Problem showing certificate properties from signed PDFs

I'm signing two PDF files with two distinct signatures.
When performing the following operation in Adobe Acrobat Reader 8 we obtain different results:
Signatures, right button on top of "Signed By ...", Show Signature Properties, Show Certificate
With one of the PDFs that's possible and we can see the certificate properties, with the other we cannot see the properties of the certificate and Acrobat Reader crashes.
The main differences between the certificates are:
Certificate with good results:
Basic Constraints: "Subject Type = End Entity
Path Length = None Constraint "
Key Usage: Digital Signature, Non-Repudiation, Key Encipherment, Date Encipherment, Key Agreement (f8)
Certificate with bad results:
Basic Constraints: "Subject Type = End Entity
Path Length Constraint = None "(Critical X.509 Version 3 extension)
Key Usage: Digital Signature, Key Encipherment, Encipherment Date (b0 00) (Critical X.509 Version 3 extension)
Is Adobe Acrobat Reader capable of obtainning a signature property that has Critical Extensions?
Thanks for any help.

Send me the file to [email protected], I'll try to have a look at my environment
Tal
www.arx.com

Similar Messages

A problem with copying text from english pdf to a word file

i have a problem with copying text from english pdf to a word file. the english text of pdf turns to be unknown signs when i copy them to word file .
i illustrated what i mean in the picture i attached . note that i have adobe acrobat reader 9 . so please help cause i need to copy text to translate it .

Is this an e-book? Does it allow for copying? It is possible that the pdf file is a scan of a book?

Hi guys. i have some problem with a link from a pdf on-line,when i click on it,the page adds a "%" at the and of the link and says "page not found" because of it

Hi guys. i have some problem with a link from a pdf on-line,when i click on it,the page adds a "%" at the and of the link and says "page not found" because of it.
This happens only when a load my pdf file on my server, because if i click on the link when the file is on my iPad, the page opens without problem.
Any help please?
thanx

the % sign is often used when there's a space in a name. HTML doesn't like spaces so it fills them with % or %20
try, on the end of that link, see if there's a space built into the page or the link when the page was made
On the web address you may be able to 'backspace' at the end and erase that space to get the address, but whomever made the page possibly put a mistake in the link

Problem Printing document properties from Word to PDF

Hello all,
This is wierd, I need to print from MS Word doc 2002 SP2 to PDF version 9.3.4. When I do so, I need to pass the document properties from the word file to the PDF such as author, subject, title, etc. What is strainge is when i click the pdf button in word they do pass over but when I go to >>File>>print and select PDF they do not, and yes I did select the "Add document information" check box in the Adobe PDF settings dialog. I need to print this because I am doing a batch print process that requires it to be printed.
HELP.

Hello all,
This is wierd, I need to print from MS Word doc 2002 SP2 to PDF version 9.3.4. When I do so, I need to pass the document properties from the word file to the PDF such as author, subject, title, etc. What is strainge is when i click the pdf button in word they do pass over but when I go to >>File>>print and select PDF they do not, and yes I did select the "Add document information" check box in the Adobe PDF settings dialog. I need to print this because I am doing a batch print process that requires it to be printed.
HELP.

How to show Certificate Content from IE

Hi,
how to show Certificate Content Window from IE. I dont like to write it by myself;).
Does anybody know if its posible?
Regards

Using Firefox, simply click the padlock.
Suspect IE is much the same.

Free S/MIME certificate to digitally sign .pdf with Acrobat Reader

Good morning,
does anyone have idea where to obtain free S/MIME certificate for personal use and TRUSTED by Adobe Reader to digitally sign documents with own digital signature ? (Comodo S/MIME certificates released by GlobalTrust https://www.globaltrust.it/modulo_reg_smime.asp are free but aren't trusted automatically by Adobe)

Thanks Ben,
Unfortunately, that video is for acrobat X or above and I cant find the "save as reader extended" option in Acrobat Pro 9.
Can this be done from this version?
Thanks again
Matt

Is it possible to remove XML properties from a PDF form?

