Digital signed File Upload to XI (PI)

Hello we need to provide high End-to-End Data Intregity.
We upload files to XI via FileAdapter, put them to the KM and provide them for download.
Can the XI (PI) sign these Files? Can we use the XI (PI) as CA (Certification Authority)?
What are the Best Practise for us?
It ist very important to ensure the Data Integrity.
Please help.
Edited by: Norman Trapp on Aug 7, 2008 1:41 PM

I am not aware of a optin where file adapters can be used to Sign Files. Digital Signatures are normally used for Non Repudiation purposes and File adapter cannot be used for this.
With File adapters you can ensure Secure Data and Connection layer by using FTPS - FTP over SSL but you definitely will not be able to sign the file's content.
Are you using the file adapter for sure? What is the adapter you are using to integrae with KM?
If you are using SOAP, HTTP adapter or any of the b2b adapters then this is possible, but not with the file adapter of XI.
Can you explain further if possible if the answer is off track?
Regards,
Bhavesh

Similar Messages

Is there a way to optimize a digitally-signed PDF?

Our HR department gets resumes from applicants and emails these resumes to school principals. They optimize these pdf's so that they are able to be emailed without going over the size limit of the users' email boxes. They are starting to get a lot of digitally signed pdf's and when they try to optimize them they are getting a message saying that digitally signed files cannot be reduced. These files end up being too large for emails. Is there any way around this?
Any help would be appreciated.
Thanks!

Not without invalidating the signature, you may make changes to the PDF and any change is a change.

Files encrypted and digital signed with cFolders

Dear all,
Currently I'm involved on a PPS project with cFolders. This project has legal requirements that consist in implementing encryption and digital signature in files which will be uploaded to cFolders. I've been searching on SAP Help, SDN and Service Marketplace about APIs to work with cFolders with encryption and digital signatures, but I didn't find related documents. It seems there is no documentation regarding such scenarios...
Anyone has experience in cFolders with files encrypted and digital signed?
Thanks in advance & regards,
Ricardo.

Hi Federico
If I understood your solution you are signing your documents in a Webservice provided from a CA. For that youu2019ve created an RFC dest type G over ssl (https) and used the class CL_HTTP_CLIENT. So your requirement is only to sign documents, right?
Well my scenario seems a little bit different as Iu2019ve to encrypt the file and also sign it. The signature is done on useru2019s laptop trough a smartcard (hardware device connected via USB that reads the chip the certificate assigned to our identity card) and cannot be signed from other entity than the user itself.
Did you explore the PGP alternative? cFolders supports this kind of files (*.pgp). The PGP (Pretty Good Privacy) is a popular program used to encrypt and decrypt files, e-mails, etc.
Today I installed a trial version of a PGP tool. I tested the encryption/signature with files on my desktop and it works fine. I tested a Public Key scenario where the owner publishes his PK in cFolders and the requester gets this PK in cFolders as well. The requester now can encrypt documents and upload them to cFolders with the public key provided by the owner; the owner itself has the private key to open the encrypted file (extension .pgp) after upload. But over the encrypted file the requester must sign it with his private key (another certificate) provided by a CA and here starts the second challenge...
In cFolders after the file upload the system should gets the requester digital signature and sends it to CA for validation, only after that we know if the requester is a trusted partner or not. To do this we are thinking to use a Webservice provided by the CA, however I don't know how to extract/get the signature in the file encrypted/signed from PGP and uploaded to cFolders.
Do you have any idea?
Thanks & regards,
Ricardo.

