Digital Signatures Help Requested

I looked through the forums and there was one thread not too long ago that talked about digital signatures but didn't seem to focus on this particular problem, so I figured I'd start a new one hoping someone would have some advice.
We receive a document that is digitally signed by our client. We view the PDF in the full version of Acrobat and have added these users as Trusted Users (in managed trusted identities).
We Verify the Signatures that were added to the document and see the digital signatures at the bottom of the document but there's one thing that's not showing up and that's the actual "signature" or "signed signature" of the person. We only see a typed out version of their name.
We've spoken to our client and they maintain that we should be viewing the "signed signature" and we need to figure it out.
When I check the Signature Properties, it tells me that their signatures were created using "Entrust.PPKEF". Could this be the problem?
As much as I'm reading up on Digital Signatures, it's my belief that we don't need to purchase any other software in order to view these properly. Am I mistaken.
Any help would sure be appreciated.
Paul

Hi Paul,
Are you expecting a "wet ink" type of signature? That is, an image in the signature field that is a copy of a signature someone created with pen and paper? If that's what you really need then maybe a digital signature workflow is not what you should require from your client. However, in many respects a digital signature (at least in the electronic world) is a much more powerful tool then a wet ink facsimile.
In this day and age, anyone could grab an image of a wet ink signature, crop it and use it apply it to a document as if they were the original signer. In others words, in the electronic world a wet ink signature is not very secure. However, a digital signature cryptographically binds the signer to the document. As long as the digital ID used to create the digital signature comes from a trusted third party (i.e. a certificate authority that vettes the identity of the individual before they issue the digital ID) then you are get two things from the digital signature. One is document integrity (you will know if the document has been altered post signing), and the other is non-repudiation (the signer cannot deny that they were the person that applied the digital signature). If you are accepting digital IDs (it's the "manage trusted identities" thing you mentioned) issued by a certificate authority that does not vette the identity of the signer then you have to be a bit more leery of trusting the signer.
I don't know if the Entrust signature method has the ability to add a custome appearance that includes the wet ink facsimile, but if it does, your client could create a digital signature whose appearance looks like a wet ink signature. However, the bottom line is the lack of a wet ink facsimile is not a cause of concern when it comes to digital signatures in PDF files.
Steve

Similar Messages

Digital signature help

I have a created a PDF in Acrobat 8.0 that requires multiple digital signatures. I am emailing the file to the people and asking for their digital signature. When I try to save the file with Person1's signature to a file with Person's2 digital signature, it deletes Person's1 signature and inserts Person2's signature. How can I save the file so both signatures are retained?
I need help ASAP. It is driving me crazy.

Hi,
You can't merge signed files because it modifies the PDF layer which would break the signature. One of the limitations of digital signatures is they are serial operations, that is one signature follows the previous signature. You cannot do this in parallel and merger the contents into one file. You could put the multiple files into a single Package (later renamed to Portfolio in Acrobat 9) file, but each signed copy would still be a stand alone file attachment within the Package.
The bottom line is, if you really need all of the different digital signatures in the same PDF file you need to send it to the first recipient, have them sign it, and then forward the file to the next recipient (or back to you).
Steve

Digital signatures(help)

So Im creating a form that has some required fields, 2 signatures (1 required), and a submint button(that for some reason works on rollover not push). Im setting the security with a pass allowing printing, filling and signing but when I send the form open it with acrobat reader I look at the security details and signing is not allowed. Can any1 tell me how to fix this?