I created a PDF version of our employment application in Acrobat and Live Cycle Designer. I'm knew to Acrobat and somewhere along the line, must have turned on XML. Now I want to combine the application with another document but I can only do that as a package, which I have done, but it throws people off and I'd rather make one document that's not a package. I can't do that with an Adobe XML
Is it possible to turn off XML without recreating the document?

Not really without hacking the PDF form you created. If you still want to go that way and the form is NOT a dynamic form then find a utility like WindJack's PDF CanOpener. Make a copy of the document and open it in either Acrobat with PDF CanOpener plug-in and navigate through the PDF innards and find the XFA dictionary and delete it. Then Save the document. You will need to re-edit and arrange any JavaScript actions in the saved form because Acrobat and Designer use two different JS engines.
Ta
Rocky

Extracting data from a pdf form

Hi,
livecycle es2, workbench 9.0
I'm new to workbench and have a problem extracting data from a pdf form submitted to a short lived process.
I have set up the following very simple process :
default startpoint > ProcessForm > exportData > set value > set value > Write Document
The intention is to update the document and write it to disk. So far, each step works except for the 'export data' where I cannot get the pdf to extract to xml.
The Input to the 'export data' step is a variable (myDoc), Data Type: Document, created from the incoming PDF form.
If I write out myDoc it is an exact copy of the incoming document, so I guess the start and finish steps of of the process are OK.
The incoming (PDF) form I was given had no data schema, but I thought I could access the form data by exporting to an xml variable....
Service : FormDataIntegration / exportData
input (PDF Document)    variable : myDoc
output(Data extracted)     variable : myXMLData
Then in the next step (set value) access the xml element I am after ..
Mappings
Location: /process_data/@groupId      Expression: /process_data/myXMLData/xdp/datasets/data/form1/mainPage/groupId
This is did not work, so I got the incoming form, exported the form data to an xml file, and created a schema using Stylus Studio. I then imported that into the myXMLdata definition. ( BTW - Do I need to specify the root node after importing it ? )
Still not working !
Extra info : The XML view of my incoming form shows I have a minimal dataset definition- is this OK ??
<connectionSet xmlns="http://www.xfa.org/schema/xfa-connection-set/2.8/">
   <?originalXFAVersion http://www.xfa.org/schema/xfa-connection-set/2.4/?></connectionSet>
<xfa:datasets xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/">
   <xfa:data xfa:dataNode="dataGroup"/>
</xfa:datasets>
The schema created by stylus studio has none of the xfdf, xfa settings I have seen on other schemas - is this OK ?
Any help to get this fixed greatly appreciated
thanks
steve

hey thanks for the offer, but I am now sorted after I found a simple working example on line.
This is a similar process to the one I am working on, and is clearly described and easy to follow...
http://eslifeline.wordpress.com/2009/04/25/extracting-data-from-signed-pdf-using-livecycle -server/
girish bedekar - I thank you !

Exception while loading properties from an xml file

Hi all,
I've got a problem while loading properties from an XML file:
java.lang.ClassCastException: org.apache.xerces.dom.DeferredCommentImpl cannot be cast to org.w3c.dom.Element
ERROR - Cannot load properties from the specified file <./conf/login.prop> java.lang.ClassCastException: org.apache.xerces.dom.DeferredCommentImpl cannot be cast to org.w3c.dom.Element
     at java.util.XMLUtils.importProperties(XMLUtils.java:97)
     at java.util.XMLUtils.load(XMLUtils.java:69)
     at java.util.Properties.loadFromXML(Properties.java:852)
     at g2.utility.HRPMProperties.<init>(HRPMProperties.java:78)
     at g2.utility.HRPMProperties.getInstance(HRPMProperties.java:94)
     at g2.gui.workers.ApplicationSwingWorker.<init>(ApplicationSwingWorker.java:36)
     at g2.main.Main.main(Main.java:37)but this code worked before, and I've got the xerces and xercesImpl packages in the classpath, anyone can give me an hint on how to fix the problem?

