Digital signatures on documents

A requirement from our user community is to have legally binding signatures on documents stored as content. Looking through the online documentation, it doesn't appear that the functionality is "out of the box". Has anyone out there ever done this before? If so, how?

What does the details button reveal?

Similar Messages

Java SSF for Digital Signatures and Document Encryption

Hello,
I have read in "SAP Help - Java Development Manual" that there is a Java SSF library for Digital Signatures and Document Encryption API.
http://help.sap.com/saphelp_nw04s/helpdata/en/4f/65c3b32107964996a56e4165077e24/frameset.htm
I am trying to develop an example application in NWDS using Interfaces/classes (ISsfData, SsfDataXml...), but NWDS does not find this classes in any library.
I have searched for Javadocs in NWDS plugins directory and this classes and interfaces should be in JAR com.sap.security.api.jar, but they aren't there.
Our WAS version is: NW04s WAS 7.0 SP11 and he have downloaded Java Crypto Library (IAIK) and also SAP XML Toolkit.
Does anyone know how to find or obtain this library?
Thanks in advance,
Jorge Linares

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital Signatures and Document Encryption api

Hello Expert,
From which SAP NETWEAVER 7.0 SPS Digital Signatures and Document Encryption api is supported ?
I found Javadocs for SAP NetWeaver 04 SPS15.Is this api supported from SPS 15 or prior to SPS 15 also?
Regards,
Kubra Fatima.

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital Signature error - "Document could not be signed"

I have a servlet (from the documentation sample) the rendered my form online. My form was saved from Designer as Acrobat 7.0.5 Static PDF Form File and then I applied Reader Extensions to it to allow for Digital Signatures and Basic Form Fill In. When I try to digitall sign the form, I get the error:
"The document could not be signed."
"There was an error when attempting to commit this signature. The document was not saved."
"A file error has occurred."
Anyone know what this means and how do I fix it??
I am using Acrobat Reader 7.0.8, so maybe that is the problem, but I won't know what version Reader my user's will have, so it needs to work in many versions.
If I don't sign the form, I can submit it where a second servlet saves the form to a file and this happens successfully.
Thank you,
Jennifer

Hello Rob,
Thanks for the reply.
Actually, there is a bug with Reader and Form Rendered forms - at least with already extended pdf forms that get rendered via Form Server.
So, I hope this makes sense, but this is what I have determined (this is all done with viewing the EXTENDED PDF form WITHIN a WEB BROWSER):
If I use a simple hyperlink (i.e. plain html anchor tag) to my PDF form, I can digitally sign the form with no problem within in all 7.x versions of Reader.
If I utilize Form Server code (tested with local EJBClient and then remote JBoss using SOAPClient) then the results vary:
Reader 7.0.0 - I could successfully sign the form
Reader 7.0.5 - I could successfully sign the form
Reader 7.0.7 - I could NOT sign the form
Reader 7.0.8 - I could NOT sign the form
Reader 8.0.0 - I could successfully sign the form
So, you can see in version 7.0.7 and 7.0.8, one cannot digitally sign a form if it was rendered via Form Server and viewing the form in the web browser, but I can sign it just fine if I display the form via a simple html hyperlink, so that is what I am doing now.
I had this same issue when using Workflow server, but that was easy enough to apply the Reader Extension QPAC over and over as needed. I need these forms to be submitted on a remote server and haven't figured out yet how to apply the Reader Extension remotely yet.
I hope this helps.
Jennifer

Add Digital signature to document

Hi,
I want to add digital signature to the doccument. E-signature is possible how about this?
Thanks,
Jai

Check below -
http://docs.oracle.com/cd/E28280_01/bi.1111/e22255/digital_sig.htm
http://docs.oracle.com/cd/E12844_01/doc/bip.1013/e12187.pdf
Cheers,
Vignesh

Digital Signature in Document Signature field slow

The business requirement is for users to digital sign a Dynamic PDF. Digital ID's are created using Advanced - Security Settings - Digital ID - Add ID - Create a self-signed digital ID for use with Acrobat - New PKCS#12 digital ID , from Adobe Professional.
In the PDF, the user clicks in a Document Signature field to sign the document. It takes a VERY long time for this signature process to complete.
is there a trick I am missing? Is the slowness due to the way the digital ID was created?

