> >That would be insecure. Instead, to disable signature verification at >startup time only, add verifyBackup="false" to the metadata filter: > ><MetadataFilter type="Signature" certificate="inc-md-cert.pem" >verifyBackup="false"/> Thought so, thanks. Do I need the metadata file in shibboleth/etc or will it use the previous one from the cache directory? >