Here there's the code that instantiates the HRPMProperties object loading the property file:
public class HRPMProperties extends Properties {
     * A reference to myself.
    protected static HRPMProperties mySelf = null;
     * The property file to which load the configuration.
    protected static String propertyFile = "./conf/login.prop";
      * A set of static strings used as keys in the properties file.
     public final static String DATABASE_URL = "database_url";
     public final static String DATABASE_USERNAME = "database_username";
     public final static String DATABASE_PASSWORD = "database_password";
     public final static String REAL_USERNAME = "real_username";
     public final static String REAL_PASSWORD = "real_password";
     public final static String PHANTOM_LOGIN = "login_thru_phantom_user";
     public final static String AUTOCONNECT = "autoconnect";
     public final static String TRANSLATION_FILE = "translation_file";
     * Builds up an empty properties map.
    protected HRPMProperties(){
     super();
     this.reload();
     * Builds up the property map from the specified input file. <B> The file must be in XML format</B>.
     * In case of exception and/or problems reading from the specified file, an empty property map is returned.
     * @param fileName the path and the name of the file with the XML representation of the properties.
    protected HRPMProperties(String fileName){
     super();
     try{
         this.loadFromXML(new FileInputStream(fileName));
     }catch(Exception e){
         Logger.error("Cannot load properties from the specified file <"+fileName+"> " + e);
         e.printStackTrace();
     * Provides an instance of the property class loaded from the default configuration file.
     * @return the property instance
    public static final HRPMProperties getInstance(){
     if( HRPMProperties.mySelf != null )
         return HRPMProperties.mySelf;
     else{
         HRPMProperties.mySelf = new HRPMProperties(HRPMProperties.propertyFile);
         return HRPMProperties.mySelf;
}The constructor is the one triggering the exception, so there's a problem loading the XML property file.

Running executables from a pdf

Hi,
recent changes to the adobe reader security policy have lead to problems opening executable files from a pdf. After doing some research i have been able to enable their access by altering the registry value of the built in permissions list as this reverts reaaders functionality to simply prompt to open if trusted, ie ive open the machine to 'social engineering' attacks which is not an issue for me. I tried alternatives to this but to no avail.
I was under the assumption that if i added the location of the pdf to the priveliged locations list that this would allow the workflow to proceed as it used to previously. This is not the case i see a prompt saying that this file is set to be launched by a pdf, this is currently dissallowed by your system administrator. This prompt occurs for me regardless of wether or not i enable enhanced security. After investigation i found i may have to allow the use of 'priviliged locations' as an administrator, but the value was not to be found in the registry.
Did i need to enable 'priviliged locations' via the custom install wizard and would i now have to manually create this key to have it work?
The real issue is that i work for an orginization which produces these pdf's as support material for textbooks and this method of making the executables accessable ( registry modification ) is not suitable for our end users.

You should look for a different way of distributing your executables.