Unfortunately, I cannot forward the form as it contains client data.
I have tested signing another PDF I've created with 2 fields using the same the digital ID's, and the process completed quickly.
Perhaps the problem lies with the size of my form which has 20 pages with 50 fields (on average) per page.
When signing the document, the signature details appear, the "saving file" temporary status bar appears and THEN the hourglass kicks in and takes 5 minutes before control is returned. Is there validation particular to the signing process I can disable? Alternatively, can I specify which pages are certified instead of the entire document?

Multiply digital signature in document - prevent save after each

Is there a way to prevent acrobat 8 from saving after each signature. I want to place there separate signatures on a document have the individual sign all then save.
current adobe acrobat pro 8.1.2

My two cents:
When you sign a document, Adobe creates a bit-count or parity-check of the document in the state it was when it was signed. That's why it was saved. It has to detect whether the signed version was altered in any way. The signature is tied to the document very intimately.
If I change some part of a document after I sign it, the bit-count changes and the signature gets flagged.
However, I have the same problem. I have a purchase request that needs to be signed by the requestor, the department head, finance, blah, blah, blah... Each time the latest signatures look great and the previous ones are flagged. I thought Version 8 was capable of just defining what fields are authenticated by the signature, but I haven't fount it yet.

Problem with digital signature of documents

I have a requirement to upload documents and his respected fingerprint signed (SHA1WithRSA).
To achive this I am using the functions modules:
SSF_KRN_DIGEST
SSF_KRN_SIGN_BY_AS
but I can´t make it work.
I also ask for the .pem file used to generate the PSE that I'm using to sign documents.
With this pem file I execute in openSSL this following command:
#Creates Message Digest of document.txt, and the sign it with MyKey.pem
dgst -sha1 -sign MyKey.pem -out document.sign document.txt
AND THIS WORKS! Now, with this succesfull case I try to track down the problem with the FM that I'm using, and I detected that SSF_KRN_DIGEST is given me a diferent result than openssl (so I forget for sign the document for a while...).
This are the HEX value for OpenSSL (this is the one that works):
30
21
30
09
06
05
2B
0E
03
02
1A
05
00
04
14
AC
37
25
AC
AD
34
E2
F8
B9
21
B3
15
DD
20
0D
71
5B
FD
EE
EB
And this is the HEX value of the result of FM SSF_KRN_DIGEST:
30
40
06
09
2A
86
48
86
F7
0D
01
07
05
A0
33
30
31
02
01
00
30
09
06
05
2B
0E
03
02
1A
05
00
30
0B
06
09
2A
86
48
86
F7
0D
01
07
01
04
14
AC
37
25
AC
AD
34
E2
F8
B9
21
B3
15
DD
20
0D
71
5B
FD
EE
EB
As you can see, both files do countain the digest, but the metadata and padding is different. As far as I know, it should respect the ASN.1 structure, but I can figure out whats wrong with the SSF_KRN_DIGEST call.
This is my code:
* Creamos el message diggest del archivo
CALL FUNCTION 'SSF_KRN_DIGEST'
   EXPORTING
     b_detached                         = 'X'
     ostr_input_data_l                  = lv_bin_data_len
     str_hashalg                        = 'SHA1'
IMPORTING
    ostr_digested_data_l               = lv_digested_len
*   CRC                                =
   TABLES
     ostr_input_data                    = lt_bin_data
     ostr_digested_data                 = lt_digested_data
EXCEPTIONS
    ssf_krn_error                      = 1
    ssf_krn_noop                       = 2
    ssf_krn_nomemory                   = 3
    ssf_krn_opinv                      = 4
    ssf_krn_nossflib                   = 5
    ssf_krn_input_data_error           = 6
    ssf_krn_invalid_par                = 7
    ssf_krn_invalid_parlen             = 8
    ssf_fb_input_parameter_error       = 9
    OTHERS                             = 10.
Where lt_bin_data contains the document, uploaded in binary mode.
Thanks in advance.
regards.

