Digital Signatures (.pfx)

In the past, we have purchased digital ID's from Verisign to digitally sign our pdf forms. They recently changed their website format and now when you purchase a digital ID, it will read "Persona Not Verified" as the name of the person that signs the document, instead of the user's actual name. This totally negates the purpose of a digital signature and I do not understand their reasoning, but so be it. Does anyone know where you can purchase a digital ID from a trusted source in .pfx format? Thanks for your input.

Hi,
One thing to realize is that the Certificate Authority (the "CA") is treated as a trusted third party. That is, whoever is validating the signature is trusting that the CA verified the identity of the person to whom they issued the digital ID. If they hadn't vetted your identity then it is incumbent upon them to make sure that whoever receives the signed document realizes that the signers identity has not been properly verified. It was actually a break-down in trust on VeriSign's part for all of the years they issued short lived digital IDs that contained a name having not verified the actual identity of the person requesting the digital ID. They are no doing what they should have been doing for years.
That said, there are many trusted CAs that will issue a digital ID, but what you are going to have a hard time doing is finding one that will issue a digital ID for free that contains your name. As mentioned above you can get a digital ID from Comodo, but as the poster said they had to purchase the ID. Comodo does offer a free digital ID that they call an "e-mail ID" because at the very least they can validate the e-mail address, but since you can create any e-mail address (provided someone else hasn't got that address) with any name associated with it Comodo leaves the name field blank (akin to where VeriSign uses "Persona Not Verified"). You could go back to VeriSign and buy a digital from them where they would add your name, but you have to provide them with proof of identity, but your going to find that with all CAs.
Adobe partners with several CAs and you can get the list from http://helpx.adobe.com/acrobat/kb/certified-document-services.html but by no means is this an all inclusive list of the CAs that are out there. They number in the hundreds, but many of them are country specific.
Steve

Similar Messages

Digital signatures and wet ink signatures

HI all,
I am in the process of converting our paper checklists into fillable pdf forms. Everything is working well, but Im trying to get my head around digital signatures.
Ideally I just want to click the signature part, choose a user from a list, enter the password and the 'wet ink' signature that is scanned in gets added to the form.
So on my laptop I setup a new appearance for my signature, scanned my signature and added it to my digital signature. Perfect.
Problem is, I want to be able to use this on other computers. I copied the digital signature .pfx file and imported it on that new computer, which worked, but it drops the 'wet ink' signature and appearance.
It also appears that anyone can create a digital ID on my laptop and choose my wet ink signature appearance, and sign the document which makes it appear as if I have signed it. I was hoping the wet ink signature was locked with the digital signature but it appears this isnt the case.
Im trying to find the best way to store our signatures (we are all on a network), so that any user can use any computer and ideally lock the wet ink signature to the digital signature.
Many thanks
Chris

It doesn't work for everyone, but if you are considering moving to the world of digital signatures, it's best to forget the signature appearance ("wet"). This is just a distraction to the actual signature, and it encourages a deeply flawed workflow: one where people look at the picture on the page rather than learning about digital signatures and how to verify them. Since digital signatures are (if done properly) unfakeable and (in some places) legally recognised, it is best to completely change workflow, rather than trying to give the illusion it is just an electronic version of a paper workflow.

I am unable to sign with Digital signature using a .PFX file. The button does not appear.

When I try to sign with a Digital signature using a .PFX file, the button to select the signature does not appear. I have JAVE SE 7 U11 10.11.2.21 platform in my add ons and JAVA Consol 6.0.33 and 6.0.35 in my extentions.
This problem is not encountered in Crome or IE-8
ASHISH

Regarding your first question about bookmarks, I think you discovered the answer in when you pressed the address bar. The second tab there has your bookmarks.
As for the keyboard, I'm not sure why your Firefox is reacting so slowly; mine seems to show keyboards even when I don't want them. If you have accumulated a lot of history, perhaps that's an issue?
Did you use any third party software to move your Firefox data from internal memory to the storage card?