Problem signing PDF from smart card - BouncyCastle, IAIK Wrapper, iText

Hello!
I need to sign and timestamp a PDF document with a smartcard. I'm using Java 1.6, iText to manage PDF, BouncyCastle to deal with cryptography and the free IAIK WRAPPER to access the smartcard.
I've already searched the Internet to solve my problem, read the PDF specifications about the signature and followed snippets that should've worked, but after a couple of weeks I still don't have working code, not even for the signature. All the tries I made yield messages like "Signature has been corrupted" or "Invalid signature" (I can't remember the exact messages, but they're not in English anyway :D ) when I verify the signature in Adobe Reader.
My first goal was to use an encapsulated signature, using filter Adobe.PPKLITE, subfilter adbe.pkcs7.sha1 and a DER-Encoded PKCS#7 object as content.
Among the tries I made, I used code such as (I don't include all modifications, just the ones I deem closer to the right approach):
     // COMMON - START
     ///// selectedKey is a iaik.pkcs.pkcs11.objects.Key instance of the private key I'm taking from the SC
     RSAPrivateKey signerPrivKey=(RSAPrivateKey)selectedKey;
     CertificateFactory certificateFactory=CertificateFactory.getInstance("X.509");
     ///// correspondingCertificate is a iaik.pkcs.pkcs11.objects.X509PublicKeyCertificate instance of the certificate I'm taking from the SC
     byte[] derEncodedCertificate=correspondingCertificate.getValue().getByteArrayValue();
     X509Certificate signerCert=(X509Certificate)certificateFactory.generateCertificate(new ByteArrayInputStream(derEncodedCertificate));
     Provider provider=new BouncyCastleProvider();
     Security.addProvider(provider);
     ///// session is an instance of iaik.pkcs.pkcs11.Session
     session.signInit(Mechanism.SHA1_RSA_PKCS, signerPrivKey);
     File theFile = new File("C:\\toSign.pdf");
     FileInputStream fis = new FileInputStream(theFile);
     byte[] contentData = new byte[(int) theFile.length()];
     fis.read(contentData);
     fis.close();
     PdfReader reader = new PdfReader(contentData);
     ByteArrayOutputStream baos = new ByteArrayOutputStream();
     PdfStamper stp = PdfStamper.createSignature(reader, baos, '\0');
     PdfSignatureAppearance sap = stp.getSignatureAppearance();
     // COMMON - END
     java.security.cert.X509Certificate[] certs=new java.security.cert.X509Certificate[1];
     CertificateFactory factory=CertificateFactory.getInstance("X.509");
     certs[0]=(X509Certificate)factory.generateCertificate(new ByteArrayInputStream(correspondingCertificate.getValue().getByteArrayValue()));
     sap.setSignDate(new GregorianCalendar());
     sap.setCrypto(null, certs, null, null);
     sap.setReason("This is the reason");
     sap.setLocation("This is the Location");
     sap.setContact("This is the Contact");
     sap.setAcro6Layers(true);
     PdfSignature dic = new PdfSignature(PdfName.ADOBE_PPKLITE, PdfName.ADBE_PKCS7_SHA1);
     dic.setDate(new PdfDate(sap.getSignDate()));
     dic.setName(PdfPKCS7.getSubjectFields((X509Certificate)certs[0]).getField("CN"));
     sap.setCryptoDictionary(dic);
     int csize = 4000;
     HashMap exc = new HashMap();
     exc.put(PdfName.CONTENTS, new Integer(csize * 2 + 2));
     sap.preClose(exc);
     MessageDigest md = MessageDigest.getInstance("SHA1");
     InputStream s = sap.getRangeStream();
     int read = 0;
     byte[] buff = new byte[8192];