Martin, as you said, the problem was the PKCS#7 format.
In a communication problem, I was told that the application works with that format, whereas in reality is working with PKCS#1 - V1.5
I just have to search for a FM that support that format, like SSFW_KRN_SIGN.
This FM calculates the MD, and sign it, so it was easier than I originally thought.
This is the FM call that I'm using, just in case someone needs the code:
* Leemos los parametros definidos en la SSFA
CALL FUNCTION 'SSF_GET_PARAMETER'
   EXPORTING
     application             = 'INTBAN'
   IMPORTING
     str_profileid           = lv_profileid
     str_profile             = lv_str_profile
   EXCEPTIONS
     ssf_parameter_not_found = 1
     OTHERS                  = 2.
*Cargamos la tabla con el encargado de firmar
lw_signer-id = lv_profileid.
lw_signer-profile = lv_str_profile.
INSERT lw_signer INTO TABLE lt_signer.
*Calculamos MD del documento (SHA1), y firmamos
CALL FUNCTION 'SSFW_KRN_SIGN'
   EXPORTING
     str_format                   = 'PKCS1-V1.5'
     str_hashalg                  = 'SHA1'
     ostr_input_data              = lv_xstring_data_to_sign
   IMPORTING
     ostr_signed_data             = lv_xstring_signed_data
   TABLES
     signer                       = lt_signer
   EXCEPTIONS
     ssf_krn_error                = 1
     ssf_krn_noop                 = 2
     ssf_krn_nomemory             = 3
     ssf_krn_opinv                = 4
     ssf_krn_nossflib             = 5
     ssf_krn_signer_list_error    = 6
     ssf_krn_input_data_error     = 7
     ssf_krn_invalid_par          = 8
     ssf_krn_invalid_parlen       = 9
     ssf_fb_input_parameter_error = 10
     OTHERS                       = 11.
Where lv_xstring_data_to_sign is just a xstring with the document that I have to sign.
Regards!
German Guzelj

Digital Signature while approving a document in KM

Dear all,
We have a an approval enabled folder in KM. My question is, can we enable digital signature for documents in that folder?
Scenario will be like this. I'm an approver. When I approve I should be allowed to digitally sign on the document.
Is this possible in KM?
We are on EP 7.0 Ehp1 SP04.
Best Regards
Aparnna Prasad

Hi GLM,
Thank you for your view on this.
I've come across the following docupaedia link
[https://cw.sdn.sap.com/docs/DOC-44165]
I'm not sure how do I integrate 3rd party solutions?
Best Regards,
Aparnna Prasad

Digital signatures and view document througt URL

Hello together,
We use status document and digital signatures workflow and we canu2019t use URL link to documents which have been approved. In browseru2019s window I see digital signatures information and error :u201DHTTP 404 the web page cannot be foundu201D.
In transaction SOLAR01, SOLAR02 when, I display approved document, at first I see the windows with digital signatures information and then, after push enter - required document.
If document in status u201Cin progressu201D we donu2019t have problem.
Could you help me to resolve this problem or disable windows with signatures information?

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Problem with Digital Signature strategy in Document Managment System

Hello ALL,
I am facing problem with Digital Signature strategy in DMS. If any help its greatly appreciated.
I have senario where Approvers in DMS will review the document and approve the document and put on their digitial signature. if i have multiple approvers maintained in the characterstics it has to check weather it has been approved by all approvers otherwise it has to reset the status to for approval.
My problem is i am able to reset the status back from approved to for approval using the badi document_status01 but when the next approver logs in to the document and change the status to approved he is not able to get the digital signature pop up which it comes only first user approves it.
can any one help me out on whats going wrong in it.
Thanks
Srikanth Aduri.

