Process Digitally Signed E-Mail

Hi,
I send an e-mail using outlook with digital signature. The mail is received in SAP with an attachment: "smime.p7s". I have implemented an exit class of interface IF_INBOUND_EXIT_BCS. I can process the mail. Is there anyway to process the signature and verify the sender and the owner of the signature?
thanks?

Marcelo,
To create a sample data file for email initiation, open the form in test mode and save data file locally - this gives you an excellent and easy starting point, using exact field names you have defined.
Good luck,
SM

Similar Messages

Can CRM 2011 email router process digitally signed emails?

Hi there,
Please can you tell em is the CRM 2011 email router is able to process digitally signed emails, as our just seems to ignore them.
Its annoying as you can track the email manually, but not through the email router at the moment.
Many thanks
Stuart
Stuart

Hi Bartosz,
Can i ask if you ever found a way forward with this...?
I think i have a similar issue with signed emails not being processed.
Many thanks
Stuart
Stuart

MSCRM Email Router not processing digitally signed emails

In my production environment digitally signed incoming emails are not getting processed and stay there in inbox.
Does Email Router supports Digitally signed emails ?
Thanks in Advance
- Vijay

Hi Vijay - did you ever find a way to receive these - thanks
Stuart
Stuart

Can't display digitally-signed e-mail

With this current software release, when I try to open my Exchange sync'ed mailbox, it will immediately shutdown if there is a digitally-signed message in the first screenload of mail.
I can't get into my inbox until more messages arrive to push the offender off te first screen load, or I delete or move the offender using Outlook.

My only other suggestions is add the email to a contact in your phone. When you type that contact's name, their email show pop-up below as an option. If that doesn't work, I don't know. Sorry.

How to Digitally sign a PDF report/Mail automatically?

Hi experts!
I have cron'ed shell script that runs a report (Oracle Reports 6i) and the output the report is a PDF document which i send it as an attachment to a mail recipient on my MS. Exchange server.
This is working fine!
Now, i wish to digitally sign either the message or the PDF document it with a Digital Certificate (from Verisign).
Can you please guide me on how this can be done? Should I do it at the Database level, Application server level or the OS level (sendmail)
[Assume i already have already received my certificate from Verisign]
Thank you in advance for your precious time and replies.
Best Regards
Yogeeraj

Please see this video from Acrobatusers.com's Donna Baker (there is no audio)

Digitally Signed PDF crashes Mail and Preview

I've run into an odd situation - if I try to send a digitally signed PDF file using the Mail app or even view that file in the Preview app, those apps crash. The PDF files are created in Adobe Acrobat Pro version 9.1.0 (for the Mac). My Mail and Preview apps are right up to date.
The same PDF file still opens just fine in Adobe Acrobat. If I create exactly the same file, but don't go through the digital signature step, the files open (in Preview) and send (in Mail) just fine.
Anyone else run into this problem and/or have a suggestion on how to avoid it?
(P.S. By "create", I mean I have printed to the "Adobe PDF 9.0" print driver, which creates the base PDF file. Then I have also "secured" the file by requiring a password be entered to change anything. The final step, which seems to be causing the problem, is digitally signing the file.)

The problem may be related to asking Acrobat 9 to output a file format "compatible" with older versions -- along with adding security.
If you check the Console log, I think you will find that the "mdworker" task is also crashing -- even when you open the file successfully with Adobe Reader. I presume this is Spotlight trying to index the file.
Safari will also crash when attempting to view such a PDF. It puts out a Console message indicating invalid AES block size or some such. Presumably this is related to the 128 bit AES security in the PDF file. Using 128 bit RC4 results in a file that doesn't crash Preview, but the document content is garbled by Preview so it's just as bad.
--Bob

Unable to digitally sign or encrypt messages in Mail

I recently switched from a PC to a Mac and I have been unable to digitally sign or encrypt any of my e-mails. I'm currently running version 3.3 (926.1/926) for Mail and I made sure that my .cer security certificate is located in Keychain Access as well as certificates for my contacts. My certificate is valid because it has the green checkmark next to it.
I know what the *digitally sign* and encryption buttons should look like and where they should be located when composing e-mails, but they are just not there for me. Does anyone have any advice on how to fix this. Does it matter which folder the .cer security certificates should be located in for Keychain Access? Or is there a specific option I need to enable within Mail to be able to see those buttons?
I know that Mail is recognizing security certificates for e-mails that are being sent to me because it is showing the starburst/checkmark icon next to those e-mail addresses, and my Address Book is showing that same icon next to those e-mail addresses for my contacts.

