Service config.xml

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
  <connectionStrings>
    <clear/>
    <add name="DefaultConnection" connectionString="---my connection string---"/>
  </connectionStrings>
  <system.serviceModel>
    <services>
      <service name="Foo" behaviorConfiguration="secure_behavior">
        <endpoint
          address="net.tcp://service-machine:8092"
          binding="netTcpBinding"
          contract="FooBar"
          bindingConfiguration="message_security">
          <identity>
            <certificateReference findValue="aa bb cc"
                    storeLocation="CurrentUser"
                    storeName="My"
                    x509FindType="FindByThumbprint"/>
          </identity>
        </endpoint>
        <endpoint
          address="http://service-machine:8091/MEX/"
          binding="mexHttpBinding"
          contract="IMetadataExchange"/>
      </service>
    </services>
    <behaviors>
      <serviceBehaviors>
        <behavior name="secure_behavior">
          <serviceMetadata httpGetEnabled="true" httpGetUrl="http://service-machine:8091/MEX/"/>
          <serviceAuthorization
            roleProviderName="SqlRoleProvider"
            principalPermissionMode="UseAspNetRoles" />
          <serviceCredentials>
            <serviceCertificate findValue="aa bb cc"
                                storeLocation="CurrentUser"
                                storeName="My"
                                x509FindType="FindByThumbprint"/>
            <userNameAuthentication
              membershipProviderName="SqlMembershipProvider"
              userNamePasswordValidationMode="MembershipProvider"
              />
          </serviceCredentials>
        </behavior>
      </serviceBehaviors>
    </behaviors>
    <bindings>
      <netTcpBinding>
        <binding name="message_security">
          <security mode="TransportWithMessageCredential">
            <message clientCredentialType="UserName" />
          </security>
        </binding>
      </netTcpBinding>
    </bindings>
  </system.serviceModel>
  <system.web>
    <membership defaultProvider="SqlMembershipProvider" userIsOnlineTimeWindow="15">
      <providers>
        <clear />
        <add
          name="SqlMembershipProvider"
          type="System.Web.Security.SqlMembershipProvider"
          connectionStringName="DefaultConnection"
          applicationName="Sample1"
          enablePasswordRetrieval="false"
          enablePasswordReset="false"
          requiresQuestionAndAnswer="false"
          requiresUniqueEmail="true"
          passwordFormat="Hashed" />
      </providers>
    </membership>
    <roleManager
      enabled ="true"
      defaultProvider ="SqlRoleProvider" >
      <providers>
        <clear />
        <add
          name="SqlRoleProvider"
          type="System.Web.Security.SqlRoleProvider"
          connectionStringName="DefaultConnection"
          applicationName="Sample1"/>
      </providers>
    </roleManager>
  </system.web>
</configuration>