Digital Signature other that SAP user password

Hi there,
We want that the digital signature should be other than the SAP login user password .
Please suggest me that how can we do the same....
Regards
Kaushik

Hi
You can refer to my post for digital signature
Digital signatures in DMS
and
Digital Signature limitations
Niranjan
Let me know if it helps !!!

Similar Messages

Why the mac claim that the user password that i enter in the smb file sharing settings is incorrect although it is correct?

why the mac claim that the user password that i enter in the smb file sharing settings is incorrect although it is correct?

Maybe the Caps Lock key is lighted?
Is your Apple ID password the same as your user password?

Digital Signature - Requirement to Enter User ID

Whassup Ya'll-
We'd like to leverage digital signature in our landscape. However, in order to be Part 11 compliant we will need to have our approvers enter both their user ID and corresponding password. However, as it stands when an approver is prompted for an e-sig, the User ID is already populated.
Please advise how to customize so the user is forced to enter both fields. I'll make it rain with points.
Cheers

Have you tried restarting the touchpad by pressing and holding both the center button and the power button together for around 15 - 20 seconds?
WyreNut
I am a Volunteer here, not employed by HP.
You too can become an HP Expert! Details HERE!
If my post has helped you, click the Kudos Thumbs up!
If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

Sap User/Password

Hi,
I would like in my WebDynpro to retreive SAP User and Password corresponding to a Portal User.
should i use "IUserMappingService"?
Joseph

Hi Joseph,
U can IuserMapping Service
Check the code snipped below which might satisfy ur requirement.
IWDClientUser user1 = WDClientUser.forceLoggedInClientUser();
IUser user2 = user1.getSAPUser();
IUserMapping test = UMFactory.getUserMapping();
Map map=null;
try {
String name =test.getR3UserName(user2,"SAPLOGONTICKET",map,true);
     wdComponentAPI.getMessageManager().reportSuccess("name"+name);
     } catch (UMException e) {
          // TODO Auto-generated catch block
          wdComponentAPI.getMessageManager().reportSuccess(e.toString());
The second paramter in getR3UserName is logonmethod
It is either "SAPLOGONTICKET" or UIDPW based on ur usermapping logon method in portal.
Hope this helps
Regards,
Sowjanya.

I forgot my digital signature password. How do I create a new one with the same email.

I can not remember my digital signature password. I've attempted to create a new one with the same email address. The message I receive is that i already have a digital signature with that email. I would like to use the same email address.

You probably mean that you forgot your digital certificate password and I presume that this is a self-signed certificate that you yourself created, not a certificate that you received from a Certificate Authority (CA). If this is true then you can create a new self-signed digital certificate (Digital ID in Acrobat-speak) the same way you created the first one: In Acrobat XI it is Edit->Preferences->Signatures->Identities&Trusted Certificates->More. Then click on "Add ID" button and follow the prompts. You can create as many self-signed certificates with the same credentials (name, email, etc.) as you wish. You'd have to figure out how to distinguish them, though.

2nd password on digital signature file

I am deploying Acrobat Standard 9 in a regulated environment (21 CFR Part 11) and need to have the digital signature file require a second password. While I know this is possible it does not seem to be a feature activated upon a default install. How do I turn on this feature?

