get policy and signature from the server.