     while ((read = s.read(buff, 0, 8192)) > 0)
          md.update(buff, 0, read);
     byte[] signature=session.sign(buff);
     CMSSignedDataGenerator generator = new CMSSignedDataGenerator();
     ArrayList list = new ArrayList();
     for (int i = 0; i < certs.length; i++)
          list.add(certs);
     CertStore chainStore = CertStore.getInstance("Collection", new CollectionCertStoreParameters(list), provider);
     generator.addCertificatesAndCRLs(chainStore);
     CMSProcessable content = new CMSProcessableByteArray(md.digest());
     CMSSignedData signedData = generator.generate(CMSSignedDataGenerator.ENCRYPTION_RSA, content, true, provider);
     byte[] pk = signedData.getEncoded();
     byte[] outc = new byte[csize];
     PdfDictionary dic2 = new PdfDictionary();
     System.arraycopy(pk, 0, outc, 0, pk.length);
     dic2.put(PdfName.CONTENTS, new PdfString(outc).setHexWriting(true));
     sap.close(dic2);
     File newOne = new File("C:\\signed.pdf");
     FileOutputStream fos = new FileOutputStream(newOne);
     fos.write(baos.toByteArray());
     fos.close();
I figured this is the right approach, but I need a way to generate the CMSSignedData instance, which can't be done using addSigner (the only documented way I found), since the private key is not extractable from a smart card...
Then I decided to give up and try with a detached signature:
     // COMMON - START
     // Same as above
     // COMMON - END
     sap.setSignDate(new GregorianCalendar());
     java.security.cert.X509Certificate[] certs=new java.security.cert.X509Certificate[1];
     CertificateFactory factory=CertificateFactory.getInstance("X.509");
     certs[0]=(X509Certificate)factory.generateCertificate(new ByteArrayInputStream(correspondingCertificate.getValue().getByteArrayValue()));
     sap.setCrypto(null, certs, null, PdfSignatureAppearance.SELF_SIGNED);
     sap.setSignDate(java.util.Calendar.getInstance());
     sap.setExternalDigest (new byte[8192], new byte[20], "RSA");
     sap.preClose();
     MessageDigest messageDigest = MessageDigest.getInstance ("SHA1");
     byte buff[] = new byte[8192];
     int n;
     InputStream inp = sap.getRangeStream ();
     while ((n = inp.read (buff)) > 0)
          messageDigest.update (buff, 0, n);
     byte hash[] = messageDigest.digest();
     byte[] signature=session.sign(hash);
     PdfSigGenericPKCS sg = sap.getSigStandard ();
     PdfLiteral slit = (PdfLiteral)sg.get (PdfName.CONTENTS);
     byte[] outc = new byte[(slit.getPosLength () - 2) / 2];
     PdfPKCS7 sig = sg.getSigner ();
     sig.setExternalDigest (session.sign(hash), hash, "RSA");
     PdfDictionary dic = new PdfDictionary ();
     byte[] ssig = sig.getEncodedPKCS7();
     System.arraycopy (ssig, 0, outc, 0, ssig.length);
     dic.put (PdfName.CONTENTS, new PdfString (outc).setHexWriting(true));
     sap.close (dic);
     File newOne = new File("C:\\signed.pdf");
     FileOutputStream fos = new FileOutputStream(newOne);
     fos.write(baos.toByteArray());
     fos.close();
I'm still stuck to the signature process, can anyone please tell me what I'm doing wrong and help me (snippets would be deeply appreciated), maybe even changing approach in order to be able to add a digital timestamp?
Thank you very much in advance!
PS: I had also tried to use the SunPKCS11 provider to access the smart card, I gave up for similar problems, but if someone has suggestions using it, they're welcome! :D

