You probably do *not* want assertions signed, most likely, you should sign responses. But "always" is a legacy config setting. For a non-legacy file, just set it to true if that's what you want. If you want the old "conditional" setting, that requires a bit more than just setting the value to conditional. -- Scott