Problem with Digital Signature strategy in Document Managment System

Hello ALL,
I am facing problem with Digital Signature strategy in DMS. If any help its greatly appreciated.
I have senario where Approvers in DMS will review the document and approve the document and put on their digitial signature. if i have multiple approvers maintained in the characterstics it has to check weather it has been approved by all approvers otherwise it has to reset the status to for approval.
My problem is i am able to reset the status back from approved to for approval using the badi document_status01 but when the next approver logs in to the document and change the status to approved he is not able to get the digital signature pop up which it comes only first user approves it.
can any one help me out on whats going wrong in it.
Thanks
Srikanth Aduri.

Hi,
maybe the reason for this is that the status of the digital signature is not changed. Then the system thinks that the digital signature is still completed and therefore the user is not getting the pop-up again. The database table for the digital signature for documents is TC77. I hope this information is usefull for you.
Best regards,
Christoph

Similar Messages

Form 16 With digital signature giving adobe document corrupted output

Dear All,
We have configured ads and implementing form 16 with digital signature,we have done the all configuration as per SAP Guide and dezso blogs,but when generating the form 16 with digital signature its giving
"Adobe reader could not open _xxxxx.pdf because it is either not a supported file type or corrupted,
we have done the same configuration in dev its working fine and prd its not working,request you to please provide the solution for the same.
as per some check list i have cheked ads_https is working fine,but when executing the report fp_pdf_test_00 with rfc ads_https its asking for user name and password,we have maintained the same user name and password for abap and java for both adsuser and ads_agent still same issue,
pelase suggest.
please find attached screenshot for your reference.
Regards,
Basis

This can be done but you must use the Document Form var to route the signed pdf. You must configure the FormGuide submit button to 'Submit from PDF' in Guide Builder.
Also the button on the form must be configured to submit as 'PDF' (not XDP). This change is done when you open the form in designer.
Note that after you have submitted the signed pdf you will be dealing with a pdf subsequently.
Attached is a sample FormGuide.

Problem with digital signature of documents

I have a requirement to upload documents and his respected fingerprint signed (SHA1WithRSA).
To achive this I am using the functions modules:
SSF_KRN_DIGEST
SSF_KRN_SIGN_BY_AS
but I can´t make it work.
I also ask for the .pem file used to generate the PSE that I'm using to sign documents.
With this pem file I execute in openSSL this following command:
#Creates Message Digest of document.txt, and the sign it with MyKey.pem
dgst -sha1 -sign MyKey.pem -out document.sign document.txt
AND THIS WORKS! Now, with this succesfull case I try to track down the problem with the FM that I'm using, and I detected that SSF_KRN_DIGEST is given me a diferent result than openssl (so I forget for sign the document for a while...).
This are the HEX value for OpenSSL (this is the one that works):
30
21
30
09
06
05
2B
0E
03
02
1A
05
00
04
14
AC
37
25
AC
AD
34
E2
F8
B9
21
B3
15
DD
20
0D
71
5B
FD
EE
EB
And this is the HEX value of the result of FM SSF_KRN_DIGEST:
30
40
06
09
2A
86
48
86
F7
0D
01
07
05
A0
33
30
31
02
01
00
30
09
06
05
2B
0E
03
02
1A
05
00
30
0B
06
09
2A
86
48
86
F7
0D
01
07
01
04
14
AC
37
25
AC
AD
34
E2
F8
B9
21
B3
15
DD
20
0D
71
5B
FD
EE
EB
As you can see, both files do countain the digest, but the metadata and padding is different. As far as I know, it should respect the ASN.1 structure, but I can figure out whats wrong with the SSF_KRN_DIGEST call.
This is my code:
* Creamos el message diggest del archivo
CALL FUNCTION 'SSF_KRN_DIGEST'
   EXPORTING
     b_detached                         = 'X'
     ostr_input_data_l                  = lv_bin_data_len
     str_hashalg                        = 'SHA1'
IMPORTING
    ostr_digested_data_l               = lv_digested_len
*   CRC                                =
   TABLES
     ostr_input_data                    = lt_bin_data
     ostr_digested_data                 = lt_digested_data
EXCEPTIONS
    ssf_krn_error                      = 1
    ssf_krn_noop                       = 2
    ssf_krn_nomemory                   = 3
    ssf_krn_opinv                      = 4
    ssf_krn_nossflib                   = 5
    ssf_krn_input_data_error           = 6
    ssf_krn_invalid_par                = 7
    ssf_krn_invalid_parlen             = 8
    ssf_fb_input_parameter_error       = 9
    OTHERS                             = 10.
Where lt_bin_data contains the document, uploaded in binary mode.
Thanks in advance.
regards.