Issue in Java concurrent program for Digital Signature Stamping

Hi All,
Im calling a Java concurrent program which does digital signature stamping on the PDF report generated.Program able to able to read the PDF file as input and also digital signature stored as file in the application but
ends in error in create signature method , need help in this regard.
Error:
Parameter 0 is Request id of with out Digital signature file
Parameter 1 is employee id of approver
Parameter:0:99203256
Parameter:1:1414603
$$$$ start query fileinfo with callable statment
programName>>>>>>>>BTPOPORPXML
$$$$ Without digital Signature file Name $$$
$/inst_top/finprod/apps/FINPROD_CPNQERPAAPZP10/logs/appl/conc/out/BTPOPORPXML_99203256_1.PDF
PFX File Reading Start
PFX File Reading Ends
PFX File size is: 6460 Byte size is: 6460
Elements present
java.lang.NullPointerException
at
com.lowagie.text.pdf.PdfSignatureAppearance.getAppearance
(Unknown Source)
at
com.lowagie.text.pdf.PdfSignatureAppearance.preClose
(Unknown Source)
at
com.lowagie.text.pdf.PdfSignatureAppearance.preClose
(Unknown Source)
at com.lowagie.text.pdf.PdfStamper.close(Unknown
Source)
at
btvl.oracle.apps.po.digsig.BTVLDigSign.runProgram
(BTVLDigSign.java:151)
at oracle.apps.fnd.cp.request.Run.main
(Run.java:157)
Edited by: 999033 on May 16, 2013 7:20 PM

Hi Charls,
I have successfully implemented at our end in 11i. Pl.try at your end.
v_request_id := FND_REQUEST.SUBMIT_REQUEST (passed your arguments... );
COMMIT;
IF NVL( v_request_id , 0 ) = 0 THEN
DBMS_OUTPUT.PUT_LINE( 'Item Assignment to Organization Program Not Submitted');
p_status := 'FAILURE' ;
p_err_msg := 'ERROR RAISED AFTER SUBMITTING THE IMPORT ITEM ORG.ASSIGNMENT CONCURRENT REQUEST ... ' ;
ELSE
v_finished := FND_CONCURRENT.WAIT_FOR_REQUEST
request_id => v_request_id,
interval => 0,
max_wait => 0,
phase => v_phase,
status => v_status,
dev_phase => v_request_phase,
dev_status => v_request_status,
message => v_message
LOOP
EXIT WHEN ( UPPER(v_request_phase) = 'COMPLETE' OR v_phase = 'C');
END LOOP;
HTH
Sanjay

Multiple digital signatures from one person

I have a PDF form that has 10 pages, each page has a Signature field.
I want to put this form in the WorkSpace, and route it in a workflow process, eventually route it to the user who is supposed to sign it.
But I don't want him to sign 10 times (one for each page).
Is it possible to let him only sign the first page, and all the other 9 pages get applied with his signature automatically?
How to do that?
thanks

You could have a process that leverages the "Digital Signatures" functionality of LiveCycle. You could apply the signatures on the server side. You would need to make sure that the signer's digital certificate was imported into the "Credentials" section of the trust store. LiveCycle needs access to the P12 or PFX file to create the signature.
I am not aware of any way to automate the signature process on the client side.
Regards
Steve

Digital Signatures and Certificates

I use Adobe Profession 8,
I installed a certifcate on my computer (certnew.cer) which has my informations and stuff on it.. ok so far. We have our own certificate server.
When i try to apply a signature on a pdf i created, my name is not on the list (Adobe). The only options i have is to create one or import one (.pfx, .p12). I dont mind importing one but it cant import .cer files.
Testing on another computer, after installing his certificate, his name was shown on the list in adobe.
Is there something that I can be doing wrong?
Is there are way to import a .cer file instead of a .pfx, .p12?
Is there an easy method of converting a .cer to .pfx (.p12) apart from using Windows Drivers Kit?

A cer file doesn't have a private key. It contains a public key and other certificate data. Signing requires a digital ID which includes both the cert/public key and the private key, and these are usually stored in pfx/p12 files.
Self-signed digital IDs are inherently less secure, but they can be made more secure if the recipient verifies the cert "thumbprints" that the signer shares ahead of time. . .
Comprehensive digital signature instructions exist in this doc:
http://www.adobe.com/devnet/acrobat/pdfs/digsig_user_guide.pdf
See also other security related docs on:
http://www.adobe.com/devnet/acrobat/security.html
ben

Digital Signatures with Graphics - Possible?