I finally have a solution to this problem. I had been trying to use a .cer security certificate issued by Comodo, it had worked just fine on Windows but my Mac didn't seem to like it. I also tried creating my own certificate through OSX, but even after I created it I still couldn't see the buttons.
I had someone direct me to this webpage which ultimately helped me fix the problem:
http://allforces.com/2007/03/02/email-security/
I ended up using Thawte to issue me another security certificate (this time it was an x.509 file), the security certificate automatically opened in Keychain Access and downloaded to the Certificates and My Certificates folder. Once I shutdown Mail and restarted it I had the buttons for both encryption and digitally signed. Of course the encryption button is still greyed out because it is a new certificate and I need to make sure my Address Book contacts have a copy of it before I can encrypt.
Message was edited by: Matthew Little

Mail missing Encrypt and Digitally Sign buttons

I don't have the option of encrypting or digitally signing any e-mails I compose in Mail. I have a valid security certificate in my Keychain Access, as well as valid certificates for my contacts. I can't find an option to show/add the encrypt and digitally sign buttons either.
When composing a new message, the drop down box next to the subject line only gives the following options:
CC field
BCC field
Reply-to address field
Priority field
Customize...
I know where these two buttons should be and what they look like, but they're just not there. Any ideas or suggestions?

I finally have a solution to this problem. I had been trying to use a .cer security certificate issued by Comodo, it had worked just fine on Windows but my Mac didn't seem to like it. I also tried creating my own certificate through OSX, but even after I created it I still couldn't see the buttons.
I had someone direct me to this webpage which ultimately helped me fix the problem:
http://allforces.com/2007/03/02/email-security/
I ended up using Thawte to issue me another security certificate (this time it was an x.509 file), the security certificate automatically opened in Keychain Access and downloaded to the Certificates and My Certificates folder. Once I shutdown Mail and restarted it I had the buttons for both encryption and digitally signed. Of course the encryption button is still greyed out because it is a new certificate and I need to make sure my Address Book contacts have a copy of it before I can encrypt.

Is it possible to digitally sign a document in reader for iOS?

We sign documents using adobe reader 9.3 & std/pro 9.2 0. Can we create a digital signature and sign documents?

Steve,
Thanks for your reply.
I did not think it was possible as yet. We have many engineers and Pilots
that wanted to use their iPads to sign documents. This would eliminate the
need to go back to their PC.
I don't expect this feature to be too far in the future.
Again thanks,
Michael L. Pope
Engineering Process Writer II, Dept 0663
Engineering Operations
Gulfstream Aerospace Corporation
Tel. (912) 965-7362 Fax (912) 965-7650
[email protected]
This e-mail message, including all attachments, is for the sole use of the
intended recipient(s) and may contain Personal Information under General
Dynamics policy CP 07-105 and/or legally privileged and confidential
information. Any Personal Information can be accessed only by authorized
personnel of General Dynamics and its approved service providers and may be
used only as permitted by General Dynamics and its policies. Contractual
restrictions apply to third parties. If you are not an intended recipient,
you are hereby notified that you have either received this message in error
or through interception, and that any review, use, distribution, copying or
disclosure of this message or its attachments is strictly prohibited and is
subject to criminal and civil penalties. All personal messages express
solely the sender's views and not those of Gulfstream Aerospace
Corporation.
If you received this message in error, please contact the sender by reply
e-mail and destroy all copies of the original message.
                                                                                From:       Steve Werner <[email protected]>
To:         mpope5 <[email protected]>
Date:       03/05/2013 11:32 AM
Subject:    Is it possible to digitally sign a document in reader for iOS?

