> Where is the fail? You sign the *whole* document. After the signature is generated, you have new document (e.g. signature value have changed) and the signature correctly fails. You might want to use enveloped transform to exclude Signature element from signature. Aleksey