Hi Paul,
Are you expecting a "wet ink" type of signature? That is, an image in the signature field that is a copy of a signature someone created with pen and paper? If that's what you really need then maybe a digital signature workflow is not what you should require from your client. However, in many respects a digital signature (at least in the electronic world) is a much more powerful tool then a wet ink facsimile.
In this day and age, anyone could grab an image of a wet ink signature, crop it and use it apply it to a document as if they were the original signer. In others words, in the electronic world a wet ink signature is not very secure. However, a digital signature cryptographically binds the signer to the document. As long as the digital ID used to create the digital signature comes from a trusted third party (i.e. a certificate authority that vettes the identity of the individual before they issue the digital ID) then you are get two things from the digital signature. One is document integrity (you will know if the document has been altered post signing), and the other is non-repudiation (the signer cannot deny that they were the person that applied the digital signature). If you are accepting digital IDs (it's the "manage trusted identities" thing you mentioned) issued by a certificate authority that does not vette the identity of the signer then you have to be a bit more leery of trusting the signer.
I don't know if the Entrust signature method has the ability to add a custome appearance that includes the wet ink facsimile, but if it does, your client could create a digital signature whose appearance looks like a wet ink signature. However, the bottom line is the lack of a wet ink facsimile is not a cause of concern when it comes to digital signatures in PDF files.
Steve

Digital Signature HELP NEEDED!

What would cause a digital signature to work for the desiger of a form, but not for the user??

GJ,
I am using standard XI and tried saving my form as a reader enabled PDF but the signature field is still not working in reader. will this work of is Pro required?

"Save As" requested instead of "Save" after digital signature of my PDF

Hi all,
I use Adobe Reader XI.
I have a PDF file configured with a set of fields to be filled in.
One of these fields is a digital signature field.
Everyting is working fine: I can fill the fields and sign the document with my ID card, as you can see below :
The problem I have is that when I sign my document with my digital signature, Adobe request a "Save As". I would like to know if there is a way to only use a "Save" ?
That requirement is very important since we will deploy the solution to more than 5000 users in an environment which is integrated with other tools, and for the whole stuff to work, the users can't change the file name nor file path... In that scenario, you will understand that proposing a "Save As" by default is not the good way to go.
Ciould you please tell me if a solution exists for this ?
Thanks already
Benoît

Never mind, I found the answer.
A matter of setting the Firefox options so that PDF files open in Reader or whatnot rather than prompt to save.

Please help me with the digital signature validation problem?

Please help me with the digital signature validation problem?

Hi
Execute the program in the Debuggin mode.
In the Debugger Window
Select Breakpoint -> Break point at -> Breakpoint at source code Menu Item and enter the details of the program/include/line no..
Activate the System Debugger On from the Settings Menu.
Hope this would help you.
Murthy
Edited by: Kalyanam Seetha Rama Murthy on Jul 18, 2008 7:20 AM

Validating digital signatures. NEED HELP ASAP!

I emailed a form to an employee, who created and applied a digital signature to it. The form was emailed back to me and I received the message 'At least 1 signature requires validating/validation." I go through the steps to trusting and validating, yet when I reopen the document after saving it, I keep getting the same message to validate.
Please help!

When you contacted Canon what did they say?

Need Help in Digital Signature

Hello,
We want to implement digital signature functionality for
1.Bid invitation creation/Bid creation process
2.File signing for documents uploaded in C-folder.
It would be better if you could share documents about how to implement digital signatures.
Please note my yahoo ID : [email protected]
Thanks & regards,
Avinash

Hi ,
If you wish to use your own texts/mono/signatures when outputting a purchase order, proceed as follows:
1. In the step Adjust Form (Layout Set) for Purchasing Documents, check to see at which points you can store your own texts in the standard form MEDRUCK.
2. Enter the texts in accordance with your requirements using the SAPScript editor. To do so, choose SAPscript Standard Texts.
Assign unique names to your texts (e.g. names containing the key for the purchasing organization).
3. Choose the desired text type (e.g. texts for document item) under Document Printout: Purchase Order.
4. Create a new entry and enter the following data for it:
Print operation (e.g. new printout or printout of changes (change notice))
Purchasing document type and item category
Text object, text ID and the text name
Print sequence in which the text is to be outputted
In the standard system, the purchasing form is called "MEDRUCK". MEDRUCK is a multi-purpose form controlling the output of RFQs, POs, outline agreements, delivery schedules, reminders/urging letters, rejection letters, change notices, and order acknowledgment expediters.
Changing the Purchasing Form
Prerequisites
Before you make any changes to the standard form, you should consider the following.
Change Existing Form or Create New One?
You can either change the standard form or create a new form by copying the standard one.
When you change the standard purchasing form, you must first create a correction number, because changing the standard form represents a customer modification. Thereafter, the system maintains both your changed version and the SAP version of the form.
If you create a new form, you must assign it to the appropriate message type (PO, rejection letter, etc.) before the system can use it for printing.
Its recommend that you always create your own form. This makes it easier to distinguish between your customized form and the standard form provided by SAP.
Hope ths helps
please reward points
Sunil