How Do I Digitally Sign Daily Progress Notes on Same .pdf?

Friday, August 7, 2009
3:20 PM -0800
Hello Everyone.
I'm a physician, and I am in the position of writing notes that may be introduced into evidence later. I really would like to avoid going to court & litigation, but it seems that I may be headed in that area. I usually keep progress notes of any kind; on house projects, vacations, etc. on one MS Word file and simply update the next entry with a new date and time header like you see at the top of this entry.
For the first time, I find that I must apply a digital signature and secure the notes and show that they were written on the date and at the time specified. And, most of all, I must show proof that the notes were not altered later.
There are many vendors, I understand, who provide digital signatures for Adobe Acrobat Pro v9 for Intel Macintosh. Who is the best?
Also, is it possible to keep a running journal and sign each day's entry? Or does each day require a separate document? Will I end up with 20-30 separate signed .pdf documents at the end of this?
Thanks to all in advance.
-jpk

jpkmd85 wrote:
What is this type of signature called? I understand it's called a "class 3" type certificate.
It's not a type of "signature", but a class of digital ID. A "signature" is really shorthand for "electronic digital signature". What a signature really is a pair of cryptographic operations over a given set of data, and in this case the data is just a bunch of bytes in a computer file. One of those operation I'm referring to requires the use of a digital ID, or in the case of creating the signature, specifically the use of the private key portion of a digital ID. The subsequent validation of the signature requires the public key portion of the digital ID. When these keys are generated, they have a symbiotic relationship. By that I mean what one key locks, only the its corresponding other key can unlock. When you lock something with the private key (which is how a signature gets created), only the corresponding public key can unlock the encrypted data (this is the basis of signature verification). Conversely, if you lock something with the public key (this is the basis of certificate security in Acrobat) only the corresponding private key can unlock it. In the computer world, you can sign any blob of electronic data and it's always the same underlying principle. You can sign e-mail, you can sign Word docs and lots of other things (but most importantly, PDF files because that's what keeps me employed ).
Back to the digital IDs. A digital ID is really comprised of three things. The public key, the corresponding private key, and a set of certificate attributes and extensions that are for the most part plain text. These attributes and extensions that I speak about are the data that defines who the digital ID was issued to (aka the Subject), who issued the digital ID (the Issuer), the validity period, key usage, constraints, serial number, etc. The Certificate Authority (CA) is a company or governmental organization that operates under a set of legal guidelines (lawyers salivate here). There is no electronic magic here, just a bunch of documents. When they issue a digital ID they do it under the auspices of a Certificate Policy (CP) which in turn is enforced by a document called the Certificate Practice Statement (CPS). The CPS details the process by which they (the CA) may issue a digital ID and the rights and responsibilities that the recipient must adhere to. For instance, if you lose the private key (e.g. it was on a laptop that got stolen) you would be obligated to report this to the CA so they could revoke the digital ID. One of the things the CP defines is the assurance level that the CA will go through prior to issuing a digital ID. A high assurance level would require that they (the CA) get proof of ID before issuing you a digital ID, and that you would also agree to the terms of the contract. A low assurance level CA will issue a digital ID without requiring proof of ID. Another way that high assurance CAs work is they issue the digital ID on hardware device (a USB token or a smart card). This is know as two factor identification because it requires something you have (the device) and something you know (the PIN or password).
They key here (no pun intended) is to check with the CA and find out which program they offer that guarentees non-repudiation. If the files will need to be routinly opened on computers other than yours I would recomend getting a digital ID that chains to the Adobe Root CA, but if the file is going to live on your machine unless extrodinary circumstances arise you could get by with any high assurance digital ID.
Steve

