Digital Signature Expiration

We are currently running 5.1 SP6 and are a little confussed with all the release notes that have been posted regarding the digital signature expiration as to whether or not our version will be affected by this. From the most current release notes, it sounds like versions BPC 7M SP3, BPC 5.1 SP7, BPC 5.1 SP8, and CPM 4.2 SP05 Patch 1 are the only ones that will be affected. Is this true?
It also sounds like it is more of a nusance than anything because you will recieve a warrning message if your security level is set to very high so you would have to change your security to a lower level. It doesn't sound like any system funcationality will be affected. Is this also true?

The digital signatures are for our excel components (add-ins). They must be signed (by verisign for example) in order for excel to allow them to run. The certificates expire, really they are not supposed to but there was a glitch in the these particular builds that allows them to expire, once they expire it could render BPC for Office unusable. This depends on Office's macro security, for example, if in excel your macro security is set to High, when you run BPC you will get a message that says the macros are unsigned and won't them be invoked. If you macro security is set to medium you will only get a warning and it will let BPC load if you click Ok on the warning.
These are the only versions that are effected.
Links to SAP notes with more information on the patch and to download the patch:
4.2 SP5 - https://service.sap.com/sap/support/notes/1334222
5.1 SP7 - https://service.sap.com/sap/support/notes/1334157
5.1 SP8 - https://service.sap.com/sap/support/notes/1334216
7.0 SP3 - https://service.sap.com/sap/support/notes/1334217
Hope this helps.

Similar Messages

BEX Analyzer 3.5 Expired Certificate / Digital Signature

Hey Everyone,
Are any of you experiencing this? Expired Digital Signature issue for BEX Analyzer (sapbex.xla).
We are on SAP GUI 7.10 patch 8, and BEX 3.5 Add-On patch 4. When users
go to launch the BEX Anlayzer or open broadcasted reports, they get an
error saying Digital Signature is Invalid or has Expired.
This is because of the certificate that is provided with SAPBEX.XLA, expired on 3/6/09.
I looked into relavent notes 492364, and 929716 which come with older certificates. We do not want to enable macros completely.
Thanks!
Imran

Hi Imran,
After Opening your Bex analyzer or in Excel
Excel goto -- tools macrosecurity--Security level Tab --choose *Medium* option after setting this open your bex analyzer again you will get a pop up for *enable or disable macros* you can choose disable macros,
now you will be able to open the Bex analyzer and run queries
IF you are not still able to use or if you dont want *enable macro / disable macro* pop up then use
this setting,
Excel goto -- tools macrosecurity--Security level Tab -- choose Low option
you will not get any pop ups and you will get the select query option.
Hope this solve your issue.
Edited by: suresh on Mar 12, 2009 2:21 AM

Temporarily disable Digital Signature Checks to Install MS SQL Server 2008 with no Internet Access

I am attempting to install a licensed copy of MS SQL Server 2008 in a Private Enclave that does NOT have Internet access on a Win2008 R2 SP1 server (that is VM - thus I can't reboot and press F8 to select "Disable Driver Signature Enforcement"
). The installation fails with an error of the vc_red.cab file being found either corrupt or a bad digital signature. The file is good, but the signature has an expiration of 2011. I understand that a DOTNET SDK v1.1 program called setreg.exe
will enable disabling the digital signature check, but I am not permitted to use that program.
I might be permitted to use the "Signtool.exe" utility, but it is not clear what command sequences are necessary to disable and then re-enable the Digital Signature checks.
I saw a thread that recommended using the command:
bcdedit.exe /set nointegritychecks ON
However, the comments indicated that this might not have worked.
Are there Registry settings I can use with regedit to make the necessary changes to be able to install the application? I anticipate running into this problem with other software when I do not have Internet connectivity. I already tried
downloading the Microsoft CRL files; updated the lists on the Server; and rebooted. This did not solve my problem.