How to automate digital signing PDF Files in batch

I am trying to find a way to automate as much as possible the placing of a digital signature on a set of PDF documents. We have Adobe Acrobat Pro 8.1 and the machine has MS Office 2003 with Vista Business. Here's a scenario: A set of documents exist in a TO-BE-SIGNED folder, each unsigned. The user uses MS Access 2003 form with a button with VBA code to open and show the first document in the folder. The AcroExch.App, AcroExch.AVDoc, and AcroApp.Show APIs are used to do this. I found code on the internet to do that. Rather than having my client now have to go through all the manual steps to place a digital signature on the document, I want to streamline it to a single click if possible. Right now he has to click Advanced > Sign and Certify > Place Signature > then click and drag > then enter his password > then click sign > then save and close the doc. Can all this be automated? An added bonus would be automatically saving or moving the signed doc to a different folder when it is signed.
I have created a stamp that allows me to add a stamp with just two clicks. Can such be done to add a digital signature? Is it possible to add a button to the toolbar to do this? Can it be done in Access VBA using some Acrobat API calls? Another feature I want to include is moving quickly from one document to the next in the TO-BE-SIGNED folder. Like the arrow buttons take you from page to page, can a button be added to the Acrobat toolbar to take you from doc to doc in a particular folder? Or can that be done using VBA and some Acrobat API calls? To maintain the security of the password protection and yet cut down on clicks and keystrokes, I would like to input the password just once at the beginning of the session and have it remembered or applied to all the docs that get signed as long as that session is open.
I've found some software that purports to do much of the above, but they are all very expensive and assume a big business with big bucks. If anyone knows of inexpensive software that will REALLY do this, I'm open to that as well, though I'd like to control the process myself if possible. I consider myself a beginner with Acrobat and using API calls and would appreciate any help anyone can give. Is the above clear and even possible?
PS: I'm new to this site and using SDK. I posted this under Security (thinking digital signatures) and was asked to post it here, which I'm glad to do.
Thanks much!

Our workflow is such that on infrequent occasions, we have a digitally signed PDF file and the doctor wants to append a scanned note to it. In the past, we could do this, but not now. In the past, when we added the scanned doc, we received a message saying that the doc is already signed and asking if we want to overrwrite the doc. If we respond Yes, then Acrobat would allow it and the signature would indicate that the original part of the document was not modified, but that something had been changed--namely, a doc had been appended. The signature indicated that something had changed since it was added, but it still allowed the append. The signature would have an exclamation point in a yellow triangle indicating the doc had been updated since signed. For our purposes, that was okay because we know what the change is based on the original doc and we know what is appended. Now, however, we cannot append at all. The only thing that is different that I know of is that the doc was signed with software that is not Adobe Acrobat, even though the other software uses an Adobe Acrobat self-created digital signature.
I hope I've explained that clearly enough.
Thanks for your help.

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign, why?

hi Phillip
i am not sure what you mean
I downloaded the ifilter and installed it
then configured everything as shown in the pdf file
I tried indexing from scratch exactly as i did successfully in the other computer
and got some errors in the log file
i checked the sql server log and the event viewer logs and got :
Error '0x80004005' occurred during full-text index population for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'), full-text key value 0x0000027A. Attempt will be made to reindex it.
The component 'PDFFilter.dll' reported error while indexing. Component path 'C:\Program Files\Adobe\Adobe PDF iFilter 9 for 64-bit platforms\bin\PDFFilter.dll'.
Informational: Full-text retry pass of Full population completed for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Number of retry documents processed: 1. Number of documents failed: 1.
Changing the status to MERGE for full-text catalog "Pirsumim_ext_catalog_ck" (5) in database "Pirsumim_ext_ck" (14). This is an informational message only. No user action is required.
Informational: Full-text Auto population initialized for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Population sub-tasks: 1
the same dll worked fine in another computer...
how can i see more details what is wrong with this dll ?
meidad

Is it possible to digitally sign a jar file that will be used to install CF in WebSphere?

I am currently working for a contractor for the DoD. We are maintaining a project that uses CF installed as an application through WebSphere. We are currently going through a security checklist and being asked to provide evidence that the CF application has a digital signature. From what we can gather they are looking to see that the jar file installed into WebSphere is digitally signed. We have reached out to IBM, and have received a response that digital signatures are recognized by WebSphere.
Unfortunately, it seems that those that are looking for the evidence do not know much more than what the checklist requirement states. They cannot provide more details or expand on what they need. Any assistance or advice in this matter would be appreciated.
Thanks,

Masterkeedu wrote: !! It worked.
Congratulations. :-)
Masterkeedu wrote: So it's not certified, but is signed.
So as I understand this, it means the end-user has no way to know it was me that truly signed it. But relies on their common sense I suppose.
That is correct. The CA has verified, and is certifying, that you are who you claim to be. If you or I use a 'self signed' certificate, it does not carry the same level of trust. As you might understand already, the dialogs are different between the two certificate types, and some users cannot accept trusted code from an unverified (self-signed) certificate.
I have been meaning to write a page on the differences between the two certificates. It is well worth looking into getting a cert. from a CA.
There was a stage when one of the major CAs were offering 'freemail' certificates that came emblazoned not with your name, but 'free mail' itself. I did not like them because of that, and continue to use a self-signed certificate.