Email cannot be read when it is only digitally signed

I, and my boss (using a Curve) have been having continuous trouble with reading emails that have been digitally signed. Now, before people start running down the basics, here's what I have done so far:
1. Installed latest ROM for both devices, still waiting on 4.5 for my 8830...
2. Installed S/MIME application on both devices
3. Installed latest Desktop OS on both machines and synchronized certificates from desktop to device and back
Here is the systems we are using:
1. Exchange 2003
2. BlackBerry Enterprise Server (version unknown, not my department)
3. Verisign certificates, managed on-site
Here are some of the caveats we are experiencing.
1. We can read signed and/or encrypted messages from Outlook (03/07), Entourage (04/08), and Thunderbird problem-free
2. We can read signed AND encrypted, or encrypted ONLY, messages from Mulberry, but we cannot read signed ONLY messages from Mulberry
There is no error message, in fact everything "looks" normal, we are just unable to view the body of the emails. What we do see is similar to this:
Received Using: <mailbox> (S/MIME)
Message Status: Opened
To: <me>
Sent: <date>
From: <Mulberry User>
Subject: <subject>
<img><img> Trusted
[1 Attachment]
application: Unknown (2K)
The <Mulberry User> did some research and sent me the following information:
This is a signed message sent from Outlook:
MIME-Version: 1.0
Content-Type: multipart/signed;
        boundary="----=_NextPart_000_00CE_01C99022.D841F9A0";
        protocol="application/x-pkcs7-signature";
        micalg=SHA1
This is a signed message sent from Mulberry:
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=sha1;
protocol="application/pkcs7-signature";
boundary="==========45CF5864B8BBBF80D9D4=========="
See any difference between those two?
According to the RFC, the "application/x-pkcs7-signature" MIME type is supposed to be handled, by clients, the same as the "application/pkcs7-signature" MIME type, which is the "correct" MIME type. So Mulberry handles it correctly. Outlook does not. And neither does the Blackberry. Because *all* clients *should* honor both types.
http://www.ietf.org/proceedings/05nov/RFCs/rfc2311.txt
"C.1 Early MIME Types
Some early implementations of S/MIME agents used the following MIME types:
   application/x-pkcs7-mime
   application/x-pkcs7-signature
   application/x-pkcs10
In each case, the "x-" subtypes correspond to the subtypes described in this document without the "x-"."
"This memo also discusses how to use the multipart/signed MIME type defined in [MIME-SECURE] to transport S/MIME signed messages. This memo also defines the application/pkcs7-signature MIME type, which is also used to transport S/MIME signed messages. This specification is compatible with PKCS #7 in that it uses the data types defined by PKCS #7."
3.4.1 Choosing a Format for Signed-only Messages
There are no hard-and-fast rules when a particular signed-only format should be chosen because it depends on the capabilities of all the receivers and the relative importance of receivers with S/MIME facilities being able to verify the signature versus the importance of receivers without S/MIME software being able to view the message.
Messages signed using the multipart/signed format can always be viewed by the receiver whether they have S/MIME software or not. They can also be viewed whether they are using a MIME-native user agent or they have messages translated by a gateway. In this context, "be viewed" means the ability to process the message essentially as if it were not a signed message, including any other MIME structure the message might have."
This means that the Blackberry is required, by RFC, to be able to read a signed message even without the aid of S/MIME capable software. The fact that it does not is a failure of the Blackberry.
The above email was in reference to the fact that all of these emails that cannot be read on the devices, can be read in Outlook, and when a signed message is sent from Outlook, it can be read on the devices. Furthermore, this is not to say that the information above is 100% valid and correct, but I am hoping that it sparks some discussion and hopefully a resolution can be found.
Thanks for your time in reading this.
Andrew
BB8830

Well not 100% sure but in my experience the following setting is the problem "Enable S/MIME Encryption on Signed or Weakly encrypted messages". This setting is a per server setting and is found in the general options of the server.
When this is set to true the BES encryptes the message again over the signed message...but then for some reason unknown it doesn't decrypt it back when the client reads it.
Maybe you could ask your admins and try it out and see if it works...