Hello!
I need to sign and timestamp a PDF document with a smartcard. I'm using Java 1.6, iText to manage PDF, BouncyCastle to deal with cryptography and the free IAIK WRAPPER to access the smartcard.
I've already searched the Internet to solve my problem, read the PDF specifications about the signature and followed snippets that should've worked, but after a couple of weeks I still don't have working code, not even for the signature. All the tries I made yield messages like "Signature has been corrupted" or "Invalid signature" (I can't remember the exact messages, but they're not in English anyway :D ) when I verify the signature in Adobe Reader.
My first goal was to use an encapsulated signature, using filter Adobe.PPKLITE, subfilter adbe.pkcs7.sha1 and a DER-Encoded PKCS#7 object as content.
Among the tries I made, I used code such as (I don't include all modifications, just the ones I deem closer to the right approach):
     // COMMON - START
     ///// selectedKey is a iaik.pkcs.pkcs11.objects.Key instance of the private key I'm taking from the SC
     RSAPrivateKey signerPrivKey=(RSAPrivateKey)selectedKey;
     CertificateFactory certificateFactory=CertificateFactory.getInstance("X.509");
     ///// correspondingCertificate is a iaik.pkcs.pkcs11.objects.X509PublicKeyCertificate instance of the certificate I'm taking from the SC
     byte[] derEncodedCertificate=correspondingCertificate.getValue().getByteArrayValue();
     X509Certificate signerCert=(X509Certificate)certificateFactory.generateCertificate(new ByteArrayInputStream(derEncodedCertificate));
     Provider provider=new BouncyCastleProvider();
     Security.addProvider(provider);
     ///// session is an instance of iaik.pkcs.pkcs11.Session
     session.signInit(Mechanism.SHA1_RSA_PKCS, signerPrivKey);
     File theFile = new File("C:\\toSign.pdf");
     FileInputStream fis = new FileInputStream(theFile);
     byte[] contentData = new byte[(int) theFile.length()];
     fis.read(contentData);
     fis.close();
     PdfReader reader = new PdfReader(contentData);
     ByteArrayOutputStream baos = new ByteArrayOutputStream();
     PdfStamper stp = PdfStamper.createSignature(reader, baos, '\0');
     PdfSignatureAppearance sap = stp.getSignatureAppearance();
     // COMMON - END
     java.security.cert.X509Certificate[] certs=new java.security.cert.X509Certificate[1];
     CertificateFactory factory=CertificateFactory.getInstance("X.509");
     certs[0]=(X509Certificate)factory.generateCertificate(new ByteArrayInputStream(correspondingCertificate.getValue().getByteArrayValue()));
     sap.setSignDate(new GregorianCalendar());
     sap.setCrypto(null, certs, null, null);
     sap.setReason("This is the reason");
     sap.setLocation("This is the Location");
     sap.setContact("This is the Contact");
     sap.setAcro6Layers(true);
     PdfSignature dic = new PdfSignature(PdfName.ADOBE_PPKLITE, PdfName.ADBE_PKCS7_SHA1);
     dic.setDate(new PdfDate(sap.getSignDate()));
     dic.setName(PdfPKCS7.getSubjectFields((X509Certificate)certs[0]).getField("CN"));
     sap.setCryptoDictionary(dic);
     int csize = 4000;
     HashMap exc = new HashMap();
     exc.put(PdfName.CONTENTS, new Integer(csize * 2 + 2));
     sap.preClose(exc);
     MessageDigest md = MessageDigest.getInstance("SHA1");
     InputStream s = sap.getRangeStream();
     int read = 0;
     byte[] buff = new byte[8192];
     while ((read = s.read(buff, 0, 8192)) > 0)
          md.update(buff, 0, read);
     byte[] signature=session.sign(buff);
     CMSSignedDataGenerator generator = new CMSSignedDataGenerator();
     ArrayList list = new ArrayList();
     for (int i = 0; i < certs.length; i++)
          list.add(certs);
     CertStore chainStore = CertStore.getInstance("Collection", new CollectionCertStoreParameters(list), provider);
     generator.addCertificatesAndCRLs(chainStore);
     CMSProcessable content = new CMSProcessableByteArray(md.digest());
     CMSSignedData signedData = generator.generate(CMSSignedDataGenerator.ENCRYPTION_RSA, content, true, provider);
     byte[] pk = signedData.getEncoded();
     byte[] outc = new byte[csize];
     PdfDictionary dic2 = new PdfDictionary();
     System.arraycopy(pk, 0, outc, 0, pk.length);
     dic2.put(PdfName.CONTENTS, new PdfString(outc).setHexWriting(true));
     sap.close(dic2);
     File newOne = new File("C:\\signed.pdf");
     FileOutputStream fos = new FileOutputStream(newOne);
     fos.write(baos.toByteArray());
     fos.close();
I figured this is the right approach, but I need a way to generate the CMSSignedData instance, which can't be done using addSigner (the only documented way I found), since the private key is not extractable from a smart card...
Then I decided to give up and try with a detached signature:
     // COMMON - START
     // Same as above
     // COMMON - END
     sap.setSignDate(new GregorianCalendar());
     java.security.cert.X509Certificate[] certs=new java.security.cert.X509Certificate[1];
     CertificateFactory factory=CertificateFactory.getInstance("X.509");
     certs[0]=(X509Certificate)factory.generateCertificate(new ByteArrayInputStream(correspondingCertificate.getValue().getByteArrayValue()));
     sap.setCrypto(null, certs, null, PdfSignatureAppearance.SELF_SIGNED);
     sap.setSignDate(java.util.Calendar.getInstance());
     sap.setExternalDigest (new byte[8192], new byte[20], "RSA");
     sap.preClose();
     MessageDigest messageDigest = MessageDigest.getInstance ("SHA1");
     byte buff[] = new byte[8192];
     int n;
     InputStream inp = sap.getRangeStream ();
     while ((n = inp.read (buff)) > 0)
          messageDigest.update (buff, 0, n);
     byte hash[] = messageDigest.digest();
     byte[] signature=session.sign(hash);
     PdfSigGenericPKCS sg = sap.getSigStandard ();
     PdfLiteral slit = (PdfLiteral)sg.get (PdfName.CONTENTS);
     byte[] outc = new byte[(slit.getPosLength () - 2) / 2];
     PdfPKCS7 sig = sg.getSigner ();
     sig.setExternalDigest (session.sign(hash), hash, "RSA");
     PdfDictionary dic = new PdfDictionary ();
     byte[] ssig = sig.getEncodedPKCS7();
     System.arraycopy (ssig, 0, outc, 0, ssig.length);
     dic.put (PdfName.CONTENTS, new PdfString (outc).setHexWriting(true));
     sap.close (dic);
     File newOne = new File("C:\\signed.pdf");
     FileOutputStream fos = new FileOutputStream(newOne);
     fos.write(baos.toByteArray());
     fos.close();
I'm still stuck to the signature process, can anyone please tell me what I'm doing wrong and help me (snippets would be deeply appreciated), maybe even changing approach in order to be able to add a digital timestamp?
Thank you very much in advance!
PS: I had also tried to use the SunPKCS11 provider to access the smart card, I gave up for similar problems, but if someone has suggestions using it, they're welcome! :D

