Digital signatures and wet ink signatures

HI all,
I am in the process of converting our paper checklists into fillable pdf forms. Everything is working well, but Im trying to get my head around digital signatures.
Ideally I just want to click the signature part, choose a user from a list, enter the password and the 'wet ink' signature that is scanned in gets added to the form.
So on my laptop I setup a new appearance for my signature, scanned my signature and added it to my digital signature. Perfect.
Problem is, I want to be able to use this on other computers. I copied the digital signature .pfx file and imported it on that new computer, which worked, but it drops the 'wet ink' signature and appearance.
It also appears that anyone can create a digital ID on my laptop and choose my wet ink signature appearance, and sign the document which makes it appear as if I have signed it. I was hoping the wet ink signature was locked with the digital signature but it appears this isnt the case.
Im trying to find the best way to store our signatures (we are all on a network), so that any user can use any computer and ideally lock the wet ink signature to the digital signature.
Many thanks
Chris

It doesn't work for everyone, but if you are considering moving to the world of digital signatures, it's best to forget the signature appearance ("wet"). This is just a distraction to the actual signature, and it encourages a deeply flawed workflow: one where people look at the picture on the page rather than learning about digital signatures and how to verify them. Since digital signatures are (if done properly) unfakeable and (in some places) legally recognised, it is best to completely change workflow, rather than trying to give the illusion it is just an electronic version of a paper workflow.

Similar Messages

I am on an Adobe reader and I don't remember my password for the contact signature and the Preparer signature .... How can I reset?

I am on an Adobe Reader and I don't remember my password for the contact signature of my name (also the preparer signature of my name but I remember they were one and the same)

Hello ZarthasOne,
Snapfish.com and eprintcenter.com are connected, so it may be that you have a snapfish.com account that you do not remember having. If you go to snapfish.com and try to log in it will give you an option that says forgot password. Snapfish will send you a temorary password. Log into snapfish.com with the temorary password and it will let you reset the password to something that you can remember easily. You will then use the email and password you used to log into snapfish.com to log into eprintcenter.com
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

Signature and keytool problem ?

Hello,
It is possible to use KeyPairGenerator to generate Public Key and Private Key for signature and verify the signature.
But how can I use keytool.exe(that deployed with JDK) to generate key pair for signature and verify signature in Java program?
Would you please to show me a simple program to do that?
And please show me the step in using keytoo.
I just know how to use keytool to genkey and export cert.
Best regards,
Eric

Hello ,
I saw in the java card forum that you were asking about accessing a smart card through the internet....I have the same problem with my work.I want to have a webpage(eg the webpage of an e-shop) to access the smart card on a remote pc (the byer's pc) and get some data(eg the byer's shipping address)...can you please help me on how this could be done?thanks a lot

How do I switch from a digital signature back to an "ink" signature

Reader 11.0.10
Had a doc that required a certificate signature, so I created and used one.
Now I want to go back to using my "ink" signature... how do I do that?
(In a fresh document, if I clock on "Place Signature" button it begins the digital process)

I am in the process of updating all of my organization's PDF forms and creating an environment to digitally share them. The problem that I am running into is these forms have been created by many people by various means. I have found that some forms, when opened with Adobe Reader XI, will not allow me to place a digital signature - neither drawn or with a certificate. Some forms will let me use a digital certificate but not a drawing. I have no idea what settings are different across these different forms that would cause what seems to be different permission levels for different forms.
This is also present when I'm using iOS Adobe Reader - on some forms the signature pen tool is available and on others it isn't. On the ones that it isn't, I can still use the freehand draw tool, but that doesn't work as well as the signature tool.
All of these forms are fillable and savable. Thoughts?

Digital signatures and combining PDFs in Acrobat X

I hope that one of you Acrobat gurus can help me out with one or more of these questions:
Is it possible to maintain digital signatures when inserting signed PDFs into another PDF?
Is it possible to remove a digital signature after a signature has been deleted from the page?
Is it possible to change the format of the date and time on a digital signature?