Hi Madam Curie,
Part of the problem is the phraseology is incorrect so I'll start with some basic so we are all speaking the same language.
One thing to realize is you can digitally sign any piece of electronic data just like you can use you pen to sign any physical object such as a piece of paper, some one's cast, a wall, or you photo for your fans. In the electronic world you can sign your e-mail, your Word document, or as far as I'm concerned (realizing that I'm biased ) the most important thin, a PDF file.
A digital ID in the electronic world is analogous to a pen in the physical world. It is what you use to create a digital signature. A digital ID is comprised of three pieces; a public key, a corresponding private key, and a block of text with some identifying information. When the digital IS is initially created the public-key is signed with a private key. If the public key is signed with it's corresponding private key the digital ID is know as a "self-signed" digital ID. If it is signed by a different private key, the owner of that key becomes the issuer of the digital ID that it signs.
A digital signature in the electronic world is analogous to a wet ink signature. You use a digital ID to create a digital signature.
The next thing to realize is a digital signature is cryptographic blob of data and is not something one would normally see. If you are geeky enough you can decode one and view it in a special purpose viewer, but for the most part nobody ever sees the signature contents.
When you do sign a PDF file you can either create a visible signature or an invisible signature. In the case of the later, all you do is write the digitally signed blob of data into the PDF file and don't bother creating any visual representation. It's the visual signature that throws most people for a loop, but the key thing to understand is the visual appearance you see in the signature field (which is nothing more than a special purpose text field) is NOT the signature, it is just a representation of the actual signature which you never see.
The visual appearance is comprised of three things, a background (which by default is the PDF trefoil logo) and a foreground that is divided into two halves, text and a graphic.
Acrobat (and when I say Acrobat I really mean both Acrobat and Reader) will let you create a digital signature with any digital ID that you have that is within it validity period, and includes digital signature as a key usage. The digital ID can be saved in several locations that Acrobat has access to. One is file on disk. The file would have the .p12 or .pfx file extension and you would have to add the file to Acrobat using the Security Setting dialog. Another place the digital ID can reside is the Windows Certificate Store of the Mac Keychain. If you've installed the digital ID into one of the OS based storage locations Acrobat will find it without you having to do anything else. Digital IDs can also reside on hardware devices such as a token (they look like a flash drive) or a smart card (they look like a credit card with a gold chip).
So, if you have a digital ID, but Acrobat doesn't know about it need to search you computer for a *.p12 or *.pfx, find out where the file is, than use the Add ID function in the Security Settings dialog to attache the file.
Finally, after you find and attache the file you can modify the Password Timeout to require that a password is always required. Or, if you want to import the file into the Windows Certificate Store you can use the High Assurance option to require a password otherwise Windows will just assume that if you can log in to your desktop then that's good enough.
Steve

What is the certification authority, the third party that can confirm the digital signature?

I created a nice electronic signature, that I now regularly use and add to every document. I was told that a signature needs to be issued by a verification authority, a third party that is able to verify the signature, certificate. I created a free certificate at CAcert.org and tried to combine it with the adobe signature certificate file, but it doesnt support .cer and .crt files. Is the Adobe the certification authority in this case since i created signature in the Adobe software? Its not a big deal, I just want everything to be correct since I use the signature in official documents now (instead of scanning a signed document) ... Thanks for any info, ideas or help.
Jacob

Each Digital Certificate has a pair of private and public keys used for encryption/decryption. The private key belongs to the certificate owner and should be kept secret. It is protected by a password. The public key can be used by anyone. Digital certificates come in two flavors: one that contains both private and public key and one that contains only public key.
When you create a digital signature the signing process uses the private key to encrypt the signed content digest and the public key is used to decrypt it. So, only you can encrypt signed content with your certificate that has both private and private keys and anyone can decrypt it to validate the signature using certificate that has only public key. Usually, this certificate with the public key only is embedded in the digital signature, so that anyone can use it for decryption.
The .cer certificate contains only public key. Certificates with both private and public keys usually have extensions .pfx or .p12. You need one of those to sign.
CAcert.org issues only public key certificates. so you cannot use its certificates for digital signing.
Adobe is not a general purpose certification authority. It issues some certificates for internal use only.
Acrobat has a feature that allows you to create so-called self-signed certificates with both private and public keys but these certificates can be used only in a limited way. They do not provide the means to authenticate the real certificate owner nor revoke a certificate if it is stolen.
Generally, a digital signature asserts three main features:
1. Document integrity (document has not been changes since it had been signed),
2. Authentication (the signer is indeed what the certificate says)
3. Non-repudiation (the signature author cannot deny that he signed it: this is achieved via certificate revocation mechanism).
A self-signed certificate (of the type that Acrobat produces) can be used only for #1. It cannot be used for ##2 and 3. The latter two come only when a certificate (with private key) is issued by a reputable Certificate Authority which is trusted (like VeriSign, Symantec, etc.).

