Digital Signature Data File Issue

Hello all,
I am something of a network administrator / supervisor (by position not education so some of the technical aspects of my shop still alude me). Right now I am having an issue with digitally signing PDF files; previously when I signed the files the size would remain approximately the same (moving perhaps from 200 KB to 300 KB, however when I sign files now the size jumps to almost 7000 KB. Previously I had received a message when signing that indicated I could change a setting to add an extra layer of protection and my hypothesis is that this may be the cause, but I am not 100% sure of that.
Has anyone experienced this problem before, or have any possible solutions? My guess is that there is an option where Adobe controls how secure the signature I create has to be and it defaulted to the more secure, much larger file size after I received the initial notification.
Thank you for your guidance and wisdom.

Similar Messages

Forms, digital signatures, cross platform issues

I am trying to implement pdf forms in an educational environment to utilize digital signatures and reduce paper. The form data does not need to go anywhere. It just stays in the form at this point. Some people on campus have Windows machines, others have Macs. All the Windows machines have Acrobat Pro installed and not Reader. The Mac people are more likely to have Reader. There have been problems with emailing these forms between platforms. Does anyone have any ideas about how to solve this? My IT department will not support Reader on Windows machines, so the forms have to work in Acrobat and Reader! How should the orginal document I put online be saved to work in both programs and platforms? What direction should I give the users about how to save the forms they fill out and sign? I've looked all over for this kind of info, but can't seem to find it. Any and all help is greatly appreciated. FYI, I am not an IT person. Thanks!!!

For Mac users, it will be important that they don't use the Preview application to work with the forms. Preview is the default Mac PDF viewer out of the box, and it corrupts PDF forms when it saves them, so it really needs to be avoided.
In order for Reader to save a filled-in form and apply digital signatures, the forms need to be Reader-enabled, which can be done with Acrobat Pro. Acrobat Standard can Reader-enable documents too, but it doesn't apply the digital signature usage right.
The problem with this is if you will be getting the forms returned to you, you can only use data from no more than 500 instances for the form, including hardcopies. This is an Acrobat License Agreement restriction. If they won't be returned, there won't be a problem. Also, the Acrobat users don't need to use a Reader-enabled version, so you can collect all the forms you want from them.
Email will be most reliable if the user manually attaches the file to an email, as opposed to setting up a button on the forms to submit to an email address. You'll find many threads here discussing the emailing difficulties with forms that are set up this way. The problems can be minimized with user education, as the manual process is available in either case. A submit button provides convenience, unless it doesn't work, and it won't for some users.

Digital Signatures causing performance issue

I have created a form for a two-step process in which the first user will open, enter data, and submit the form for another user to approve. The problem is that during the approver phase, they will digitally sign the form (there are two digital signature fields for each section of the form, the approver is required to sign at least once in order to submit) and then submit, but the process seems to lag for about 20-30 seconds after they click submit.
I understand that the digital signatures may add to the size of the form overall, but is one or two signatures enough to cause a delay?
I have some javascript that I fire at the pre-submit event using AWS_Action to see what the user action is and if the user selects to submit then it will test to see if at least one signature field is signed and valid, if so then changes the signature field type to disabled (I have the signature fields become required type based on certain fields containg data) and submits the form. Is it possible that this script could cause such a delay after the submit? We aren't having any delays when the first user submits the form without digital signatures so I assume this is what is causing the problem.

I expect that the lag may be related to the script you are executing, rather that specifically by the digital signature itself. Are you able to test the form outside of the process to see if the lag remains? Could you change the submit button to a mailto: uri and see how long it takes for the "pre-submit" code to execute?
Regards
Steve

Digital signature save file xml

hello, you can save the digital signature in an XML file?

Make sure you also change your SignatureMethod algorithm to RSA_SHA1, ex:
... fac.newSignatureMethod(SignatureMethod.RSA_SHA1, null) ...