Can a .jpg be converted to .pdf/.pfx to merge into the .pfx for a combined graphic & digital signature?
Thanks, Teresea

Hi,
Is the digital signature in the form of a bmp or tiff ? If yes, then you can have a BDC of SE78(Graphics Management ), which will upload the graphics to the SAP system & then you can use it in your smart form or sap script dynamically.
Regards,
KK

Add Digital Signature Using C# and Acrobat SDK

Hi everybody!
Please, how can I digitally sign PDF documents using Acrobat Professional 8 API and C# language?
I know that I need use JavaScript APIs (IAC) but I can't find anything really helpful in the Acrobat SDK Documentation. Could anyone post a sample of how use javascript manipulation inside C# (Framework 2.0), or give me a direction?
Thank in advance!

Hi Felipe,
when i am signing the document.
I believe i am missing something in my code. After executing the code to sign, when i open it i get "The following signature fields are not signed".
Please let me know where i m doing wrong?
Here is my VB.NET Code
Dim gapp As Acrobat.CAcroApp
Dim gpddoc As Acrobat.CAcroPDDoc
Dim jso As Object
gapp = CreateObject("acroexch.app")
gpddoc = CreateObject("acroexch.pddoc")
If gpddoc.Open("C:\Test1.pdf") Then
jso = gpddoc.GetJSObject()
jso.SetUserPassword("'testpassword12'")
'jso.ShowMyMessage("SetUserDigitalIDPath")
jso.SetUserDigitalIDPath("'c:\\DrTest.pfx'")
jso.app.execMenuItem("ADBESDK:AddSignature")
jso.AddSignature(jso)
gapp.Show()
and here is the javascript
// password to use the digital signature
var sigUserPwd = "UNKNOWN";
// to test the sample without user input, specify:
// var sigUserPwd = "testpassword";
// path to the digital signature file
var sigDigitalIDPath = "UNKNOWN";
// to test the sample without user input, specify:
//var sigDigitalIDPath = "/C/DrTest.pfx";
// other variables the user can modify
var sigHandlerName = "Adobe.PPKLite";
var sigFieldname = "sdkSignatureTest";
var sigReason = "I want to test my digital signature program.";
var sigLocation = "San Jose, CA";
var sigContactInfo = "[email protected]";
/* Add a menu item for AddSignature */
app.addMenuItem( { cName: "ADBESDK:AddSignature", cUser: "Add My Signature", cParent: "Advanced",
cEnable: "event.rc = (event.target != null);",
cExec: "AddSignature(event.target)" });
// main function
AddSignature=app.trustedFunction(function (doc)
app.beginPriv(); // explicitly raise privilege
// if sigDigitalIDPath is not spcified, ask for user input
if(sigDigitalIDPath == "UNKNOWN"){
var cResponse = app.response({
cQuestion: "Input your digital ID path:",
cTitle: "Digital Signature",
cDefault: "/C/DrTest.pfx",
if ( cResponse == null) {
app.alert("No input.");
return;
else
SetUserDigitalIDPath(cResponse);
// if sigUserPwd is not spcified, ask for user input
if(sigUserPwd == "UNKNOWN"){
var cResponse = app.response({
cQuestion: "Input your password:",
cTitle: "Digital Signature",
cDefault: "testpassword",
if ( cResponse == null) {
app.alert("No input.");
return
else
SetUserPassword(cResponse);
// create a new signature field
var signatureField = AddSignatureField(doc);
// sign it
if(signatureField) Sign(signatureField, sigHandlerName);
app.endPriv();
// create a signature field in the upper left conner with name of sigFieldname
function AddSignatureField(doc)
var inch=72;
var aRect = doc.getPageBox( {nPage: 0} );
aRect[0] += 0.5*inch; // from upper left hand corner of page.
aRect[2] = aRect[0]+2*inch; // Make it 2 inch wide
aRect[1] -= 0.5*inch;
aRect[3] = aRect[1] - 0.5*inch; // and 0.5 inch high
var sigField = null;
try {
sigField = doc.addField(sigFieldname, "signature", 0, aRect );
} catch (e) {
console.println("An error occurred: " + e);
return sigField;
// define the Sign function as a privileged function
Sign = app.trustedFunction (
function( sigField, DigSigHandlerName )
try {
app.beginPriv();
var myEngine = security.getHandler(DigSigHandlerName);
myEngine.login( sigUserPwd, sigDigitalIDPath);
sigField.signatureSign({oSig: myEngine,
bUI: false,
oInfo: { password: sigUserPwd,
reason: sigReason,
location: sigLocation,
contactInfo: sigContactInfo}
app.endPriv
} catch (e) {
console.println("An error occurred: " + e);
// set a correct password for using the signature, so you can quietly sign a doc.
function SetUserPassword(pwd)
sigUserPwd = pwd;
// set path to the digital signature file
function SetUserDigitalIDPath(idPath)
sigDigitalIDPath = idPath;
Sumit