Cannot save file after it is digitally signed

Hello, I work for the IT Dept at my company and one of our employees is having trouble saving PDF files after digitally signing them. He received the error message:
The document could not be saved. Can not save to this file name. Please save the document with a different name or in a different folder.
After each signature, Acrobat asks to save the file, which he does. The strange thing is that he may sign the same document 4 times, and the error might only occur on the last attempt to save. It will successfully perform it the first three times. I cannot find a pattern to the errors. The times he gets the error messages don't necessarily all happen on the last attempt, it might be the first or the middle. I have tried updating the program and searching around through the options to find any setting which may be applicable, but have had no luck. I have been trying to solve this problem for a few days now and I can't make any progress.
Does anyone eles have this problem or have a solution?

I don't have an answer as I have never seen the problem. However, for those that might be able to answer the question they will likely want to replicate the problem. It would be helpful to know what OS (and if 32 or 64-bit) and what version (include subversion) of Acrobat -- latest 10.1.4. If you can create a sample document that has the problem, then folks may have an easier time to repeat it. A document can be posted either at one of your sites, Acrobat.com, or maybe dropbox.

Digitally sign multiple pdf files

How to digitally sign multiple pdf files with adobe acrobat XI?

Are you trying to apply certificate-based encryption or add a signature to a PDF form field?
The first one is easy with Acrobat Pro; just create a new Action with the encryption task set to your requirements, then run the Action against a folder of files.

Where should the Green Tick get displayed in digitally signed pdf files in whom the Signature has been validated ?

I have Windows 7 & Adobe 11 installed on my P.C (Apart from other Software) . Recently I downloaded Digitally Signed .pdf files & validated the Signature with Trust Certificates . However , the Green Tick Mark is coming on the left-hand side of a blue panel situated in-between the menu bar & the document . Shouldn't it be coming at the bottom right side of the document (Just above the name of the signatory) ? Is there anyway I can get the green tick to display at the bottom right side of the document or is this just the way the green tick gets displayed in current versions of adobe reader ?
This is the way it gets displayed on the top - left portion of the screen :
However , it does not get displayed in the below manner :

First of all, you need an app on the iPad that can read those files that you want to transfer. Adobe Reader and iBooks are two free apps that will read PDF files. Adobe Reader is much more robust than iBooks as it offers so many more features like renaming files, creating folders, annotating, highlights, etc.
Download Adobe Reader in the App Store. Then read this about file sharing with iTunes.
iOS: About File Sharing - Support - Apple
There are other ways to get files to the iPad, like email, DropBox and some other apps that let you mount your iPad like a flash drive.
This should be helpful as well.
iTunes 11 for Mac: Set up syncing for iPod, iPhone, or iPad

Have been using successfully Acrobat 8 Standard, version 8.3.1 for years. Suddenly can not digitally sign anything because software can not find "existing digital ID file?

Have been using successfully Acrobat 8 Standard, version 8.3.1 for years. Suddenly can not digitally sign anything because software can not find "existing digital ID file?

Are you still using Acrobat 8? If not read further.
All Acrobat versions prior to 11.0.07 had a security flaw that they allows signing with certificates that had "Extended Key Usage" (EKU) restricted to certain certificate uses and those did not include document signing. Most frequently those were certificates with "Client Auth" or "Server Auth" in EKU. Acrobat/Reader 11.0.07 fixed this problem, which also means that while previous versions accepted such certificates for signing 11.0.07 and later do not.

How do I digitally sign projector files?

I am currently selling apps in Flash projector .exe format. How can I install a certificate from Verisign or Thawte?
Roger

I want to access the file system of the client using a
servlet which shall be digitally signed.
You cannot do this. It is technically impossible. You are referring to an Applet. There are two ways to get the Applet to read the files of the client system.
1. Have the client open up security by editing the java.policy file, which is dangerous.
2. Digitally Sign the Applet.
How do I do it.Please send the code.
Write the code yourself. Sorry to say, but nobody here is going to program your code for you. That is, unless you pay them money!