Digital Signature Check Printing issue

Hi ,
I have one issue in check printing for Tcode : F110 .
When i take printout signature comes below the line   , i want to move digital signature above the line .
in Script Code is like this
T3
T3
/:           HEX TYPE PCL LEFT '5.00' CM
/=           1B2831511B2873317033362E307630733062305453
/:           ENDHEX
Now Can you tell me how to move signature from below the line to Above the line .
Regards,
Sandeep Jadhav

Hi,
When you say adjustment how did you pass the adjustment ? what transaction code was used? normally to post a payment without printing check you can use F-53 and that should not print any checks.
Thanks and Regards
K.Raghavendran

Digital signature on LMS - issue with R/3 password

Hi,
We have enabled the Digital Signature (FDA check) for Follow-up against WBT course delivery method. Once I click on 'Confirm Participation' link, I get a popup to provide username and password. I believe this popup checks for SAP (R/3) UserID and password. The problem is, Learning portal (HCM_LEARNING) is linked within SAP Enterprise portal and most of our users don't have backend access and no password. They only know thier portal username and password.
So definitely, when I put my portal login details into the Popup, it will error as the password is different to the ECC System.
Is there any work around solution for this issue? Has anyone been able to resolve the issue around password?
Would really appreciate if you could share the solution with us.
Best,
Jaya

Hi
You need to Trigger an Outbound Message for generating the IDoc.
Using the process code, the IDoc interface finds the application selection module which converts the SAP document into an IDoc.
The process code is only used with applications which perform outbound processing via Message Control (NAST).
goto Transaction NACE ,
Select the Application ME - Inventory mangament.
Clcik on Output types , Copy the Out Put type WA03 & create anew Out put type.
Selec the Output type & Click on Processing routines
Maintain the medium 6 - EDI , there is no standard print program for EDI So you need to create your own Program & form Routine
Check this form routine EDI_PROCESSING in program RSNASTED for having an idea.
After maintaining all the relevant EDI Paramters.
Maintain the message condition record using MN21 for the new out put type.
When you create a Goods issue the Message will be triggereed & Idoc will be trigerred , you can then transfer this into XI.
Thanks & Regards
Kishore

Cannot upgrade software on sensor due to digital signature update file

Attached is a jpg of the error message when trying to apply update through IDM for the latest version:
IPS-SSM_20-K9-sys-1.1-a-7.0-6-E4.img
I've downloaded the image twice now from Cisco. I've done a token reboot but that didnt help.
I did apply the recovery image right before this with no issues.
Any ideas?
Thanks,
J

You've experience a very common area of confusion.
There are multiple different file types of the same version.
Some of which can be applied through IDM and CLI, and otherwise which can only be applied through other methods.
Basic Types:
System Images
Recovery Packages
Uprgade Packages
System Images have "-sys-" in the filename and generally end in .img.
These files can Not be installed through IDM or the CLI.
These files will erase the entire compact flash and install a completely new image on the system.
These files are generally only used when trying to get back to an Older image, or when you believe that the current image on the sensor has been Corrupted.
They are not recommended for upgrading as the configuration of the sensor will be completely removed during erasing of the compact flash.
They are installed through either ROMMON (on appliances), from the hw-module recover command of the ASA (on ASA IPS modules), through the bootloader (on AIM and NME router modules), or through the maintenance partition (in the IDSM2 Cat 6K module).
In your case it was a System Image you were trying to install through IDM, which is not allowed.
Recovery Packages have "-r-" in the filename and end in .pkg.
They will re-image the Recovery partition of the sensor.
They are installed using IDM or the CLI upgrade command. (.pkg files work with the Upgrade command)
The "recover" command on the sensor can then be used to boot to the Recovery Partition and re-image the Application partition to that version.
The "recover" can be done from a remote box through an SSH connection to the sensor. Unlike System Images which often require a Console connection or connection to the hosting device.
Recovery Packages are recommended when you believe that the current image on the sensor has been Corrupted.
They can often be used for Downgrading to an older version, but this is not officially supported (and will sometimes fail, if it fails then you need to use a System Image instead).
Upgrade Packages come in different types.
Major, Minor, and Service Pack upgrade files do not have a designator in their name, and usually just have the platform and version.
Signature Updates have "-sig-" in the name.
Engine Updates have "-engine-" in the name.
All Upgrade Packages end in .pkg.
Upgrade Packages can be installed using IDM or the CLI upgrade command.
In your situation you want to download the Upgrade file for 7.0-6-E4 instead of the System Image file.
Because the SSM-20 has the common architecture it will use the standard upgrade file that does not list the platform name.
The package you want is IPS-K9-7.0-6-E4.pkg.

Potential data file issue?