Just setting up iCloud on my iMac, my problem is when trying to sign out/off from iCloud it comes up with a verification code that is being sent to my land line, I'd changed the numbers in my Apple ID and they show as changed but the land line number stil

Just setting up iCloud on my iMac 10.9.2, my problem is when trying to sign out/off from iCloud it comes up with a verification code that is being sent to my land line, I'd changed the numbers in my Apple ID and they show as changed but the land line number still shows as number that the verification code is being sent, I prompt "Don't have access to this phone" and that's no help at all. The only way I can sign out /off from iCloud is to uncheck everything that I wanted to keep in the cloud????
Thanks in advance for any help.

Skip the iCloud sign in for now.
Once you reach the home page, go to settings and sign out of FaceTime and Messages. This should also sign you out of iCloud.
Go to iCloud in settings and sign in with the correct Apple ID.
If that does not work
Skip the iCloud sign in
Go to Apple ID.apple.com and sign in
Change your Apple ID to the old one
Delete iCloud account on your device with the old Apple ID and the same password.
Go back to the website, change your Apple ID back to the current one. You will receive an email to verify the account. Verify first.
Sign into iCloud on your device with the correct Apple ID and password

How to filter list of digital certificates for signing PDF

Is it possible to change the configuration of Reader installation to filter the list of installed certificates that can be used for digitally signing documents?
The filtered list will appear when users attempt to select a certificate for digitally signing a document.
Thanks.