Unable to digitally sign and save a PDF document

I am currently using ADOBE ACROBAT 8.0 Professional (Ver 8.1.0). I provide proofreading service for a client. The client provides me with a PDF which I use the comment and mark up tool to indicate required changes. Once all of the comments are complete, I mark the document approved or disapproved and attach a digital signature.
Recently, many files that I have recieved from the client will not allow me to sign and save the PDF. I can save the PDF without the signature but not when it is digitally signed. The error reads:
"The document could not be saved. A number is out of range"
I queried my client to find out if they have made any changes. They have recently upgraded to Illustrator 4 and they create the PDF's for me from the Illustrator files they work from. There are four teams using the same Illustrator program but not all of them are producing files that I cannot sign and save.
Can anyone tell me what the error indicates? Is there a property assigned to the document that I can not recognize that refers to this problem.
Since the files I work on contain proprietary information, I prefer not to attach them to this forum. If anyone is interested in helping, I will share a file to fully explain my problem.

I will try that, thank you.
Jim Dodge
English Proofreading Coordinator
ASIST Translation Services
4891 Sawmill Road, Suite 200
Columbus, OH 43235-7266
www.ASISTtranslations.com
Tel: 937-596-6649
NOTICE: This electronic mail transmission is for the use of the named
individual or entity to which it is directed and may contain information
that is privileged or confidential. It is not to be transmitted to or
received by anyone other than the named addressee (or a person authorized
to deliver it to the named addressee). It is not to be copied or forwarded
to any unauthorized persons. If you have received this electronic mail
transmission in error, delete it from your system without copying or
forwarding it, and notify the sender of the error by replying via email or
by calling ASIST Translation Services, Inc. at (614) 451-6744, so that our
address record can be corrected.

How to automate digital signing PDF Files in batch

I am trying to find a way to automate as much as possible the placing of a digital signature on a set of PDF documents. We have Adobe Acrobat Pro 8.1 and the machine has MS Office 2003 with Vista Business. Here's a scenario: A set of documents exist in a TO-BE-SIGNED folder, each unsigned. The user uses MS Access 2003 form with a button with VBA code to open and show the first document in the folder. The AcroExch.App, AcroExch.AVDoc, and AcroApp.Show APIs are used to do this. I found code on the internet to do that. Rather than having my client now have to go through all the manual steps to place a digital signature on the document, I want to streamline it to a single click if possible. Right now he has to click Advanced > Sign and Certify > Place Signature > then click and drag > then enter his password > then click sign > then save and close the doc. Can all this be automated? An added bonus would be automatically saving or moving the signed doc to a different folder when it is signed.
I have created a stamp that allows me to add a stamp with just two clicks. Can such be done to add a digital signature? Is it possible to add a button to the toolbar to do this? Can it be done in Access VBA using some Acrobat API calls? Another feature I want to include is moving quickly from one document to the next in the TO-BE-SIGNED folder. Like the arrow buttons take you from page to page, can a button be added to the Acrobat toolbar to take you from doc to doc in a particular folder? Or can that be done using VBA and some Acrobat API calls? To maintain the security of the password protection and yet cut down on clicks and keystrokes, I would like to input the password just once at the beginning of the session and have it remembered or applied to all the docs that get signed as long as that session is open.
I've found some software that purports to do much of the above, but they are all very expensive and assume a big business with big bucks. If anyone knows of inexpensive software that will REALLY do this, I'm open to that as well, though I'd like to control the process myself if possible. I consider myself a beginner with Acrobat and using API calls and would appreciate any help anyone can give. Is the above clear and even possible?
PS: I'm new to this site and using SDK. I posted this under Security (thinking digital signatures) and was asked to post it here, which I'm glad to do.
Thanks much!

Our workflow is such that on infrequent occasions, we have a digitally signed PDF file and the doctor wants to append a scanned note to it. In the past, we could do this, but not now. In the past, when we added the scanned doc, we received a message saying that the doc is already signed and asking if we want to overrwrite the doc. If we respond Yes, then Acrobat would allow it and the signature would indicate that the original part of the document was not modified, but that something had been changed--namely, a doc had been appended. The signature indicated that something had changed since it was added, but it still allowed the append. The signature would have an exclamation point in a yellow triangle indicating the doc had been updated since signed. For our purposes, that was okay because we know what the change is based on the original doc and we know what is appended. Now, however, we cannot append at all. The only thing that is different that I know of is that the doc was signed with software that is not Adobe Acrobat, even though the other software uses an Adobe Acrobat self-created digital signature.
I hope I've explained that clearly enough.
Thanks for your help.