Password Policy implementation for SAP users

Dear Friends,
We are planning to implement the Password Policy for SAP users in our organization...
Here my question is,
Letu2019s say that the Password Policy is implemented today, what will happen to the SAP usersu2019 passwords?
Will they be locked out until they create a new password that follows the policy? Will there be a dialog box that will tell them what the criteria is for new passwords and its the time to change the password?
Thank you,
Nikee

Hi
Letu2019s say that the Password Policy is implemented today, what will happen to the SAP usersu2019 passwords?
SAP Users password will be intact till it prompts for next password change. Say, 90 Days. (Provided Parameter is not set)
Will they be locked out until they create a new password that follows the policy? Will there be a dialog box that will tell them what the criteria is for new passwords and its the time to change the password?
They will not be locked out until they create a new password that follows the policy (provided parameter is not set), During the time of changing the password they would get a dialog box if they have not met the specified criteria indicating that it should have specific values.
Once the password change prompt appears, in order to login to SAP they are forced to change password with password criteria set, other wise they can not login.
Thanks and Regards
Arun R

Request user digital signature via SSL

Hi, i�m working on a delivery authority implementation that should work as follows:
The system sends an reminder email to B, with a link to a SSL web page, when B clicks the link he goes to that page, and that page needs to check if he has a valid digital signature (IE: that has the same CA and the same e-mail that the ones i have registered on my database). If the checking is OK, then the server will let him download something, in example
Somebody got any clue or how to do this? Any web page that has some information, anything...
Tks in advance,
Eduardo Hadlich
Systems Analyst
Directa Automacao
Florianopolis, Brazil

Here�s the scenario: A wants to send something to B, but both need tokes to prove that they did participate in the process. The implementation uses an Delivery Authority (DA), witch is an third party entity, and it�s responsible for receiving an email from A and then forwaid it to B.
The reminder is signed with DA digital signature, and just contains a link to this homepage i described, witch B is suposed to to, supply his digital signature to prove that he�s gone there and wanted to receive the message (email from A), and the gain access to the message itself.
API? You mean JDK1.4.2 and the BouncyCastle provider?
Hope it helps...
Tks in advance,
Eduardo Hadlich

NWSSO and Digital Signatures

This is a follow-up to Re-authenticate or provide additional credentials to access sensitive data.
We are currently looking at implementing NWSSO. As far as I know, NWSSO can't be used as an external security product for Digital Signatures so that users could input their Windows credentials to sign documents. Is that correct? Assuming yes, is something planned? What is the standard solution from SAP in this regard? We are on ERP 6.0 EHP6 SPS04 running in a homogeneous Windows environment. In short the problem is that users shouldn't have to remember their username and password in the SAP backend system once SSO is enabled. If we choose to roll out the semi solution where users have to remember their username and password in the SAP backend system, there is nothing out of the box for them to change their password in the SAP backend system since SSO is enabled. The main client to access the SAP backend system will be NWBC for Desktop 4.0.

Hi,
I'm trying to use SAP Simple Digital Signature (username + password) with SSO.
I implemented the following SAP notes: 1862737 (main note that makes in possible to combine Digital Signature with SSO, which means using Windows/Active directory password instead of SAP password), 1974495, 1975701, but unfortunately it is not working.
I tried using SAP standard example of Digital Signature: program DSIG_BOOKING_EX (run from se38).
When running this program in SAP GUI 7.2 (and even in the latest SAP GUI 7.3), a popup appears and asks for a password (Windows / Active Directory Password). When I type the password and press OK, I get the following DUMP:
Category: ABAP Programming Error
Runtime Errors: MESSAGE_TYPE_X
Abap program: CL_GUI_CFW==========CP
Application Component: BC-FES-GUI
Do you know how to solve it?

Digital Signature - Username Cache

Hi,
We are using SAP MII 12.1.8 SP 05 (build 36).
The problem is: When a user doing a Digital signature (logon required check box not checked), the user id is defaulted with the previous user id.
Steps to reproduce the problem:
1. User1 Logs in the home page.
2. User1 carries out required actions including the digital signature while posting the data back to DB/SAP.
3. User1 logs out.
4. User2 logs in.
5. User2 carries out the required actions, but in the digital signature the USER1 username appears.(When USER1 Password provided, it worked.) The USER2 username should have come in the Digital Signature Username.
I have checked with JRE1.6.0_24 with IE8, JRE 1.6.0_23 with IE7, JRE1.6.0_16 with IE6. All three combinations are producing this problem.
Clearing the browser cache does not solve this problem. Closing the page and opening the page in the new window does not solve the problem.
When I checked in the page it gives the current logged in User.
When I clear the java cache and refresh the page it works fine. But the iCommand Digital signature states that, it always default to the User Id who is currently logged in. But it is not doing this. Is any one facing this problem?
It looks like some problem with MII. From where, the iCommand gets the USERNAME?
Do I have login in an OSS message for this?
The only work around available as of now check the logon required box, so that the user, can enter his name and password. But the users / business does not want to do that.
Thanks and Regards,
Kishore Kumar P S