Martin, as you said, the problem was the PKCS#7 format.
In a communication problem, I was told that the application works with that format, whereas in reality is working with PKCS#1 - V1.5
I just have to search for a FM that support that format, like SSFW_KRN_SIGN.
This FM calculates the MD, and sign it, so it was easier than I originally thought.
This is the FM call that I'm using, just in case someone needs the code:
* Leemos los parametros definidos en la SSFA
CALL FUNCTION 'SSF_GET_PARAMETER'
   EXPORTING
     application             = 'INTBAN'
   IMPORTING
     str_profileid           = lv_profileid
     str_profile             = lv_str_profile
   EXCEPTIONS
     ssf_parameter_not_found = 1
     OTHERS                  = 2.
*Cargamos la tabla con el encargado de firmar
lw_signer-id = lv_profileid.
lw_signer-profile = lv_str_profile.
INSERT lw_signer INTO TABLE lt_signer.
*Calculamos MD del documento (SHA1), y firmamos
CALL FUNCTION 'SSFW_KRN_SIGN'
   EXPORTING
     str_format                   = 'PKCS1-V1.5'
     str_hashalg                  = 'SHA1'
     ostr_input_data              = lv_xstring_data_to_sign
   IMPORTING
     ostr_signed_data             = lv_xstring_signed_data
   TABLES
     signer                       = lt_signer
   EXCEPTIONS
     ssf_krn_error                = 1
     ssf_krn_noop                 = 2
     ssf_krn_nomemory             = 3
     ssf_krn_opinv                = 4
     ssf_krn_nossflib             = 5
     ssf_krn_signer_list_error    = 6
     ssf_krn_input_data_error     = 7
     ssf_krn_invalid_par          = 8
     ssf_krn_invalid_parlen       = 9
     ssf_fb_input_parameter_error = 10
     OTHERS                       = 11.
Where lv_xstring_data_to_sign is just a xstring with the document that I have to sign.
Regards!
German Guzelj

Problems with digital signatures (adobe reader)

     I am a Government contractor that develops documents for my customer. We are in the process of ascertaining the viability of digital signatures. I have developed a signature form with Adobe Pro 9.0.
     I have several issues. When someone digitally signs the document with their Common Acess Card (CAC), the warning appears "At least one signature has problems. Please fill out the form. If you are the form author, choose distribute form in the forms menu to send it to your recipients."
     I tried using several options using the distribute section, and I am unable to make this part work. I truly need assistance with doing this correctly. I require that the signatures to be processed in sequence (#1, #2, #3, and then the approval signature). I did not comprehend that option in the distribute form section.
     However, the recipients that use Adobe Acrobat Pro are able to sign the document when submitted to them (however, the prviously stated warning appears). If they use Adobe Reader, they are not able to sign the document.
     Please help.
     Is there anyone that can assist with the signature feature of Adobe Pro?
     I would appreciate any suggestion/guidance.
     One area that I don't understand is the feature where i 0send the form out for signature.

What is your operating system?
If Windows, you have something in your registry that is pointing to drive K:
See if anything in here helps: http://helpx.adobe.com/creative-suite/kb/error-1327-invalid-drive-drive.html

Problem with digital signatures in Acrobat 8

Is it true that the ability to directly create a digital signature field is available in Acrobat 7 & 9 but not in 8?
I have Acrobat Standard 8.0.0 and want to create blank signature fields before I certify a document, but can't find a way to do this directly. I can add a signature then delete it to create a blank field, but this is a very slow way of doing it.
I have read Forum articles saying choose Tools > Forms > Digital Signature Tool to create a blank field, but I have no Forms item in my Tools menu. Am I missing something, or do I need to upgrade to Acrobat 9 (or downgrade to 7!)?

Hi Brian,
It's not that version 8 per se cannot add a signature field, it's that you cannot create or edit form fields in the Standard version. If you had Acrobat 8 Professional, or you buy Acrobat 9 Pro, then you would have the capability to add and edit form fields (a signature fields is just a special purpose form field).
Steve

Digital Signature Strategy for Documents

Hi Experts,
We are trying to setup document signature strategy in our workplace. On the configuration part, we have followed all the requisite steps.Have defined Authorization group,individual signatures,signature strategy definition and sequence,user restrictions etc. However, we are still unable to execute the strategy. Please guide.

Hi James,
The configuration steps seem to be in line.
Propose you revisit and check if you entered both the first name and last names of the users for whom the signature strategy is to be enabled. Once done, you must be in a position to execute it without any hitches Do revert if the issue still persists.

Problems with Digital Signatures

I have a pdf with multiple signature fields. When somebody signs it in 9.x everything is fine, but when somebody signs it in a version earlier than 9.0 it does not work. The signature fields do not even show up. Somebody signed the pdf in 8.x and sent it back to me. I opened in 9.x, and I could not see the signature fields. Is there a compability issue between these versions. The pdf contains javascript and is a dynamic pdf if that matters. Thanks in advance.