Hi,
As far as I know, it is not recommended to disable digital signature check.
Since we are not familair with installing MS SQL server, please also refer to SQL forums below to see if experts there have more insights regarding the matter.
https://social.technet.microsoft.com/Forums/sqlserver/en-US/home
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Digital signature verification failed - Error RTCCTOOL

Hi guys !!!
I am running the report from the SDCCNN - RTCCTOOL, but I get the following error message:
1. Digital signature verification failed
Description - The verification of the recommendation content using digital signatures has failed. Therefore recommendations were suppressed.
Implementation - Consult SAP note 69455 if there is a known issue with content verification. If you do not find a solution open a customer message on SV-SMG-SDD.
When I Goto - Digital signatures Activate button digital content verification is disabled.
Then go to the transaction on the client STRUST 000 and I found the certificate: SSF SAP AGS Online Content View The certificate shows:
Owner: CN=SID SSF SAP AGS Online Content Verification, OU=I0020596183, OU=SAP Web AS, O=SAP Trust Community, C=DE
Certificate List: CN=Online Recommendations, CN=OR-C, CN=V01M, OU=AGS, O=SAP AG, C=DE
CN=Online Recommendations Upd, CN=OR-U, CN=V01M, OU=AGS, O=SAP AG, C=DE
Both certificates will expire on 01.01.2038.
According to the help and OSS note 69455 tell me again that I must create this certificate every year, but I see this current certificate, what is the error?
What is the process because I'm not clear and can not find another OSS note or the SDN forum to tell me what is wrong is happening.
Thanks guys for the help I can provide.
Desiré

Hi all.
I have the same problem and explore all possible solutions found in this discussion and others without satisfactory result.
Everything points that may be an inconsistency error external certificate which is in the DB. Anyone know how to fix this.
Greetings.

Validating digital signatures successfull on Win7 but fails on Vista/XP/W2K3

Microsoft has announced (Security Advisory 2880823: Recommendation to discontinue use of SHA-1) that
they will stop recognizing the validity of SHA-1 based certificates after 2016. Microsoft started to sign their files with digital signatures which use the stronger SHA-2 hashing algorithm. For the countersignatures (Time Stamping Authenticode Signatures)
they also use SHA-256. These certificates can be validated fine on Windows 7/8 but can't be validated on Windows Vista, Windows XP and Windows Server 2003R2. The status of certificates in the Certification Path are OK but on the older operating systems the
countersignature seem to be missing... See the forum thread
EMET 4.1 Update 1: 'The digital signature of the object did not verify.' on Vista/XP in the
Enhanced Mitigation Experience Toolkit (EMET) Support Forum for several screenshots.
Can someone explain this behavior and maybe provide a solution?
W. Spu

Hi,
It looks like it is related with this
https://technet.microsoft.com/library/security/2749655
This issue might be caused by a missing timestamp Enhanced Key Usage (EKU) extension during certificate generation and signing of Microsoft core components and software.
Microsoft is aware of an issue involving specific digital certificates that were generated by Microsoft without proper timestamp attributes. These digital certificates were later used to sign some Microsoft core components and software binaries. This
could cause compatibility issues between affected binaries and Microsoft Windows. While this is not a security issue, because the digital signature on files produced and signed by Microsoft will expire prematurely, this issue could adversely impact the ability
to properly install and uninstall affected Microsoft components and security updates.
So have you applied this update on XP\Vista\Server 2003?
http://support.microsoft.com/kb/2749655
This update will help to ensure the continued functionality of all software that was signed with a specific certificate that did not use a timestamp Enhanced Key Usage (EKU) extension. To extend their functionality, WinVerifyTrust will ignore the lack of
a timestamp EKU for these specific X.509 signatures.
Yolanda Zhu
TechNet Community Support

Digital signature and certificates on Mail

Hello All,
I'm new using mac and i have a token with my digital certificate. So i wanna know:
How can i use subscribe or use a digital signature on Mail. How can i use my certificate to sign the message.
Thanks,
Altemir Pacheco