Transfer of Digital Signature Files

I've transferred my copy of Acrobat 7.1 Standard to another computer and I want to copy over my digital signature file. I can't find the file on my old computer. Could someone tell me how I can move a signature file to another computer?
Jerry Judd

Assuming you are talking about your digital ID, you can search for files with suffix .pfx or .p12. These are the files types that contain you digital ID certificate. If you find the desired file, move it to you new computer. Then import using Advanced > Security Settings and push the Add ID (+) button.
If you are talking about signature appearance files that is different. It's probably easier to recreate on your new computer, depending on what it's setup is (usually, it is just a matter of clicking some checkboxes to configure). Edit > Preferences > security panel.

2nd password on digital signature file

I am deploying Acrobat Standard 9 in a regulated environment (21 CFR Part 11) and need to have the digital signature file require a second password. While I know this is possible it does not seem to be a feature activated upon a default install. How do I turn on this feature?

Hi Madam Curie,
Part of the problem is the phraseology is incorrect so I'll start with some basic so we are all speaking the same language.
One thing to realize is you can digitally sign any piece of electronic data just like you can use you pen to sign any physical object such as a piece of paper, some one's cast, a wall, or you photo for your fans. In the electronic world you can sign your e-mail, your Word document, or as far as I'm concerned (realizing that I'm biased ) the most important thin, a PDF file.
A digital ID in the electronic world is analogous to a pen in the physical world. It is what you use to create a digital signature. A digital ID is comprised of three pieces; a public key, a corresponding private key, and a block of text with some identifying information. When the digital IS is initially created the public-key is signed with a private key. If the public key is signed with it's corresponding private key the digital ID is know as a "self-signed" digital ID. If it is signed by a different private key, the owner of that key becomes the issuer of the digital ID that it signs.
A digital signature in the electronic world is analogous to a wet ink signature. You use a digital ID to create a digital signature.
The next thing to realize is a digital signature is cryptographic blob of data and is not something one would normally see. If you are geeky enough you can decode one and view it in a special purpose viewer, but for the most part nobody ever sees the signature contents.
When you do sign a PDF file you can either create a visible signature or an invisible signature. In the case of the later, all you do is write the digitally signed blob of data into the PDF file and don't bother creating any visual representation. It's the visual signature that throws most people for a loop, but the key thing to understand is the visual appearance you see in the signature field (which is nothing more than a special purpose text field) is NOT the signature, it is just a representation of the actual signature which you never see.
The visual appearance is comprised of three things, a background (which by default is the PDF trefoil logo) and a foreground that is divided into two halves, text and a graphic.
Acrobat (and when I say Acrobat I really mean both Acrobat and Reader) will let you create a digital signature with any digital ID that you have that is within it validity period, and includes digital signature as a key usage. The digital ID can be saved in several locations that Acrobat has access to. One is file on disk. The file would have the .p12 or .pfx file extension and you would have to add the file to Acrobat using the Security Setting dialog. Another place the digital ID can reside is the Windows Certificate Store of the Mac Keychain. If you've installed the digital ID into one of the OS based storage locations Acrobat will find it without you having to do anything else. Digital IDs can also reside on hardware devices such as a token (they look like a flash drive) or a smart card (they look like a credit card with a gold chip).
So, if you have a digital ID, but Acrobat doesn't know about it need to search you computer for a *.p12 or *.pfx, find out where the file is, than use the Add ID function in the Security Settings dialog to attache the file.
Finally, after you find and attache the file you can modify the Password Timeout to require that a password is always required. Or, if you want to import the file into the Windows Certificate Store you can use the High Assurance option to require a password otherwise Windows will just assume that if you can log in to your desktop then that's good enough.
Steve

