diff --git a/token-validator/wg.go b/token-validator/wg.go
index ec44ba4..2bca040 100644
--- a/token-validator/wg.go
+++ b/token-validator/wg.go
@@ -152,8 +152,11 @@ PersistentKeepalive = 5
 # MyNetwork=%s/%d
 # GWIPv6=%s
 # MyLogin=%s
-# KeySign=%s
-`, base64.StdEncoding.EncodeToString(tinfo.SrvPubKey), "82.64.31.248", tinfo.SrvPort, tinfo.CltIPv6, token.SuffixIP, 64, tinfo.CltIPv6, tinfo.CltRange, tinfo.SrvGW6, student.Login, base64.StdEncoding.EncodeToString(token.GenKeySign()))))
+`, base64.StdEncoding.EncodeToString(tinfo.SrvPubKey), "82.64.31.248", tinfo.SrvPort, tinfo.CltIPv6, token.SuffixIP, 64, tinfo.CltIPv6, tinfo.CltRange, tinfo.SrvGW6, student.Login)))
+	if version > 2 {
+		w.Write([]byte(fmt.Sprintf(`# KeySign=%s`, base64.StdEncoding.EncodeToString(token.GenKeySign()))))
+	}
+
 }
 
 func updateWgTunnel(student *adlin.Student, ps httprouter.Params, body []byte) (interface{}, error) {