It works on my computer when I dropped the target version to 7.x. However, I don't know if it will work on a true 8.0 version of Acrobat. I have sent it to a person who has Version 8.x, and I will let you know how it works. When you change that target version does that mean it will be compatible with the version or later you set it to?

Problem with digital signatures.

Hi,
I am trying to install Itunes and keep getting the message that windows doesn't recognise the publisher of the application. I have had Itunes in the past with no problems.
I have tried loading older versions, turning of security features, etc, all to no avail. Any idea's?
Thank you
Nick

Hi Brian,
It's not that version 8 per se cannot add a signature field, it's that you cannot create or edit form fields in the Standard version. If you had Acrobat 8 Professional, or you buy Acrobat 9 Pro, then you would have the capability to add and edit form fields (a signature fields is just a special purpose form field).
Steve

Simple problem with popup message before adding document on system form

Hi all,
We have an AddOn that validates price lines on system Sales Order form matrix, so that if prices fall below a certain value, a popup is show to ask to continue or not, when user presses ADD button.
The problem is that if he chooses yes (to continue), the Sales Order is not added since the button ADD keeps being selected ....
Here is my code:
        [B1Listener(BoEventTypes.et_CLICK, true)]
        public virtual bool OnBeforeClick(ItemEvent pVal)
            int iResult = B1Connections.theAppl.MessageBox("Price lines fall bellow minimum! Continue?", 1, "NO", "YES", "");
            if (iResult == 1) // NO
                // Show error
                B1Connections.theAppl.StatusBar.SetText("OK", SAPbouiCOM.BoMessageTime.bmt_Short, SAPbouiCOM.BoStatusBarMessageType.smt_Error);
                return false;
            // YES: Continue to add Sales Order
            return true;
The problem is somehow related with the popup message being shown: if user says YES to continue, the system form does not continue with the standard process of adding the Sales Order (when I move the cursor above the ADD button is shows it already pressed...).
Do I have to do anything more to force the process to continue, when the user says YES?
Regards,
Manuel Dias

Thtas known problem. The solution for this is declare global variable as boolean, when user selects Yes, then set this variable to true and emulate click to add button again where before the message box check if its varaible sets to true - in this case dont show message box, only set variable to false.
The concept of code will be
dim continue as boolean = false
in item event
if continue = false then
    x = messagebox...
if x = 1 then
    continue = true
     items.item("1").click
end if
else
continue = false
end if

Digital signatures and view document througt URL

Hello together,
We use status document and digital signatures workflow and we canu2019t use URL link to documents which have been approved. In browseru2019s window I see digital signatures information and error :u201DHTTP 404 the web page cannot be foundu201D.
In transaction SOLAR01, SOLAR02 when, I display approved document, at first I see the windows with digital signatures information and then, after push enter - required document.
If document in status u201Cin progressu201D we donu2019t have problem.
Could you help me to resolve this problem or disable windows with signatures information?

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Risks associated with digital signatures

We are looking to develop a process to use digital signatures on PDF documents, send them via email to a line manager, who adds his digital signature as a "stamp of approval" who then emails them to a specific department for processing. Are there any risks associated with using digital signatures in adobe, and general best practices for their usage, or best practices to mitigate the risks associated with them.

If you procure and use commercially-issued credentials (not self-signed), digital signatures are much safer than any other signatures.
1. They tell you whether the signed document has been altered. The document's author may specify which alterations (like form fill or signing) are acceptable. A digital signature tells you what kind of alterations in the document occurred after signing. In Acrobat you can always get the signed version before any alterations occurred.
2. The digital signature tells you who the signer is (not only from the appearance but from the signing credential which is present in the signatures).
3. The signing credential of a digital signature can be verified on-line that it has not been revoked and is still good. Acrobat has a feature to embed revocation information in the document, so that you can get verification that the signing credential was good at the signing time even if you do not have Internet access.
4. In Acrobat the last signer can lock the signature, so that no other modifications of the document are allowed.
So, there are many advantages to using digital signatures. The only risk that you have is that a signing credential can be stolen if someone has an access to the computer or token where the credential is stored AND gets hold of the credential's password. Each credential is password protected, so you guard this password as you guard any other password. If you suspect that someone got hold of your credential and password you can always ask the credential's issuer to revoke this credential and to issue you a new one. In this case the only time span when someone may use your credential is the time lag between the time the credential was stolen and the time the issuer revoked it.