How to create table and digital signature ?

Hello,
I would like to ask two questions regarding SAP interactive forms by adobe.
1st question:
How to create table in interactive form?
Table that i can add rows and column and will show it in the form.
Example the rows and columns that i want:
ID: Name: DOB:
1 Jack 01/02/80
2 Ivy 10/12/82
2nd question:
How to create digital signature ?
I'm creating a adobe forms which need employee to sign on the form. I use signature field at my form. However, i don't know how to create a new signature and insert in the signature field.
Can any one provide the answer with step by step guide?
Thanks a lot

Hi Pradeepa,
you said you have your digital signature in
BMP format? That means Bitmap and would mean you are actually talking about a picture! THIS IS NOT A DIGITAL SIGNATURE!
A digital signature is a cryptographic key (aka public key cryptography) that is used to digitally sign a document, or at least a hash value derived from the document. Digitally signing means, applying the key in a well defined way (this is the algorithm used) to the document or hash value. You do this with your private key and the receiver of the document can then use your public key (which you can distribute in any way you want, even unsecure) to unencrypt the hash value. If this succeeds the receiver knows that the document was signed by you.
This is because both keys are mathematically related in such a way, that what one key encrypted can only be decrypted by the corresponding other key and by no other key. You even can´t decrypt a document with the same key it was encrypted with, this is the difference to symmetric encryption - please have a look at help.sap.com and search for digital signatures.
The named formats (afs, pfx and p12) are ways of coding the key, together with information about your person, such as email address and information about validity of the key into a
certificate. This type of certificate is then called a x.509 certificate and is the same you might have seen when connecting to a secure webserver such as the one of your bank website.
Signing a form with such a certificate provides for mathematically and therefore business related proove of a users identity.
In case you are really using a bitmap, this cannot work and would not serve you any good.
Ask yourself this question: I want to make sure that the form was signed by a specific person. How can I make sure that the signing can only be done by the person pretending to have done so?
A bitmap contains a picture, probably of the persons handwritten signature. How can I make sure that this picture was NOT recreated in MS Paint or Photoshop by someone else?
The answer is:
you can't! Therefore this way of prooving identity is useless.
You need to provide your users with digital signatures, put these in the certificate cache of your IE. If a user then clicks on the signing field, the private key is used to digitally sign the form - create a hash value of the form and encrypt it with the private key. After the form is send back to the server or you, you use the corresponding public key to decrypt the hash value and, as said above, if this succeeds, identity of the signer is proven.
THIS IS AN OVERSIMPLIFICATION! You might want to take a look at Adobe Reader Credentials.
Regards,
 Christian

What is the certification authority, the third party that can confirm the digital signature?

I created a nice electronic signature, that I now regularly use and add to every document. I was told that a signature needs to be issued by a verification authority, a third party that is able to verify the signature, certificate. I created a free certificate at CAcert.org and tried to combine it with the adobe signature certificate file, but it doesnt support .cer and .crt files. Is the Adobe the certification authority in this case since i created signature in the Adobe software? Its not a big deal, I just want everything to be correct since I use the signature in official documents now (instead of scanning a signed document) ... Thanks for any info, ideas or help.
Jacob