Hi,
Additional Info: I have checked with USER3. It is still showing the USER1 in the Digital Signature.
Thanks and Regards,
Kishore Kumar P S

Adobe PDF/Acroforms & Digital signatures/Integrity/Authentication/Non repudiation

Hi folks,
I have been investigation the feasibility of using PDF as a customer-facing data collection mechanism, starting with Acroforms for a pilot, initially at least (we may consider XFA/Livecycle in a later phase).
I've got a demo application up and running using the FDF toolkit, presenting PDF forms to the web user, collecting and processing/storing the collected data etc.
My question is around how this process can be secured.
(Q1) (This may be strictly a web dev question, please ignore if considered not relevant here) : If the web application communicates over HTTPS, then the conversation between client & server is secure (encrypted at least, so that others cant sniff the content?) - but it does not necessarily authenticate the end user to the server?
(Q2) If we wish to ensure that the FDF data Submitted from the PDF form (via submit button to an ASP.NET url) is (a) known to be authentic from a particular known user, and (b) signed in some way to be non-repudiatable ... how can be do this with FDF ? If we re-generate a flat PDF document from the data they entered, is there any digital signature mechanism that can be employed for the public end-user to "sign" the PDF document in a manner that ensure Integrity/Authentication/Non repudiation ?
any pointers to Adobe or Third party toolkits, products etc. ?
best regards & thanks,
Aidan.

Q1. That's right. But if the form includes fields for a username/password, this could be sent along with the rest of the data and used to authenticate the user. Or you could use other common means, but as you said, this has nothing to do with Acrobat.
Q2. FDF can contain digital signature data. So the form would have to contain a signature field and the user would have to sign it. Assuming a self-signed signature, it's up to you whether to trust such a signature. The signed PDF is constructed from the original PDF that was served by concatenating the appended saves contained in the FDF. You can then validate the signature.
George

Digital signature in QM

Hi all,
I have some douts pls help me to solve it
1)The digital signature ensures that certain tasks are only performed by specially authorized users and documented in a signed document together with the name of the undersigned person, and the date and time.
But this can also be met by using basis tools providing authorisation to restricted usere only for UD and Result recording
then what is the use of Digital signature?
2)If i am using digital signature it is not reflecting any where.
i can olny see logs for that under Tcode DSAL
ASD

I pasted below the help file info from SPRO on digitial signatures. This gives you a good overview. You can find more info on this by searching help for information on SSF Settings for the System Signature. SSF = Secure Store and Forward and you will help files on this as well. These areas are set up by BASIS folks, not QM. You may want to inquire in a BASIS forum for more specific info on setting this up.
Craig
The basis application component Secure Store and Forward (SSF) is used to realize digital signatures in the SAP System. This section tells you how to make the following settings:
SSF settings for the digital signature
Which settings you make here depends on the signature method you use (see Specify Signature Method for Approval Using Simple Signature and Define Signature Strategies)
The complete names of the users that are supposed to execute the signatures as well as their personal time zones
When a signature is executed, the system copies the signatory name together with the local time according to the signatory's personal time zone to the signed document.
Caution
All users can maintain their address data and defaults by choosing System -> User profile -> Own data. The general user settings along with the SSF settings for the user are part of this data. Therefore if you use digital signatures, do not assign the authorization to maintain own data to all users.
Requirements
If you use the user signature as your signature method, you need an external security product that islinked to your SAP System by way of SSF.
Note that you should not store the users' Personal Security Environment (PSE) in a file system but rather, for example, on a smart card. The PSE software does not comply with legal requirements for digital signatures.
Standard settings
The SSF settings for the system signature are contained in the standard system.
Activities
SSF Settings for the User Signature
1. Go to Customizing for Basis Components, choose System Administration -> Digital Signature and carry out activity Application-Dependent Parameters for SSF Functions.
2. Enter the SSF information for the users that are supposed to execute digital signatures. If you want, you can also make the general user settings now (see below).
a) Go to user maintenance.
b) Enter the user ID of the user whose data you want to maintain and choose Change.
c) Go to the Address tab page.
d) Choose Other communication and double-click SSF (Secure Store & Forw.).
e) Enter the user's SSF information.
How the entries must be structured depends on the security product you use.
f) Choose Continue and save your entries.
SSF Settings for the System Signature
Check and, if required, maintain the standard settings. To do so, go to Customizing for Basis Components, choose System Administration -> Digital Signature and carry out the following activities:
Application-Dependent Parameters for SSF Functions
SAPSECULIB Maintenance Information
General User Settings
1. Go to user maintenance.
2. Enter the user ID of the user whose data you want to maintain and choose Change.
3. Go to the Address tab page and enter the user's first and last names.
4. Go to the Defaults tab page and enter the user's personal time zone.
5. Save your entries.