AIX 5.2/Oracle 9i
Our current process is to manually add datafiles to extend the tablespace, Currently the tablespace is at 93% with datafile ‘30’ being at 87.51 % used (The other datfiles are full 1 - 29), The problem is that I have two other datafiles ‘31/32’, these are 0.10 %.. Why isn’t oracle using the other datafiles ? As far as I’m aware, there has'nt been any data delete from any tables that exits within this tablespace..

Hasn't sorry, I've used the following SQL
SELECT SUBSTR (df.NAME, 1, 40) file_name, df.bytes / 1024 / 1024 allocated_mb,
((df.bytes / 1024 / 1024) - NVL (SUM (dfs.bytes) / 1024 / 1024, 0))
used_mb,
NVL (SUM (dfs.bytes) / 1024 / 1024, 0) free_space_mb
FROM v$datafile df, dba_free_space dfs
WHERE df.file# = dfs.file_id(+)
GROUP BY dfs.file_id, df.NAME, df.file#, df.bytes
ORDER BY file_name
Here was the output
/oracledata/data_large30.dbf 1025 897 128
/oracledata/data_large31.dbf 1025 0 1025
/oracledata/data_large32.dbf 1025 0 1025
Im just concerned that Oracle is not using the other two (31/32) datfiles ..

Lost data files, issue with re-capturing

I deleted a project yesterday and mailed the finals to the client. Apparently there was still something that needed to be fixed.
I've tried using a data restore program but it didnt do anything, so I opened up the last autosave.
I am trying to re-capture the clips but everytime i get to it, a box comes up saying the tape has reached the end even though i have even cued it up properly.
Any suggestions?

re did it

Removing data files issue? Need your guidance

Hello All,
I have a critical situation out here....
I have got one tablespace (say TableSpaceOne). This tablespace have 20 Datafiles.The total size of the tablespace is 32GB.
There are 7 different tables using this tablespace.
One of thses 7 tables is occupying maximum space (29GB)
I want to remove this table and also I want to release the space i.e. other six tables are occupying only 1 to 3GB.
What strategy should I follow?
Please guide
Thanks in advance
HImanshu

Hi,
Thanks for the questionare.
I need to drop the BIG table and recreate it in some other tablespace. But for the present tablespace, there are multiple datafiles which are belonging to various object.
What I thought as solution is:
1. Export other object which I want to keep.
2. Drop the tablespace including contents and datafiles.
3. Create the tablespace with appropriate datafile
4. Import the objects in to the tablespace.
5. Create another tablespace
6. Create the big table into the newly created tablespace
I am ready to loss the data from the big table.
Is my approach correct?
I hope I have answered your question.
Thanks
Himanshu

Xfa Form, Digital Signatures, file attachments and Reader 9

Hi,
In reader 8 and previous, when i wanted to have a form that could be signed, passed to the next persons, added attachement signed, repeat, while maintaining the signatures valid, i could.
Since we updated to reader 9.12 all previously signed documents appear with invalid signatures and if i try to attach a file, the add button just isn't there.
If i follow he following steps:
Server side:
- Create PDF from xdp + xml (using forms).
- Assign Form Fillin, Digital Signatures and File Attachment (using Reader Extentions)
Client side:
- Populate the Form data
- Attach files
- Certifiy
- Sign (multiple Signatures)
It works fine, but it isn't the workflow i had in previous versions.
The workflow i have here is:
Server side:
- Create PDF from xdp + xml (using forms).
- Assign Form Fillin, Digital Signatures and File Attachment (using Reader Extentions)
Client side:
- Populate the Form data
- Attach files
- add Signature (only locks a collections of form fields)
- Repeat until everyone has attached their files and signed.
The problem is that this worked fine in versions before 9 (all digital signatures here validated with the yellow exclamation mark indicating new content), but in 9 and up what i get, after validating the signatures in reader, is a information indicating that the signatures are invalid because the document is either corrupt or has been changed.
Is this a bug or has this been changed from version 8 to version 9?
I've read the changelist of reader 9 and it talks nothing about this situation or Digital Rights other than form fillin, annotations and digital signtatures (the ones we can choose in the certification wizard of Acrobat Pro).
Any idea if its possible to implement the second scenario in reader 9, or even if its possible? Is there a guide on the practices Adobe garaties will allow to validate signatures in the following years? Even if it means usings PDFA.
Thanks in advance.

