Currently it is not possible to configure Signature and Encryption related attributes on IDP and SP resources unless parent Federation has its Key Store set up.

This configuration can be found under

For IDP:
Configuration -> Picketlink -> Federation -> view configuration -> Identity Provider -> Signature Policy / Encryption Policy 
For SP:
Configuration -> Picketlink -> Federation -> view configuration -> Service Provider -> Signature and Encryption Policy

However this configuration is possible via CLI and thus we propose to make Admin Console behave constantly. Allow the configuration but keep the information message displayed in case when Key Store is not configured.