Fault signing and encryption have been added to JBoss WS. These features can be enabled by specifying includeFaults="true" on a sign or encrypt element. For the client, specify includeFaults="true" in the encryption and signature elements that are within a <requires> tag to enforce signed/encrypted faults.