http://blogs.msdn.com/spatdsg/archive/2006/04/27/585450.aspxWhen you request Key Encipherment and Key Agreement in the key usage - we strip off the Key Agreement flag by default. Here are the available flags: #define CERT_DIGITAL_SIGNATURE_KEY_USAGE 0x80 #define CERT_NON_REPUDIATION_KEY_USAGE 0x40 #define CERT_KEY_ENCIPHERMENT_KEY_USAGEen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.msdn.com/spatdsg/archive/2006/04/27/585450.aspx#8749676Fri, 18 Jul 2008 18:02:23 GMT91d46819-8472-40ad-a661-2c78acb4018c:8749676Luciano<p>This is not clear AT ALL. Where are these flags defined ? What does removing that entry implies ? How can I change the key Usage from b8 to 0x06 ?</p>