Altemir ... It's important that the certificate has been created for the e-mail address you want to use as sender e-mail. Your certificate needs to be imported into keychain. Keychain only accepts certificates in a number of formats, among them .p12. You can import in a number of ways, you can for example drop your .p12 file (the certificate) on the keychain icon. Then open keychain and check whether the certificate is visible under "my certificates". It has to appear there and it has to show as "valid" and not as "expired". Control-click on the certificate and set-up a new preferred identity for your e-mail address (I am not sure whether this step actually does any difference but give it a try). Close mail.app and restart mail.app. When you now create a new e-mail and you choose as sender e-mail the e-mail address for which you have the certificate then you should see on the right side, just below the subject line a little symbol which you can click on for activating the signature for the e-mail your writing. Hope all this works.

Basic Doubts in Digital Signatures ES

1) Revocation Checking : i read that the certifications will be checked(to see whether it has been cancelled) by checking the CRLs list. Where can i find this list?
2) What is the concept behind Long Term Validity in Digital Signatures ES.
Please help me in understanding Digital Signatures ES.

Revocation Checking : i read that the certifications will be checked(to see whether it has been cancelled) by checking the CRLs list. Where can i find this list?
ANSWER: The CRL typically resides on a server somewhere, and is accessible with an http URL. The URL is specified within the digital certificate itself. From an Acrobat point of view, when a CRL is acceesed during a revocation check, it may be cached on the client side. The cached CRLs are stored at:
C:\Documents and Settings\enteruserproflehere\Application Data\Adobe\Acrobat\9.0\Security\CRLCache
What is the concept behind Long Term Validity in Digital Signatures ES.
Long Term validation has to do with how are signatures validated many years down the road... When certificates expire (typically the validity period for a certificate is 1 year) the status of the signature can change. It does not mean that the signature is invalid, it just means that based on the current time, the certificate has expired and therefore this is reflected in the signature status. If the signature is validated in the future using "The time at which the signature was created" then it will report a Valid different status (assuming the document has not been tampered with.
The "time" used to validate signatures is a Preference setting in Acrobat and Reader (Edit > Preferences... > Security > Advanced Preferences... > Verification)
Regards
Steve

Message level security: difference digital signature and certificate

Hi everybody,
could anybody please explain the difference between <b>digital signature</b> and <b>certificate</b>?
Thans
Regards Mario

Mario,
A digital signature is an electronic signature that can be used to authenticate the identity of the sender of a message or the signer of a document, and possibly to ensure that the original content of the message or document that has been sent is unchanged. Digital signatures are easily transportable, cannot be imitated by someone else, and can be automatically time-stamped. The ability to ensure that the original signed message arrived means that the sender cannot easily repudiate it later.
A digital signature can be used with any kind of message, whether it is encrypted or not, simply so that the receiver can be sure of the sender's identity and that the message arrived intact. A digital certificate contains the digital signature of the certificate-issuing authority so that anyone can verify that the certificate is real.
where as
A digital certificate is an electronic "credit card" that establishes your credentials when doing business or other transactions on the Web. It is issued by a certification authority (CA). It contains your name, a serial number, expiration dates, a copy of the certificate holder's public key (used for encrypting messages and digital signatures), and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real. Some digital certificates conform to a standard, X.509. Digital certificates can be kept in registries so that authenticating users can look up other users' public keys.
hope it helps u.
--Archana

Wrong digital signature for add-on installer

I have created a addon and it gives error as,
Wrong digital signature for add-on installer
When I tried installing this addon on another SAP server,it worked.On the problamatic server,the antivirus has expired.Is virus capable to creating this problem ? I have tried all the options for solving the problem such as,
1.Delete the temporary files.
2.Delete the SBO files.
3.Create a new addon and release it.
4.Create a new addon with different name.