Help with Mail & Digital Signatures

My work is moving to Common Access Cards and digitally signed email. I can't get Mail to bring up the digital signature icon when I use the CAC card. It works fine with a software certificate, but I can't use that.
The certificates in the CAC show up in a different keychain, and I think Mail wants the certificates in the login keychain. I've tried the following:
-- importing the certificate from the CAC (didn't allow it)
-- changing the default keychain to the CAC keychain (caused mail and keychain access and Safari to all quit)
I don't really want to try logging in using the CAC card -- the only instructions I've seen to do this require messing around with Terminal and other files. Seems the potential for messing things up is rather large.
Anyone know how I can get Mail to recognise the CAC card for digital signatures?
Mac Pro Mac OS X (10.4.9)

I haven't had to do this myself, but these instructions may be of help, if you haven't already seen them.
Matt

Request user digital signature via SSL

Hi, i�m working on a delivery authority implementation that should work as follows:
The system sends an reminder email to B, with a link to a SSL web page, when B clicks the link he goes to that page, and that page needs to check if he has a valid digital signature (IE: that has the same CA and the same e-mail that the ones i have registered on my database). If the checking is OK, then the server will let him download something, in example
Somebody got any clue or how to do this? Any web page that has some information, anything...
Tks in advance,
Eduardo Hadlich
Systems Analyst
Directa Automacao
Florianopolis, Brazil

Here�s the scenario: A wants to send something to B, but both need tokes to prove that they did participate in the process. The implementation uses an Delivery Authority (DA), witch is an third party entity, and it�s responsible for receiving an email from A and then forwaid it to B.
The reminder is signed with DA digital signature, and just contains a link to this homepage i described, witch B is suposed to to, supply his digital signature to prove that he�s gone there and wanted to receive the message (email from A), and the gain access to the message itself.
API? You mean JDK1.4.2 and the BouncyCastle provider?
Hope it helps...
Tks in advance,
Eduardo Hadlich

Do I have to use EchoSign to request digital signatures via email?

I am using Acrobat XI Professional and want to request a digital signature. Can this be done outside of EchoSign or no? If possible, how do I add the signature request to a PDF?

EchoSign does not support digital signatures. What do you mean by "add the signature request to a PDF". If you want to digitally sign PDF then how do you do it depends on PDF. If a PDF has unsigned signature fields, you click on the field and "Sign" dialog pops up and guides you through the process. If there are no unsigned signature fields in PDF then you select Fill&Sign->Work with Certificates->Sign with Certificate. You get a dialog to draw a rectangle for your signature field and then the same "Sign" dialog pops up. You need to have a certificate with a private key suitable for signing to digitally sign a PDF.

Jar files with digital signature -pl help

Hi there
is there anybody who will help me guiding step by step how to create a jar file (executable) with digital signature?
thanks in advance.

Sorry, digital signatures have nothing to do with decompilation security. The short answer is, there's nothing you can do about it. Search the forum for 'obfuscator', a lot of people have asked the same question.
-Ron

HT2573 I am using macbook pro with update of 10.7.5...I am not able to authorize my digital signature. It is showing crypto service provider is missing. I am in a big problem. plzzz help me out....thanx

I am using a mac book pro version 10.7.5..I am not able to authorize my digital signature.It is showing crypto service provider is missing. I am in a big problem . plzzzz help me out. Thanks

