diff --git a/nefed.xml b/nefed.xml
index ecba5c3a44299fc4e612d27e178e6adae5ebc35d..f892f0bc59c98229dd7e193caa79a115f558331d 100644
--- a/nefed.xml
+++ b/nefed.xml
@@ -11863,7 +11863,16 @@ KNGked4df0r1o5CozJ35FjKx1fiYucuvGXU+UZd5Yg6sF6MRhQqud32X3eOFJXS/ndm/jGit7B6A
                         </ds:X509Certificate>
                     </ds:X509Data>
                 </ds:KeyInfo>
-                </KeyDescriptor>
+            </KeyDescriptor>
+            <KeyDescriptor use="encryption">
+                <ds:KeyInfo>
+                    <ds:X509Data>
+                        <ds:X509Certificate>
+                        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
+                        </ds:X509Certificate>
+                    </ds:X509Data>
+                </ds:KeyInfo>
+            </KeyDescriptor>
             <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://localhost:8000/account/?sls"/>
             <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
             <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://localhost:8000/account/?acs" index="1"/>