Hi Dilip,
Refer This...........
Link: [url] Wrong Executable Digital Signature for Add-on
Link: [url] SAP Business One AddOn Installer
Link: [url] Wrong digital signature for add-on installer
Link: [url] Wrong Digital Signature...
Thanks
Shafi
Edited by: shafi_sunshine on Aug 18, 2011 7:21 AM

Digital Signature in Adobe Captivate

Hi
How do you insert a digital signature into an Adobe Captivate content?
When we try to view the content via Internet Explorer, it complains that the Digital Signature is not valid, and does not play the file.
Thanks
DM

Hi JIm
Thanks for your reply.
This is whats happening.
Someone has created a training video using Captivate. It is in EXE format. This file is then being accessed via HTML by IE7.
Our IE7 has a policy that does not allow software to run or install even if the signature is invalid.
Looking at the properties of video content, its certificate has expired. It says the digital signature is not valid.
So IE7 is rejecting this video, and gives the user a warning and does not play the video. If you play the video outside of IE, then it plays fine.
I want to be able to play this video via IE, without having to change the security option. As i dont know much about Captivate, i was hoping someone here knew more about the digital signature in Captivate contents.
Thanks again.
DM

Linksys Routers not accessable via HTTPS and This certificate has an invalid digital signature.

please help cannot logon to my router.
how to install custome certificate with ssh?
This is happing when certificate give me error: "This certificate has an invalid digital signature."
Why not imlement update with ease import of custome certificate?
I send many request to support but zero result.
ig you google it this problem you will see that only cisco goods have this problem and no one care about that according cisco support. why? I will never buy cisco product.

I try different browsers and they all have certificate notice alert.
New IE on win8 by default not allow to enter secure page with expire certificates.
I hope that cisco will make new firmeware with functionality to add costume certificate pfx for example.
Cisco support lower encryption type. Every new windows encrase cryptograpgi that IE support by default. Look IE about to see type 64 or 128 or 256…
On xp will work good, but we are now in era of win 8 with IE that support by default 128 or 256 depending home or server version.

Applying a timestamp to a Digital Signature in Office

Hello,
I want to apply een digital signature to a Worddocument or to the macromodule of a Worddocument.
Because the certificate expires after a year, i want to add a timestamp.
Now I read in the article "Digital signatures in Office 2010" that there are two registry settings to control the type of signature Office creates: XAdESLevel and MinXAdESLevel.
So if I want to a signature with a timestamp i have to add the registry settings:
XAdESLevel = 2 (REG_DWORD)
MinXAdESLevel = 2 (REG_DWORD).
Is that all, or do i need tot provide Office with a time stamp server?
(I don't think i have a time stamp server).
Kind regards,

Hi,
As far as I know, if we want to use the time stamp functionality with digital signatures, we must complete the following:
Set up a time stamp server that is compliant with RFC 3161
Use the Group Policy setting, Specify server name, to enter the location of the time stamp server on the network.
On the other words, we need a time stamp server.
Quote From:
http://technet.microsoft.com/en-us/library/cc545900(v=office.14).aspx
Hope it's helpful.
Regards,
George Zhao
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

How do I add a digital signature to Word 2011?

I am at a loss at to adding a digital signature to Word 2011 docs on my macbook pro, any ideas???

Formscentral does not support forms with digital signature workflows. I suggest you see if our Echosign product meets your needs.

Issue in Java concurrent program for Digital Signature Stamping

Hi All,
Im calling a Java concurrent program which does digital signature stamping on the PDF report generated.Program able to able to read the PDF file as input and also digital signature stored as file in the application but
ends in error in create signature method , need help in this regard.
Error:
Parameter 0 is Request id of with out Digital signature file
Parameter 1 is employee id of approver
Parameter:0:99203256
Parameter:1:1414603
$$$$ start query fileinfo with callable statment
programName>>>>>>>>BTPOPORPXML
$$$$ Without digital Signature file Name $$$
$/inst_top/finprod/apps/FINPROD_CPNQERPAAPZP10/logs/appl/conc/out/BTPOPORPXML_99203256_1.PDF
PFX File Reading Start
PFX File Reading Ends
PFX File size is: 6460 Byte size is: 6460
Elements present
java.lang.NullPointerException
at
com.lowagie.text.pdf.PdfSignatureAppearance.getAppearance
(Unknown Source)
at
com.lowagie.text.pdf.PdfSignatureAppearance.preClose
(Unknown Source)
at
com.lowagie.text.pdf.PdfSignatureAppearance.preClose
(Unknown Source)
at com.lowagie.text.pdf.PdfStamper.close(Unknown
Source)
at
btvl.oracle.apps.po.digsig.BTVLDigSign.runProgram
(BTVLDigSign.java:151)
at oracle.apps.fnd.cp.request.Run.main
(Run.java:157)
Edited by: 999033 on May 16, 2013 7:20 PM