One last try.
You help would really be welcome in finding out the root cause of the difference in behaviour between reader 8 and 9 in this matter (bug or change).
I have no idea what documentation to read (since i've read the launch documentation and change list documentation) about reader 9, i've contacted Adobe 3 days ago (and the answer is silence, like usuall) and have no clear thought about what to say (without taking a huge risk by giving a uninformed answer) about this issue.
Thanks.

Can I sign a Microsoft Word Document with the digital signature from a MIlitary issued CAC card?

Is it possible to sign a MS Word doc with the digital signature froma Military issued CAC card? It is easily done in Adobe but, I cannot find any guidance for MS Word docs.

According to this thread in Microsoft's forums:
http://answers.microsoft.com/en-us/mac/forum/macoffice2011-macword/can-i-how-do- i-add-a-digital-signature-to-a/eb2c2787-b13f-4388-b20f-4580515eec95
this is not possible with Word for Mac.
Regards.

Validating digital signatures successfull on Win7 but fails on Vista/XP/W2K3

Microsoft has announced (Security Advisory 2880823: Recommendation to discontinue use of SHA-1) that
they will stop recognizing the validity of SHA-1 based certificates after 2016. Microsoft started to sign their files with digital signatures which use the stronger SHA-2 hashing algorithm. For the countersignatures (Time Stamping Authenticode Signatures)
they also use SHA-256. These certificates can be validated fine on Windows 7/8 but can't be validated on Windows Vista, Windows XP and Windows Server 2003R2. The status of certificates in the Certification Path are OK but on the older operating systems the
countersignature seem to be missing... See the forum thread
EMET 4.1 Update 1: 'The digital signature of the object did not verify.' on Vista/XP in the
Enhanced Mitigation Experience Toolkit (EMET) Support Forum for several screenshots.
Can someone explain this behavior and maybe provide a solution?
W. Spu

Hi,
It looks like it is related with this
https://technet.microsoft.com/library/security/2749655
This issue might be caused by a missing timestamp Enhanced Key Usage (EKU) extension during certificate generation and signing of Microsoft core components and software.
Microsoft is aware of an issue involving specific digital certificates that were generated by Microsoft without proper timestamp attributes. These digital certificates were later used to sign some Microsoft core components and software binaries. This
could cause compatibility issues between affected binaries and Microsoft Windows. While this is not a security issue, because the digital signature on files produced and signed by Microsoft will expire prematurely, this issue could adversely impact the ability
to properly install and uninstall affected Microsoft components and security updates.
So have you applied this update on XP\Vista\Server 2003?
http://support.microsoft.com/kb/2749655
This update will help to ensure the continued functionality of all software that was signed with a specific certificate that did not use a timestamp Enhanced Key Usage (EKU) extension. To extend their functionality, WinVerifyTrust will ignore the lack of
a timestamp EKU for these specific X.509 signatures.
Yolanda Zhu
TechNet Community Support

XML Digital Signature Canonicalisation Error.