Each Digital Certificate has a pair of private and public keys used for encryption/decryption. The private key belongs to the certificate owner and should be kept secret. It is protected by a password. The public key can be used by anyone. Digital certificates come in two flavors: one that contains both private and public key and one that contains only public key.
When you create a digital signature the signing process uses the private key to encrypt the signed content digest and the public key is used to decrypt it. So, only you can encrypt signed content with your certificate that has both private and private keys and anyone can decrypt it to validate the signature using certificate that has only public key. Usually, this certificate with the public key only is embedded in the digital signature, so that anyone can use it for decryption.
The .cer certificate contains only public key. Certificates with both private and public keys usually have extensions .pfx or .p12. You need one of those to sign.
CAcert.org issues only public key certificates. so you cannot use its certificates for digital signing.
Adobe is not a general purpose certification authority. It issues some certificates for internal use only.
Acrobat has a feature that allows you to create so-called self-signed certificates with both private and public keys but these certificates can be used only in a limited way. They do not provide the means to authenticate the real certificate owner nor revoke a certificate if it is stolen.
Generally, a digital signature asserts three main features:
1. Document integrity (document has not been changes since it had been signed),
2. Authentication (the signer is indeed what the certificate says)
3. Non-repudiation (the signature author cannot deny that he signed it: this is achieved via certificate revocation mechanism).
A self-signed certificate (of the type that Acrobat produces) can be used only for #1. It cannot be used for ##2 and 3. The latter two come only when a certificate (with private key) is issued by a reputable Certificate Authority which is trusted (like VeriSign, Symantec, etc.).

How to upload the Form 16 with digital signature to ESS?

Hi Experts,
We are not using .pfx format for digital signature. For this reason we download Form-16’s from SAP & get it signed by using 3rd party tool. Now we want the form 16 to upload in ESS. Please let me know the process to upload Form 16 to ESS.
Thanks in advance.
Regards,
Triven Kumar Reddy.

Form 16 Configuration for ESS - ERP Human Capital Management - SCN Wiki
1589254 - Form 16 central note for ADS configuration
see the PDF Form 16 (print preview) in PC00_M40_F16 transaction in ECC (R/3)

Digital signature on Form 16 - PDFManipulation Module error

We are trying to implement digital signature on form 16 and have followed instructions in note # 1168740. One thing that remains is the installation of 'Trusted Anchors'. The procedure for installation of trusted anchors is to copy the Trusted Anchor file (<filename>.cer) to the /usr/sap/<SAPSID>/SYS/global/AdobeDocumentServices/
TrustManagerService/trust/certificates directory.
We have installed ReaderRights and ServerSignature. All we have is a '.PFX' file that contains the digital signature of the signing authority. This is issued by the authorized Certifying Authority (CA).
Q. What is '.CER' file and where do we get this file from.
When testing the server side signature test program - FP_PDF_TEST_07, we get the following error:
ERROR CODE : 201,501
ERROR MESSAGE :
Processing exception during a "Sign" operation.#Request start time: Fri May 07 14:46:36 IST 2010#com.adobe.ads.exception.FailedCreationExcepti
ADS: com.adobe.ads.exception.FailedCreationException: Failed to create a new instance of PDFManipulation Module, please make sure PDFManipulat
Any tips on how to proceed further will be highly appreciated.
Thanks

Shyam,
I have a similar issues and looking for the <filename>.cer file to install the Trusted Anchor to validate digital signature in Adobe Interactive Forms.
Did you resolve this issue?
Can you please let me know where to get this file?
Thanks
Sundar

Linksys Routers not accessable via HTTPS and This certificate has an invalid digital signature.

please help cannot logon to my router.
how to install custome certificate with ssh?
This is happing when certificate give me error: "This certificate has an invalid digital signature."
Why not imlement update with ease import of custome certificate?
I send many request to support but zero result.
ig you google it this problem you will see that only cisco goods have this problem and no one care about that according cisco support. why? I will never buy cisco product.

I try different browsers and they all have certificate notice alert.
New IE on win8 by default not allow to enter secure page with expire certificates.
I hope that cisco will make new firmeware with functionality to add costume certificate pfx for example.
Cisco support lower encryption type. Every new windows encrase cryptograpgi that IE support by default. Look IE about to see type 64 or 128 or 256…
On xp will work good, but we are now in era of win 8 with IE that support by default 128 or 256 depending home or server version.

Digital Signatures (.pfx)

Similar Messages

Maybe you are looking for