In the simplest sense a digital signature is a special checksum of all the bytes in the bytes in the PDF combined with all the bytes in the digital signature. If the document is changed in any way the checksum changes, so the signature becomes invalid. A valid signature ensures that the document hasn't changed since the signature was applied. That stuff that's shown on the signature field is irrelevant. It's just a pretty picture. The real stuff is going on inside the PDF where you can't see it.
Obviously it gets a lot more complext then this. The signature can be selectively applied so that the certain types of changes are allowed. A signature does not add real protection to a PDF, but Acrobat plays along with this scheme by trying to not allow changes that would invalidate the signature, and logging all modifications to the PDF.
1) There are ways to maintain the visual appearance of the signature on the page. If the permissions have been set to allow it the PDF can be flattened, which also partially removes much of the stuff that's going on internally. But this isn't always possible. I had to solve this problem once for a client, so I wrote a plug-in that strips the signature permissions from the PDF (I'll post this to www.pdfscripting.com sometime soon), after which the the PDF can be flattened, keeping the appearance. But of course, after this point the document has to be considered invalid. For example, if the document was a contract, the flattened version would be good for use in an analysis of say all contracts for a particular year, or for copying legal language to another contract, but it couldn't be used as the basis of a legal dispute.
2) I don't understand this one. Do you mean you're deleting the signature field and some of the internal digital signature stuff is still hanging around causing problems? If you own the signature (or the permissions allow), then a standard form reset will "Un-Sign" the PDF. Inserting PDF pages into another PDF will strip out all this info as well.
3) The stamp appearance is set at the time the stamp is applied, it cannot be changed after this point. It's a lot like a PDF stamp.
Thom Parker
The source for PDF Scripting Info
pdfscripting.com
The Acrobat JavaScript Reference, Use it Early and Often
http://www.adobe.com/devnet/acrobat/javascript.html
Then most important JavaScript Development tool in Acrobat
The Console Window (Video tutorial)
The Console Window(article)

Digital Signatures and APEX

Has anyone had any success implimenting digital signatures (PKI) within APEX?
Here is a brief synapsis of what we are looking to accomplish and realize that third-party hardware/software might be necessary. We require users to login using LDAP credentials. We want them to be able to generate documents (i.e. PDF, Word, or Excel) from our application data. We want the users to have the ability to Digitally Sign their documents. We will be issuing individual private keys & certificates and we are considering generating the documents as XML. We are still in requirements gathering, but wanted to explore any and all capabilities within APEX.
Any thoughts? Thanks.

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital signatures and view document througt URL

Hello together,
We use status document and digital signatures workflow and we canu2019t use URL link to documents which have been approved. In browseru2019s window I see digital signatures information and error :u201DHTTP 404 the web page cannot be foundu201D.
In transaction SOLAR01, SOLAR02 when, I display approved document, at first I see the windows with digital signatures information and then, after push enter - required document.
If document in status u201Cin progressu201D we donu2019t have problem.
Could you help me to resolve this problem or disable windows with signatures information?

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital Signatures and Certificate Authorities

My users are wanting a way to sign PDF documents, and have them verified for internal and external receipients. We are currently using Acrobat 9 Standard. I know you can create signatures and 'self-sign' them, but those are only trusted if the receipient manually adds them to their 'Trusted' people.
From my reading, it looks like we need to purchase a third party code signing certificate, such as the following: http://www.verisign.com/code-signing/
My question is, what do we need to do to make that certificate availbable to my users to use for their signatures? I'm having a hard time finding documentation on this part.

Here's a good starting point for understanding how CDS and AATL work with Acrobat and Reader: http://learn.adobe.com/wiki/display/security/Digital+Signatures+101
Another option you should look into is Adobe EchoSign: http://blogs.adobe.com/acrobat/tag/echosign

Can I bring digital Signatures and with a page when I extract it?

I have a client who is adding their own digital signature to documents after reading them. Our current methodology involves extracting the page with the signature and adding said page to another adobe document for our records. However, the digital signature never follows. I am thinking this is by design, but I cannot find unequivocal confirmation. Does anyone have documentation or knowledge on this topic that will clearly state whether digital signatures cannot be copied when extracting pages, or if it can. Of course, if they can, I would also like to know how. Thank you very much.
Eric

You are correct that this is by design. A digital signature provides an assurance about the entire contents of the document, not just the page that it is on (e.g., the signature field is on the last page of the contract, but the signature covers the entire contract).
Extracting just the page with signature would never leave you with a valid signature because all the other bytes of the file would be missing so the signature would not validate.
If you want a validatable record of the signature, you will need to save the entire document. If all you really need is an informal, non-verifiable record, you could try printing the page with the signature to another PDF file which should show what the page looks like. But that is all you'd have so make sure that meets the legal requirements of your situations.