Need a Suggestion For implementing the Digital Signature For the Documents

Hi,
Currently I am working in a Document Management System. I need a Good Suggestion for how to implement a Digital Signature For the Documents.
Thanks in Advance
Sabarish V

Hmm, if you are not using Oracle Payroll, what are you using for payroll? I am wondering why you could not use your payroll system, whatever it is, to handle this reimbursement program.
Well, you may want to talk to Oracle support about how to handle this in Oracle iExpense. You can certainly handle advances for Expense Reports. You would then apply the advance to the expense report items. The catch is I don't think you can stop expense item entry after the adavance is satisfied. You would have to set up a work flow process of some kind to have the expense reports reviewed and only approve expenses that are applied to the advance, is what I am thinking. Not your ideal solution, but something to think about. It could be the Oracle folks might know of a sneaky way to handle this. What you are trying to do is unusual. Employee advances are common, but the idea of not being able to exceed the advance amount is what unusual about this. Normally you will accept any expenses over the advance amount and reimburse the employee for those extra amounts not advanced.
Good luck.
John Dickey

Digital signatures and inbound documents

Hello all,
is it possible to import document previously digitaly signed in another system.
Scenario will be to have another (partner) system in which user create document with digital sign. This document is transfered to SAP R/3 with digital sign, and it should create document which has digital sign on it.
Is this scenario possible?
Do we need to have user from partner system created in SAP system with proper authorizations or document will be signed on some other way.
TIA
Gordan

You can edit a signed PDF document (assuming you are not using the field collection feature). This will not "Invalidate" the signature, but it will change the status of the signature.
I have attached two screen shots to illustrate... To generate these, I signed a PDF, changed some data and re-validated the signature.
ValidationStatus.gif shows the status of the actual signature.
DocStatus.gif shows a "roll-up" status (meaning it checks all signatures on a doc and displays an overview) of the signed document.
Regards
Steve

ECC integration with Document Management System

Hi,
Can anybody provide step by step approach for connecting ECC with Document management system(product of EMC).
Also would appreciate if somebody clarifies the folllowing queries
1) Do we really need Archivelink if we just want to store documents and access documents from DMS.
2) What are the configurations required at DMS side and what are the configurations required at SAP ECC.
Any solution to my problem will be much appreciated.
Thanks & Regards
Prabhat

If you Google 'Flash SCORM' you should find a good deal of
info.
Dave -
Head Developer
http://www.blurredistinction.com
Adobe Community Expert
http://www.adobe.com/communities/experts/

How to create Web Service Client from wsdl with digital signature?

Please, help me to create Web Service Client from wsdl with digital signature. I know create Web Service client from wsdl file and I know how to add digital signature to XML with jwsdp, but I don't know how to do it together.
Thanks.

I'm handling security wit JAX-WS handler. So I insert "manually" ws-security tag and I encrypt (and sign) message parts.
On client side, all works fine, but on server side I obtain:
---Server Inbound SOAP message---|#]
Decrypting message and rebuilding Valuees... |#]
Starting decrypt|#]
. dectypted.!
--found following string: <ns1:addiziona><num1>80</num1><num2>22222</num2></ns1:addiziona>|#]
...MESSAGE Restored.|#]
<?xml version="1.0" ?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:ns1="http://calculator.me.org/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><soapenv:Body><ns1:addiziona><num1>80</num1><num2>22222</num2></ns1:addiziona></soapenv:Body></soapenv:Envelope>|#]
Error in decoding SOAP Message
Error in decoding SOAP Message
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.toInternalMessage(SOAPXMLDecoder.java:89)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher.toMessageInfo(SOAPMessageDispatcher.java:187)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher$SoapInvoker.invoke(SOAPMessageDispatcher.java:571)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher.receive(SOAPMessageDispatcher.java:145)
        at com.sun.xml.ws.server.Tie.handle(Tie.java:88)
        at com.sun.enterprise.webservice.Ejb3MessageDispatcher.handlePost(Ejb3MessageDispatcher.java:160)
        at com.sun.enterprise.webservice.Ejb3MessageDispatcher.invoke(Ejb3MessageDispatcher.java:89)
        at com.sun.enterprise.webservice.EjbWebServiceServlet.dispatchToEjbEndpoint(EjbWebServiceServlet.java:178)
        at com.sun.enterprise.webservice.EjbWebServiceServlet.service(EjbWebServiceServlet.java:109)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at com.sun.enterprise.web.AdHocContextValve.invoke(AdHocContextValve.java:100)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:71)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
        at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:231)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
        at com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
        at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
        at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
        at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)
Caused by: javax.xml.ws.soap.SOAPFaultException: Cannot find the dispatch method
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.raiseFault(SOAPDecoder.java:674)
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.decodeDispatchMethod(SOAPXMLDecoder.java:152)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeBodyContent(SOAPDecoder.java:337)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeBody(SOAPDecoder.java:327)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeEnvelope(SOAPDecoder.java:250)
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.toInternalMessage(SOAPXMLDecoder.java:81)
        ... 29 more
|#]
--->handleFault O_o<---|#]If you have any idea for solving my problem, then I can post my simple example :(
Bye!

Problem with Digital Signature strategy in Document Managment System

Similar Messages

Maybe you are looking for