Hi Carla,
Unfortunately, Extended Key Usage is not one of the properties you can enforce.
The things you can set are:
appearanceFilter (i.e. enforce the use of a custom signature appearance)
certspec(i.e. the signing certificate must meet some specific criteria) <<<----- This is what you are more interested in, more below
digestMethod(i.e. enforce the use of a specific cryptographic hashing algorithm)
filter (i.e. enforce the use of a specific security handler if you want to use something other than the one built into Acrobat)
legalAttestations (i.e. enforce the reason or purpose of the certifying signature)
lockDocument (i.e. enforce any further changes to the document after the signature is applied)
mdp (i.e. the rules for changing the document applied as part of a certifying signature)
reasons (i.e. a list of one or more reasons the signer can use, as opposed to them adding their own)
shouldAddRevInfo (i.e. force the inclusion on the revocation information (CRL or OCSP response) in the PDF file)
subFilter (i.e. require the use of a specific signature format. This is very arcane)
timeStampspec (i.e. require the use of a specific time stamp server)
version (i.e the minimum version of Acrobat that can decipher the signature. the only two options are versions 6 or 8)
The second item is the certspec, and this is what I've been pointing you towards. For the sake of discussion, think of everything you can read in a certificate as an extension. The serial number is an extension, the subject is an extension, the valid from date is an extension, etc. When a certificate is created, some of these extensions are required, other optional, and you can even add in extension that are not publicly defined, and only you will know about.
Acrobat has the ability to enforce the signer to use a certificate that contains some, but not all of the known extensions. The extensions it can enforce are:
issuer (i.e. require the use of a certificate that is issued by a specific Certificate Authority)
keyUsage (i.e. require the signers certificate contain one or more of the nine possible values that can be included)
oid (i.e. require that the Certificate Policy extension contain a specific value)
subject (i.e. require that the document is signed by one specific person using one specific digital ID)
subjectDN (i.e. require that the document is signed by one specific person, but they get to choose which digital ID to use)
url (i.e. if a required digital ID is not available, where the signer can procure an acceptable digital ID)
urlType (i.e. if the user is directed to the URL, should it be a web server where they can download a digital ID or a remote signing server where the digital ID stays on the remote server)
That's it. If it's not one of these items then Acrobat cannot enforce that the item is available. Extended Key Usage is not on the list.
Steve

Signed PDFs cannot be opened with authentication certificate?

Hello,
I have the following problem. I have PDFs that were signed with a certificate from a private CA via Adobe LiveCycle ES2 Verison 9. These PDFs are sent out to users who then need to open and print them. To open the PDFs an authentication certificate is needed. All users have been issued such a certificate from a private CA. The users have Adobe reader version 8 to 11 installed.
Users who have Adobe reader 9 click to open the PDF, they are then ask how they want to authenticate - via password or certificate. They select the certificate option and are then presented with a list of certificates available (from windows certificate store and adobe application) to choose from. They select the right authentication certificate and the PDF opens without issues.
All other users who user Adobe Reader 8, 10 and 11 are presented with the authetication screen to select the password or certificate option. They select "Certificate" and the screen jumps back to the authentication screen where they are presented with the same selection. If they select "certificate" again, nothing happens and the PDF does not open. For these readers they are not presented with a list of certificates available to choose from.
When I now remove the authentication certificate from the computer, and try to open the PDF, I get the authentication screen, select "certificate" and am presented with all available certificates. None of these certificates of course match the one the PDF asks for, so it will also not open.
The private CA certificates are imported in the windows certificate store as well as the Adobe application.
Why is Adobe 9 handling the certificate differently then 8, 10 and 11? What changes have to be done to pass authentication in the effected readers?
I am looking for forward to any suggestions.
Thank you,
Nadine

AFAIK there were no code changes in this area between XI and DC, Are you doing all your processing on the same platform (Mac) or does the problem manifest when you move encrypted PDF between Mac and Windows. As I recall the problem that I was talking about manifest when encrypted PDFs were moved between platforms. If you do move your PDFs between platforms, then which Acrobat version do you use on which platform? Is it Acrobat DC on both Mac and Windows? On which platform/Acrobat version do you encrypt and on which platform/Acrobat version you try to open?

Can't login Lync suddenly, the error is" There was a problem acquiring a personal certificate required to sign in."

Dear all,
This is a real issue in working. Our company provides office 365 mailbox and its lync for users.
Recently, many users meet such issue of " There was a problem acquiring a personal certificate required to sign in."
The lync version is 2010 and even I removed lync2010 cache for user's profile, that user still can't login lync.
See below picture.
Please give help and show advice.
Franklin hong

Hi,
The issue may be caused by that the user’s security credentials were corrupted or an RSA folder on the user’s computer may be blocking authentication.
Here is a similar case may help you:
http://community.office365.com/en-us/f/166/t/80399.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Problem showing certificate properties from signed PDFs

Similar Messages

Maybe you are looking for