Possible to validate data entries during Digital Signature?

I have a form that was built from scratch using Adobe LiveCycle Designer ES 8.2. I also have Adobe Acrobat Pro 9.3.2. (WinXP)
I see numerous articles online related to validating user input prior to data submission for an online form via a Submit button, however, I am trying to figure out how to implement the same sort of data validation during the signing of a particular digital signature field in an offline pdf form. Simply, I want to perform data validation during a digital signature instead of when user presses Submit button.
Here's my use-case:
1. Form Originator fills out a large number of data fields and signs form via a CAC cert.
2. Another person will review, possibly edit/add data, and sign another signature block with CAC.
3. Then there is one more final CAC signature on the form before it is completed and then emailed to the right folks for processing.
4. I would like to be able to enforce the population of several Mandatory data fields (at least one Radio button and one text input, possibly others) before the 3rd signature can be applied to the document.
Again, I need to emphasize this is all happening in an offline form, no data submission or database back-end. Also, everything with the digital signatures (and locking up fields afterword) works totally fine, just interested in adding Data Validation capability during Digital Signature.
I am in no way a javascript expert, but I can probably learn from a good example. Any help or guidance is very much appreciated. Thanks...

If you are using SignatureField in the form then you will get two events preSign and postSign which you can use to validate the field input just like you do with a Submit button.
Thanks
Srini

SharePoint 2010 Collect Signatures workflow - no digital signatures?

Hello, I configured a "Collect Signatures" workflow for the content type "Document", then uploaded a MS Word 2010 (.docx) document as content type "Document". This Word document as 2 empty Signature Line in it.
I then start the workflow, basically 2-stage with 2 person from my Active Directory. However, what I found is that when I go to my workflow task and click on the "This document requires your signature" link, it pops up a "Workflow Task" box in the
browser. There is a "Sign" button which I can click to sign but it does not sign on the signature lines inside my Word document.
What am I doing wrong here? Or does SharePoint 2010 Collect Signatures workflow no longer work with digital sigantures? Thanks.

Hello ,
We have chceked by setting up a repro at our end and its not possible to complete the workflow without opening the document . Also below are some additional findings that I have and would like to share :-
1) In Office 2007 (Word and Excel) you can click on the office button from the respective application while you have the concerned document open in it. This triggers the collect digital signature workflow and the users signs
it immediately as he can see the popup on the screen. Still he has to go to the task list to complete the task which I would say is a manual process following the workflow task is 100% completed.
2) In SPS2010 with Office 2010 we do not have an option to trigger the workflows from within the Office document. Instead you directly go to task list to open the task and click on sign button to complete the task. Here you
still need to open the document again and digitally sign it. The difference is workflow here is not triggered in Office document. Even here it is a kind of manual process except that you don’t see a popup to sign document immediately from Office document
due to the fact that workflow is triggered from SharePoint task list.
Thanks,
Manas
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread."

Digital Signature other that SAP user password

Similar Messages

Maybe you are looking for