Java SSF for Digital Signatures and Document Encryption

Hello,
I have read in "SAP Help - Java Development Manual" that there is a Java SSF library for Digital Signatures and Document Encryption API.
http://help.sap.com/saphelp_nw04s/helpdata/en/4f/65c3b32107964996a56e4165077e24/frameset.htm
I am trying to develop an example application in NWDS using Interfaces/classes (ISsfData, SsfDataXml...), but NWDS does not find this classes in any library.
I have searched for Javadocs in NWDS plugins directory and this classes and interfaces should be in JAR com.sap.security.api.jar, but they aren't there.
Our WAS version is: NW04s WAS 7.0 SP11 and he have downloaded Java Crypto Library (IAIK) and also SAP XML Toolkit.
Does anyone know how to find or obtain this library?
Thanks in advance,
Jorge Linares

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital Signature and SharePoint 2013

Dear Expert,
My company has a plan to do digital signature and sharepoint 2013. Now, we focus for internal use that I know use AD CS. and in near future we use for external use. We plan to buy 3rd party certificate.
My question
1. How to implement this solution? Please suggest
2. If I implemented AD CS, can we use public certificate in near future.
3. Can we use public certificate with SharePoint 2013?
Thank you

Hi,
Based on your description, my understanding is that you want to use Digital Signature in SharePoint Server 2013.
You can use digital signatures in forms ,then use these forms in you SharePoint site.
In InfoPath form ,you can change the form to allow signature here: File>Info>Advanced form options >Digital Signatures .You can choose to sign the whole form or a field .
https://social.technet.microsoft.com/Forums/en-US/0ed54d57-d67d-41cd-bd1b-9e5a4be10d0c/use-of-digital-signature-in-sharepoint-2010?forum=sharepointcustomizationprevious
besides, here is a similar post, you can take a look at:
http://sharepoint.stackexchange.com/questions/78058/custom-digital-signatures-or-hash-on-list-items
For more information about implemented AD CS, refer to the following link:
http://technet.microsoft.com/en-us/library/hh831574.aspx
Best Regards,
Lisa Chen
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Lisa Chen
TechNet Community Support

Digital Signatures and Table Row Add/Delete

I have a table that I want to add or delete rows but one of the cells in the row is a signature field; that column, always has a signature field. In the past, I have noticed that Adobe Livecycle Designer prevents the typical add or delete function (.addinstance(0)) when a digital signature field is present. I was wondering if there is a work around. One thought I had was having say 15 rows but hiding 10 of them. The add button would unhide the hidden rows up to the 15 total rows. The delete button would hide rows down to a min of 5 shown.
I was wondering if anyone know whether or not this would work and what the syntax would be. Also, is anyone aware of other work arounds?
Thanks,
Mallard27

Signatures can only be placed on the form statically, so having a repeating (1 to many) dynamic subform with a signature is invalid and is not allowed by designer. I think mostly since a signature field cant be created dynamically, it must exist in the pdf prior to loading.
However, You still can have multiple signatures in a static table as you suggested, making the rows visible/hidden depending on content and cant see why it wont work. But you will need to careful with it. I would presume you will need to make sure you are displaying all rows and then hiding those not in use. Doing the opposite will invalidate signatures. Invisible signatures are not the same as visible signatures and will be invalidated and removed. You should probably only create a new line when needed on a button action, since any hiding will invalidate the previous signatures (since its a form change). You cant lock all fields with multiple signatures and will get errors, so you will have to use form object collections and assign each one to an individual signature ( if fields are involved).
Also, If you are using any LiveCycle server components at all, I'm not sure about the level of support there is for processing multiple signatures. I probably think it would have to be done by a custom component to read the multiple signatures on the submitted xfa data.
There is further background about xfa signatures (a bit older reference) here http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/acrobat/pdfs/digisig_ in_XFA.pdf
Sorry, meant to reply to original post. Message was edited by: dohanlon

