This documentation is archived and is not being maintained.

AsymmetricSecurityBindingElement Class

Represents a custom binding element that supports channel security using asymmetric encryption. This binding element signs the message using the sender's authentication token and encrypts the message using the recipient's token.

Namespace:  System.ServiceModel.Channels
Assembly:  System.ServiceModel (in System.ServiceModel.dll)

public sealed class AsymmetricSecurityBindingElement : SecurityBindingElement, 

The AsymmetricSecurityBindingElement type exposes the following members.

Public methodAsymmetricSecurityBindingElement()Creates an instance of this class.
Public methodAsymmetricSecurityBindingElement(SecurityTokenParameters)Initializes a new instance of AsymmetricSecurityBindingElement with the specified recipient token parameters.
Public methodAsymmetricSecurityBindingElement(SecurityTokenParameters, SecurityTokenParameters)Initializes a new instance of AsymmetricSecurityBindingElement with the specified recipient and initiator token parameters.

Public propertyAllowInsecureTransportGets or sets a value that indicates whether mixed-mode secured messages can be sent over an unsecured transport such as HTTP. (Inherited from SecurityBindingElement.)
Public propertyAllowSerializedSigningTokenOnReplyGets or sets a value that indicates whether serializing a signing token on a reply message is allowed.
Public propertyDefaultAlgorithmSuiteGets or sets the message encryption and key-wrap algorithms. (Inherited from SecurityBindingElement.)
Public propertyEnableUnsecuredResponseGets or sets a value that indicates whether can send and receive unsecured responses to secured requests. (Inherited from SecurityBindingElement.)
Public propertyEndpointSupportingTokenParametersGets the endpoint that supports token parameters. (Inherited from SecurityBindingElement.)
Public propertyIncludeTimestampGets or sets a value that indicates whether time stamps are included in each message. (Inherited from SecurityBindingElement.)
Public propertyInitiatorTokenParametersSpecifies the token definition for the initiator.
Public propertyKeyEntropyModeGets or sets the source of entropy used to create keys. (Inherited from SecurityBindingElement.)
Public propertyLocalClientSettingsGets the binding properties specific to local security settings used by the client. (Inherited from SecurityBindingElement.)
Public propertyLocalServiceSettingsGets the binding properties specific to local security settings used by the service. (Inherited from SecurityBindingElement.)
Public propertyMessageProtectionOrderGets or sets the order of message encryption and signing for this binding.
Public propertyMessageSecurityVersionGets or sets the message security version. (Inherited from SecurityBindingElement.)
Public propertyOperationSupportingTokenParametersGets the collection of operation supporting token parameters. (Inherited from SecurityBindingElement.)
Public propertyOptionalEndpointSupportingTokenParametersGets the optional supporting token parameters for the service endpoint. (Inherited from SecurityBindingElement.)
Public propertyOptionalOperationSupportingTokenParametersGets the collection of optional operation supporting token parameters. (Inherited from SecurityBindingElement.)
Public propertyRecipientTokenParametersSpecifies the token definition for the recipient.
Public propertyRequireSignatureConfirmationGets or sets a value that indicates whether message signatures must be confirmed.
Public propertySecurityHeaderLayoutGets or sets the ordering of the elements in the security header for this binding. (Inherited from SecurityBindingElement.)

Public methodBuildChannelFactory<TChannel>Creates a channel factory based on the SecurityBindingElement settings and the binding context passed in. The channel factory created is a SOAP message security channel factory, which internally has a reference to the channel factory that corresponds to the binding context, (which includes the transport channel factory). (Inherited from SecurityBindingElement.)
Protected methodBuildChannelFactoryCore<TChannel>When implemented, creates a channel factory of a specified type. (Inherited from SecurityBindingElement.)
Public methodBuildChannelListener<TChannel>Creates a channel listener based on the SecurityBindingElement settings and the binding context passed in. (Inherited from SecurityBindingElement.)
Protected methodBuildChannelListenerCore<TChannel>When implemented, creates a channel listener of a specified type. (Inherited from SecurityBindingElement.)
Public methodCanBuildChannelFactory<TChannel>Gets a value that indicates whether a channel factory of the specified type can be built. (Inherited from SecurityBindingElement.)
Public methodCanBuildChannelListener<TChannel>Gets a value that indicates whether a channel listener of the specified type can be built. (Inherited from SecurityBindingElement.)
Public methodCloneCreates a new instance of this class initialized from the current one. (Overrides BindingElement.Clone().)
Public methodEquals(Object)Determines whether the specified Object is equal to the current Object. (Inherited from Object.)
Protected methodFinalizeAllows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.)
Public methodGetHashCodeServes as a hash function for a particular type. (Inherited from Object.)
Public methodGetProperty<T>Gets a specified object from the BindingContext. (Overrides SecurityBindingElement.GetProperty<T>(BindingContext).)
Public methodGetTypeGets the Type of the current instance. (Inherited from Object.)
Protected methodMemberwiseCloneCreates a shallow copy of the current Object. (Inherited from Object.)
Public methodSetKeyDerivationSets a value that indicates whether derived keys are required. (Overrides SecurityBindingElement.SetKeyDerivation(Boolean).)
Public methodToStringReturns a string that represents this AsymmetricSecurityBindingElement instance. (Overrides SecurityBindingElement.ToString().)

Explicit interface implemetationPrivate methodIPolicyExportExtension.ExportPolicyExports a custom policy assertion about bindings, which is added to the Web Services Description Language (WSDL) information.

A custom binding contains a collection of binding elements arranged in a specific order: the element that represents the top of the binding stack is added first, the next element down in the binding stack, is added second, and so forth.

To add this class to a binding

  1. Create a BindingElementCollection.

  2. Create custom binding elements that is above this binding element in the binding stack, such as the optional TransactionFlowBindingElement and ReliableSessionBindingElement.

  3. Add the created elements in the preceding order to the BindingElementCollection using the InsertItem(Int32, BindingElement) method.

  4. Create an instance of AsymmetricSecurityBindingElement and add it to the collection.

  5. Add any additional custom binding elements to the collection, such as TcpTransportBindingElement.

Before using this class, you should determine if a standard binding meets your security requirements.


Once an instance of this object is created, you should treat the properties of its base class SecurityBindingElement as immutable. Calling set on some properties may have unpredictable effects: the binding may behave as if the property retained its old value, with a run-time failure being the only indication of an issue. Two properties known to behave this way are KeyType and MessageSecurityVersion. There may be other properties this is true of.

The following example shows how to use this class to create a custom binding that includes this class as a security binding element. For more information about the code in this example, see How To: Reference X.509 Certificates Consistently.

public Binding CreateClientBinding()
    AsymmetricSecurityBindingElement abe =


    X509SecurityTokenParameters istp =
       abe.InitiatorTokenParameters as X509SecurityTokenParameters;
    if (istp != null)
        istp.X509ReferenceStyle =
    X509SecurityTokenParameters rstp =
    abe.RecipientTokenParameters as X509SecurityTokenParameters;
    if (rstp != null)
        rstp.X509ReferenceStyle =

    HttpTransportBindingElement transport = 
        new HttpTransportBindingElement();

    return new CustomBinding(abe, transport);

.NET Framework

Supported in: 4, 3.5, 3.0

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.