-windows-azure-management-api/

-Dan