Hi,
I am writing JAVA code to perform XML Digital Signature and Verification. I am using jwsdp-2.0 jar files xmldsig.jar and xmlsec.jar.
I am successfully able to sing the xml but still have few issues.
1. Canoniclisation on SignedInfo is not happening. API is signing the SignedInfo Element without performing Canonicalisation. I turned on debugging and it shows FINE: Canonicalized SignedInfo:error. Because its not able to perform Canonicalisation verification fails on other end.
fac.newCanonicalizationMethod(CanonicalizationMethod.EXCLUSIVE,(C14NMethodParameterSpec)null) is the canonicalisation param I am passing to SI.
2. Not able to specify XPointer in URI string when creating Reference object. It works fine with, just id of element as reference, but not with xpointer.
Any help on these issue is greatly appreciated.
Thanks for your help.
Ajit Rathod
CODE :
============================================================
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import javax.xml.crypto.dsig.*;
import javax.xml.crypto.dsig.dom.DOMSignContext;
import javax.xml.crypto.dsig.spec.*;
import java.io.ByteArrayOutputStream;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.OutputStream;
import java.net.URLEncoder;
import java.security.*;
import java.util.Collections;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.*;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;
import org.w3c.dom.Document;
import org.w3c.dom.NodeList;
public class GenEnveloped {
     public static void main(String[] args) throws Exception {
String providerName = System.getProperty
("jsr105Provider", "org.jcp.xml.dsig.internal.dom.XMLDSigRI");
     XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM",(Provider) Class.forName(providerName).newInstance());
     String strRefURI = "";
     strRefURI = "#testID";
     Transform trf = fac.newTransform(CanonicalizationMethod.EXCLUSIVE,(TransformParameterSpec)null);
Reference ref = fac.newReference (strRefURI, fac.newDigestMethod(DigestMethod.SHA1,null), Collections.singletonList(trf),null,null);
     SignedInfo si = fac.newSignedInfo(fac.newCanonicalizationMethod(CanonicalizationMethod.EXCLUSIVE,(C14NMethodParameterSpec)null),fac.newSignatureMethod(SignatureMethod.HMAC_SHA1, null),Collections.singletonList(ref));
     DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
     dbf.setNamespaceAware(true);
     Document doc = dbf.newDocumentBuilder().parse(new FileInputStream("testSamlData.xml"));
     NodeList nlWSSESecurity = doc.getElementsByTagName("wsse:Security");
     String strKey = "asefasfsadfasdfsfasfdfsdasdfasdf";
     ByteArrayOutputStream baos = new ByteArrayOutputStream();
     byte keyBytes[] = strKey.getBytes();
     SecretKey sk = new SecretKeySpec(keyBytes,SignatureMethod.HMAC_SHA1);
     XMLSignature signature = fac.newXMLSignature(si,null);
     DOMSignContext dsc = new DOMSignContext     (sk,nlWSSESecurity.item(0));
     //DOMSignContext dsc = new DOMSignContext     (sk,doc.getDocumentElement());
     dsc.setDefaultNamespacePrefix("ds");
signature.sign(dsc);
     OutputStream os;
     boolean blFile = true;
     if (blFile)
          os = new FileOutputStream("testSamlDataSigned.xml");
          System.out.println("Result is written out to File system");
     else
     os = System.out;
     TransformerFactory tf = TransformerFactory.newInstance();
     Transformer trans = tf.newTransformer();
     trans.transform(new DOMSource(doc), new StreamResult(os));
}

Charles_F wrote:
Hi.
I would appreciate any help regarding the topic.
I need to create xml digital signature of files that are located in the same directory,
let's say working directory (current directory) of application.
I only get in the Reference tag with URI
<Reference URI="file:/D:/projects/netbeans/CryptoHelpers/form.xml>
althought I'd like to achieve
<Reference URI="form.xml">To do that, just specify "form.xml" when creating the Reference and not the complete path. Change:
Reference refList = xmlSignatureFactory.newReference(
srcFile.toURI().toString(),
digestMethod);
referenceList.add(refList);to:
Reference refList = xmlSignatureFactory.newReference(
filePath, digestMethod);
referenceList.add(refList);Also, make sure your baseURI is set to the directory that the file is located in and ends with a trailing slash. Change:
signContext.setBaseURI("file:/");to
signContext.setBaseURI("file:/D:/projects/netbeans/CryptoHelpers/");

Loading Invoice XML IDoc with digital signature via XI into R/3

Hi,
I received an Invoice XML IDoc with digital signature via Mail (for test purposes) and want to load it via XI into an R/3 systeme.
My idea is to load the Invoice XML IDoc file via the File Sender Adapter into XI and send it to the R/3 system via the IDoc Inbound adapter.
Due to the digital signature the file looks like this:
0 S      *H÷
   D0 @   1 0       +      0 '      *H÷
      0 0 û      etc.
When I load the file like this with the File Sender Adapter, an error message occurs in the XI Monitoring as the XML Parser cannot read the file due to the digital signatur (as expected).
Has anybody an idea how I can configure the File Sender Adapter Communication Channel to be able to load only the XML IDoc and ignore the digital Signature strings?
Thanks in advance for your support.
Alex

BTW
do use the second way you need:
Security Settings for the Sender Mail Adapter
http://help.sap.com/saphelp_nw04/helpdata/en/27/c0524257a1b56be10000000a155106/content.htm
and
Key Storage Service
http://help.sap.com/saphelp_webas630/helpdata/DE/e9/a1dd44d2c83c43afb5ec8a4292f3e0/content.htm
apart from adapter module config
Regards,
michal

Digital Signature Data File Issue

Similar Messages

Maybe you are looking for