Hi,
maybe the reason for this is that the status of the digital signature is not changed. Then the system thinks that the digital signature is still completed and therefore the user is not getting the pop-up again. The database table for the digital signature for documents is TC77. I hope this information is usefull for you.
Best regards,
Christoph

Digital Signatures and APEX

Has anyone had any success implimenting digital signatures (PKI) within APEX?
Here is a brief synapsis of what we are looking to accomplish and realize that third-party hardware/software might be necessary. We require users to login using LDAP credentials. We want them to be able to generate documents (i.e. PDF, Word, or Excel) from our application data. We want the users to have the ability to Digitally Sign their documents. We will be issuing individual private keys & certificates and we are considering generating the documents as XML. We are still in requirements gathering, but wanted to explore any and all capabilities within APEX.
Any thoughts? Thanks.

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Digital Signatures for Changing the statuses in Issue Mgmt

Hi
Has anyone put in place digital signatures for Issue
Managemnt when we change the status values in an issue.
We are looking at SAP Note 835584 - Digital signature for documents,
but that is not applicable for us as we want to initiate the digital
signature when the status profile "SLFI0001" kicks in and the status is
changed from one to the other.(eg in process to completed etc)
We have created the digital signature and the strategies, but are
looking for a place to attach this with the status profile "SLFI0001".
Is there a place we can attach the digital signature strategies to this
status profile?
Anyone has any ideas on how it can be done?
Thanks in advance..
sap ques..

We have a document that needs to be signed by more than one individual -- and in our process we are using the Topacz signature pad to get the signature. It's similar to the one you sign at the grocery store, drug store, etc. In order to NOT have the first signature invalidated, we were told to edit the registry...and it works perfectly!
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\AVAlert\cCheckbox]
"iDigSigSaveAsCertified"=dword:00000001
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\AVAlert\cCheckbox\cAnnots]
"iReaderEnableSaveWarn"=dword:00000001
Obviously if you are using a different version of Acrobat, you'll have to change the key accordingly.
Hopefully this will work with your process.
Good luck!!

Implementing Digital Signature Strategy In Adobe Forms

Hi Everyone,
I need to know how to implement Digital Signatures with the use of Signature Strategy in my ECC 6.0 system..
Here is what i've done already,
1) Created a signature strategy with user authentication and registered the Signature Object in TA_SIGNO according to the document below.
[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e0fbaa71-cd8d-2910-5982-e30626035400]
2) I have Adobe Acrobat 9.0 already.
3) Now, Ive added a Document Signature Field in my Adobe Form Layout too.
4) How to implement the Signature strategy i've created in this Adobe Form ???????????
Kindly share your ideas.
Edited by: Prashanth on Jan 25, 2011 1:21 PM
Edited by: Prashanth on Jan 25, 2011 1:30 PM

Hi,
maybe the reason for this is that the status of the digital signature is not changed. Then the system thinks that the digital signature is still completed and therefore the user is not getting the pop-up again. The database table for the digital signature for documents is TC77. I hope this information is usefull for you.
Best regards,
Christoph

Can I bring digital Signatures and with a page when I extract it?

I have a client who is adding their own digital signature to documents after reading them. Our current methodology involves extracting the page with the signature and adding said page to another adobe document for our records. However, the digital signature never follows. I am thinking this is by design, but I cannot find unequivocal confirmation. Does anyone have documentation or knowledge on this topic that will clearly state whether digital signatures cannot be copied when extracting pages, or if it can. Of course, if they can, I would also like to know how. Thank you very much.
Eric

You are correct that this is by design. A digital signature provides an assurance about the entire contents of the document, not just the page that it is on (e.g., the signature field is on the last page of the contract, but the signature covers the entire contract).
Extracting just the page with signature would never leave you with a valid signature because all the other bytes of the file would be missing so the signature would not validate.
If you want a validatable record of the signature, you will need to save the entire document. If all you really need is an informal, non-verifiable record, you could try printing the page with the signature to another PDF file which should show what the page looks like. But that is all you'd have so make sure that meets the legal requirements of your situations.

Digital signatures on documents

Similar Messages

Maybe you are looking for