Digital Signatures and Encryption in Yosemite Mail

After upgrading to Yosemite, I am having difficulty using the Mac Mail app to send digitally signed and encrypted email.
Before the upgrade to Yosemite, I was able to send signed and encrypted emails using certificate/keys in my keychain using both the Mac Mail app and Microsoft Outlook 2011 for Mac.
After upgrading, I am still able to send signed and encrypted message in Outlook, but the Mac Mail app gives the following error when I attempt to send a signed email:
'You don’t have a trusted certificate in your keychain that matches the email address “XXXX@XXXX”. Without a certificate, you can’t sign messages sent from this address.' (Actual name replaced)
When I look at my certificates in my keychain, a certificate is available with "Usage: Digital Signature" that has the email address from the error message "XXXX@XXXX" with exact case in the RFC 822 Name.
Another interesting piece of data that might help track this down is that when I first launch the Mac Mail application, the Mac Mail application is able to successfully decrypt emails that have been previously sent encrypted to me. HOWEVER, after I attempt to send an email and get the "You don’t have a trusted certificate..." error message, these emails are no longer able to be decrypted. I get the "Unable to decrypt message" header above the message and the content of the message is just a "smime.p7m". If I close the mail application and restart it, these encrypted message are once again decrypt-able until I attempt to send a message.
It almost seems like things are working until mail tries to access the keychain.
I have attempted to delete my certificate and keys from my keychain and then adding those items again.
I have attempted to close the mail application and reopen it.
I have attempted to reboot my computer.

1. I want to confirm that this is still an issue for me in 10.10.1 and mail Version 8.1 (1993)
2. I have another data point.
At my office I have wired networking and wireless networking available. Primarily I utilize the wired networking for access to network drives, etc.
When using the wired networking, I experience all the problems that have been catalogued in this thread. Can't sign, can't encrypt, can't close the compose window after the mail program fails to find my certificate.
However, when I switch to wireless networking before starting the mail application, digital signatures and encryption seem to work! This is pretty weird behavior. Make sure to restart mail if you were previously wired.
Here are some theories:
Something to do with OCSP? When I am wired vs wireless I am on different ip subnets and subject to different firewall rule sets. Perhaps OCSP is trying to determine the status of the certificate and failing?
Here are some things I have tested:
I switched to a different official apple brand thunderbolt to ethernet adapter with no change in behavior
I disabled wireless and disconnected my wired network. So no network access at all. Signatures and encryption work! The message obviously does not send, but it appears in my outbox and I don't get the signature error. When I reconnect my wired cable, the message sends successfully and appears as encrypted in my sent folder!
I have attempted to disable OCSP by using "Keychain Access --> Preferences --> Certificates Tab --> OCSP (OFF) and CRL (OFF)" but this hasn't made a difference in the behavior of wired networking.
Ran a TCPDUMP on traffic to the OCSP service but didn't see any traffic when I attempted to send a message and received the signature error
I am pretty stumped on this. This is very odd behavior
Does anyone else experience this behavior?

Digital signatures and inbound documents

Hello all,
is it possible to import document previously digitaly signed in another system.
Scenario will be to have another (partner) system in which user create document with digital sign. This document is transfered to SAP R/3 with digital sign, and it should create document which has digital sign on it.
Is this scenario possible?
Do we need to have user from partner system created in SAP system with proper authorizations or document will be signed on some other way.
TIA
Gordan

You can edit a signed PDF document (assuming you are not using the field collection feature). This will not "Invalidate" the signature, but it will change the status of the signature.
I have attached two screen shots to illustrate... To generate these, I signed a PDF, changed some data and re-validated the signature.
ValidationStatus.gif shows the status of the actual signature.
DocStatus.gif shows a "roll-up" status (meaning it checks all signatures on a doc and displays an overview) of the signed document.
Regards
Steve

Digital Signatures and Security Policies

Is there a way to combine a digital signature and a Security Policy. We have a need to digitally sign a document, but not allow that signature to be removed and to not allow any further editing of the document?

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital signatures and wet ink signatures

Similar Messages

Maybe you are looking for