You have 10.6 on that machine, I suggest you stick with it for performance, third party hardware and software reasons as long as possible.
Consider 10.8 (not 10.7) when it's released, because 10.7 and 10.8 will require a new investment in software and newer third party hardware as it requires newer drivers the old machines won't have. (forced upgrade because of software, really nice of them)
http://roaringapps.com/apps:table
Far as your Safari problem do these things until it's resolved:
1: Software Update fully under the Apple menu.
2: Check the status of your plug-ins and update (works for all browsers) also install Firefox and see if your problems continue. You should always have at least two browsers on the machine just in case one fails.
https://www.mozilla.org/en-US/plugincheck/
Flash install instructions/problem resolution here if you need it.
How to install Flash, fix problems
3: Install Safari again from Apple's web site
https://www.apple.com/safari/
4: Run through this list of fixes, stopping with #16 and report back before doing #17
Step by Step to fix your Mac

Need help with implementing Digital Signatures

Hello,
Here's an excerpt from a security book:
To create a digital signature, a sender first takes the original plaintext message and runs it through a hash function.
The Secure Hash Algorithm (SHA-1) is the standard for hash functions.
The hash value is also known as a message digest.
Next, the sender uses the its private key to encrypt the message digest. This step creates
a digital signature and authenticates the sender, since only the owner of that private key could
encrypt the message. The sender encrypts the original message with the receiver’s public key
and sends the encrypted message and the digital signature to the receiver.
The receiver uses the sender’s public key to decipher the original digital signature and reveal the message
digest. The receiver then uses his or her own private key to decipher the original message.
Finally, the receiver applies the agreed upon hash function (e.g. SHA-1 or MD5) to the original
message. If the hash value of the original message matches the message digest included
in the signature, there is message integrity-the message has not been altered in transmission.
I would like to implement the sender's part and create an encrypted message and the digital signature.
Suppose I have in hand a message (let's call it myMessage), my private key (let's call it myPrivateKey) and the receiver's public key (let's call it receiverPublicKey).
In order to encrypt the original message with the receiver’s public key I've implemented this piece of code:
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.ENCRYPT_MODE,receiverPublicKey);
byte[] binaryCryptData = cipher.doFinal(myMessage.getBytes());
String encPayload = Base64.byteArrayToBase64(binaryCryptData);
return encPayload;In order to create the signature I've implemented this piece of code:
Signature RSA = Signature.getInstance("SHA1withRSA");
RSA.initSign(myPrivateKey);
byte bt[] = message.getBytes();
RSA.update(bt);
byte[] signature = RSA.sign();My assumption is that I don't follow the exact guidlines in the book for the sender.
Can someone please let me know what I'm missing and help me in adjusting my code with the books standards?
Thank you in advance,
Roy

it's your homework, not ours.
Congratulations on typing in everything BUT the most important part that it's all about, but that's not enough.

Need help making digital signature field read only if required fields are null

Using Adobe LiveCycle Designer, I have a digital signature field. I want to prevent users from being able to digitally sign the pdf if any required fields in the pdf are null or blank. I'm a newbie to scripting so any detailed help would be greatly appreciated. The required fields in the pdf include radio buttons, check boxes, text field, etc. I appreciate any help anyone can provide.
Thanks

Exactly how you check a field for being empty depends on what type of field it is. For text fields, you should get the field's value as a string and compare it to an empty string, something like:
var val = getField("Text1").valueAsString;
if (val) {
app.alert("Field is not empty");
If there is a default value that needs to be changed, you would compare to the default value:
var f = getField("Text1");
var val = f.valueAsString;
if (val !== f.defaultValue) {
app.alert("Field value is OK");
For check boxes and radio buttons, you'd compare to the string "Off", which means none in the group is selected.
For dropdowns (combo boxes) and list boxes, there is normally one value selected, so you would have to get the value and check against the default value (or something else) to see if the field is properly filled in.
You could place the script there, but I usually use a separate button that I encourage the user to click in order to check the field. The problem with using the Will Save event is you can't prevent the save from happening.
The script can loop through all of the fields (and test all required ones), or you could set up an array of field names to check.

Digital Signatures Help Requested

Similar Messages

Maybe you are looking for