Hi Charls,
I have successfully implemented at our end in 11i. Pl.try at your end.
v_request_id := FND_REQUEST.SUBMIT_REQUEST (passed your arguments... );
COMMIT;
IF NVL( v_request_id , 0 ) = 0 THEN
DBMS_OUTPUT.PUT_LINE( 'Item Assignment to Organization Program Not Submitted');
p_status := 'FAILURE' ;
p_err_msg := 'ERROR RAISED AFTER SUBMITTING THE IMPORT ITEM ORG.ASSIGNMENT CONCURRENT REQUEST ... ' ;
ELSE
v_finished := FND_CONCURRENT.WAIT_FOR_REQUEST
request_id => v_request_id,
interval => 0,
max_wait => 0,
phase => v_phase,
status => v_status,
dev_phase => v_request_phase,
dev_status => v_request_status,
message => v_message
LOOP
EXIT WHEN ( UPPER(v_request_phase) = 'COMPLETE' OR v_phase = 'C');
END LOOP;
HTH
Sanjay

Update on 10.6.8 fails due to digital signature on update is missing

wanting to install the Parallels version 10 and it won't work on 10.6.8 version of my Mac OS so I learned how to go to the software update which indicates an update is available. When I go ahead and load the update it runs fine and then stops with a message that the Macbook Pro EFI Firmware Update can't be saved. It says the digital signature on the update is missing or invalid.
I don't know if the digital signature is on my computer or the update? I would upgrade to a more recent version of the OS but don't know what will work.
Can anyone help?
Dan

Parallels 10 isn't compatible with 10.6 according to the web site.
Mac Requirements
Hardware:
A Mac computer with an Intel Core 2 Duo, Core i3, Core i5, Core i7, or Xeon processor (Core Solo and Core Duo processors are no longer supported)
Minimum 2 GB of memory (4 GB of memory is recommended to run Windows 7 in a virtual machine or if your host OS is Lion)
About 850 MB of disk space on the boot volume (Macintosh HD) for Parallels Desktop installation
About 15 GB of disk space for each virtual machine
Software:
OS X Yosemite 10.10 or later
OS X Mavericks 10.9.4 or later
Mac OS X Mountain Lion 10.8.5 or later
Mac OS X Lion 10.7.5 or later
Check that your computer is compatible with Mountain Lion/Mavericks/Yosemite.
To check the model number hold down the option/alt key, go to the Apple menu and select System Information.
MacBook (Late 2008 Aluminum, or Early 2009 or newer) model number 5,1 or higher
MacBook Pro (Mid/Late 2007 or newer) model number 3,1 or higher
Your Mac needs:
OS X v10.6.8 or OS X Lion already installed
2 GB or more of memory (More is better - 4 GB minimum seems to be the consensus)
8 GB or more of available space
Check to make sure your applications are compatible. PowerPC applications are no longer supported after 10.6.
Application Compatibility
Applications Compatibility (2)
Do a backup before installing.
If you can/do upgrade, I recommend you make a copy of the installer and move it out of your Applications folder. The installer self-destructs. The copy will keep you from having to download the installer again. You can make a bootable USB stick to install using this free program.
Bootable USB Flash Drive – Diskmaker X
Mountain Lion
Note - Mavericks is no longer available.

Digital Signature Expiration

Similar Messages

Maybe you are looking for