Digitally sign a jar file for distribution?

I recently got a jar of mine hosted for client use though a web page.
The problem is that the jar needs to access the internet for several functions. JWS prompts the user for security reasons every time it makes a connection to a new url endpoint. Since one operation alone can hit 56 url's i thought this could be a bit of a hassle to the users.
The solution, as I understand it to be, is to digitally sign the jar file, so the user is prompted once on download.
I found a site ascertia which offers free certificates, but for the life of me I canb not get this to work.n I have seen keytool generate numerous errors, none of which mean anything to me. (too long >59, cant read chain from reply, invalid cert)
Does someone know a clear and thorough tutorial on digital code signing and certs? Or a CA that provides certs for free, and has some instructions to go along?
Thanks so much.
The step i have trouble on is turning the CSR into a cert, and importing the returned cert back into the keystore.

Masterkeedu wrote: !! It worked.
Congratulations. :-)
Masterkeedu wrote: So it's not certified, but is signed.
So as I understand this, it means the end-user has no way to know it was me that truly signed it. But relies on their common sense I suppose.
That is correct. The CA has verified, and is certifying, that you are who you claim to be. If you or I use a 'self signed' certificate, it does not carry the same level of trust. As you might understand already, the dialogs are different between the two certificate types, and some users cannot accept trusted code from an unverified (self-signed) certificate.
I have been meaning to write a page on the differences between the two certificates. It is well worth looking into getting a cert. from a CA.
There was a stage when one of the major CAs were offering 'freemail' certificates that came emblazoned not with your name, but 'free mail' itself. I did not like them because of that, and continue to use a self-signed certificate.

How can i digital sign a file using JAVA?

and how can i verify the digitially signed file was not altered by anyone using JAVA?
please provide me with the simpliest way to do this.
thanks a lot.

I have no idea but you might want to take a look at :
http://java.sun.com/j2se/1.5.0/docs/guide/security/index.html
hth

Downloading Signed files

Hi,
I have a web application running. It has a download link for downloading a file. My requirement is to download this file without asking the user where to download. This file is kind of an executable. I also want this file to execute after download. This executable will generate some binary files. After the creation, I want these files to be uploaded back to the server. All this should happen on a single click on the website.
I know this will be kind of a force download and execute and will be a security threat.
To allow this, I am thinking of signing my executable file with some certificate, so that when the user download this executable for the first time, he will shown kind of a warning dialog (as shown in case of Java Web Start). For future downloads, this warning dialog should not be shown. Basically I am thinking of providing this feature as Java Web Start provides.
Is this possible?
If yes, then how to execute this executable once download and how to upload the binaries back to the server.
Thanks,
Charanjeet

Originally posted by: birsan.nospam.ca.ibm.com
Check the following newsgroup posting: "update manager isn't working through
https" from last week, it may help.
-Dorian
"Rainer Schmitz" <[email protected]> wrote in message
news:1054900032.209713@miraculix...
> We are providing some digitally signed features at an update site.
> When downloading the files using update manager the digital signature is
> displayed but the certificate is not recognized. The message displayed is:
>
> "The certificates used to authenticate this feature are not recognized.
The
> provider of this feature cannot be verified."
>
> I tried using the eclipse startup parameters -keyring and -password, but
> eclipse still does not recognize the certificate.
>
> Any solutions?
>
> Cheers,
> Rainer
>

Novell File Upload extension not Installing

I am trying to install the Novell File Upload extension so I can upload my PE file. It will not let me install the plugin in IE or Firefox. I have tried Firefox 22 and IE 8. I have tried from an XP, Win7 and 2003 server. I have tried all of the Active X switches in IE and I have tried the adding the about:config entries in Firefox.
Has anyone gotten this to work? To be honest this is the first time I have tried to get it to work so I can not say it was working before I updated. I went from 11.2.1 mu2 to 11.2.4.

Originally Posted by spond
Melnikok,
check to see if the file is signed - it should be (mine is, for
example)
Shaun Pond
There is no Digital Signature tab for the .cab file or the .dll's inside the .cab file. I have only checked one of my primary servers. I will check the others. What would my next step be if none of them are signed?

Digital signed File Upload to XI (PI)

Similar Messages

Maybe you are looking for