Error 2148073513 When Attempting To Digitally Sign In Acrobat 11 Standard

I'm attempting to use Acrobat 11 Standard to digitally sign a PDF document with a 2048 bit certificate from our internal certificate authority, and I'm receiving the following error:
Error encountered while signing:
The Windows Cryptographic Service Provider reported an error:
The requested operation is not supported.
Error Code: 2148073513
The operating system is Windows 7 Enterprise x64. When I remove Acrobat 11 Standard and install Acrobat 9 Standard on the same Windows 7 system, I am able to successfully sign the document using the same certificate that was giving the error with 11. Also we have been using Acrobat 9 on Windows XP with these same certificates for a long time and never encountered issues with digitally signing.
Any ideas of what might be causing this issue?
Thanks in advance
Josh

Hi Josh,
The error message comes from Windows (not Acrobat), but Acrobat 11 is probably asking Windows to do something that it can't. What it is I don't know because the error message is too vague. One thing we can do is to take Windows out of the picture and see if you can sign when Acrobat accesses the digital ID itself as opposed to asking Windows to do the work. This is a two step process, first, export the digital ID from Windows into a file, and then import the file into Acrobat (it's not really an import, but I'll leave it at that for now).
Step 1 - Export the Digital ID
Launch Acrobat
Select the Edit > Preferences menu item
Select Internet from the Categories list box
Click the Internet Settings button
Select the Content tab on the Internet Properties dialog
Click the Certificates button
Highlight your digital ID and then click the Export button
Click the Next button on the Welcome panel of the Certificate Export Wizard
Select the Yes, export the private key radio button, and then click the Next button. If this radio button is disabled you can stop here and let me know that the private key is not exportable
Select the Include all certificates in the certification path if possible checkbox & the Export all extended properties checkbox and then click the Next button. Only select the top and bottom checkboxes, DO NOT delete the private key!
Create passwords for the file and then click the Next button. You will need this password to sign with so make sure it is something you can remember.
Pick a file name and location. Browse for a location you can remember as you will need to know where you put the file in order to use it to sign with. Click the Next button.
Click the Finish button
Click the OK button on the confirmation dialog
Click the Close button on the Certificates dialog
Click the OK button on the Internet Properties dialog
Step 2 - Add the file to Acrobat
Select Signatures from the Categories list box
Click the More button in the Identities & Trusted Certificates group box
Click the Add ID toolbar button
Click the Next button
Click the Browse button
Navigate to and select the file you exported above and then click the Open button
Enter the password you used above and then click the Next button
Click the Finish button
You will see two items in the list box with the same name. Highlight the one whose Storage Mechanism is "Digital ID File"
Click the Usage Options toolbar button and then select Use for Signing
Close the Digital ID and Trusted Certificate Settings
Click the OK button on the Preferences dialog
The next test is to see if you can sign a file. Please let me know if it works or not.
Thanks,
Steve

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign, why?

hi Phillip
i am not sure what you mean
I downloaded the ifilter and installed it
then configured everything as shown in the pdf file
I tried indexing from scratch exactly as i did successfully in the other computer
and got some errors in the log file
i checked the sql server log and the event viewer logs and got :
Error '0x80004005' occurred during full-text index population for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'), full-text key value 0x0000027A. Attempt will be made to reindex it.
The component 'PDFFilter.dll' reported error while indexing. Component path 'C:\Program Files\Adobe\Adobe PDF iFilter 9 for 64-bit platforms\bin\PDFFilter.dll'.
Informational: Full-text retry pass of Full population completed for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Number of retry documents processed: 1. Number of documents failed: 1.
Changing the status to MERGE for full-text catalog "Pirsumim_ext_catalog_ck" (5) in database "Pirsumim_ext_ck" (14). This is an informational message only. No user action is required.
Informational: Full-text Auto population initialized for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Population sub-tasks: 1
the same dll worked fine in another computer...
how can i see more details what is wrong with this dll ?
meidad

Process Digitally Signed E-Mail

Similar Messages

Maybe you are looking for