Reader not allowing digital signatures

I used Adobe9 to create a form so our volunteers/interns can fill it out, sign it and send it back to us via email. I can get everything to work so that it works in Acrobat reader, EXCEPT allow signing. No matter how I've tried, (extending the form, creating a policy to allow filling in forms and signing), when I bring the form up in reader (ver 9.3), the document properties still say signing is not allowed. I've tried other reader versions, same result. This should be so much easier, but I cannot figure for the life of me what is wrong. Any idas?
Thanks
Ken

George,
That is what I thought too. So I did extend it, and it still won't work. Here is a copy of my security properties after
I extended it as you mentioned: ------>
I can now save data in the form, but the only thing that is NOT working is this %$#@ digital signature thing. Maybe I don't understand digital signatures enough, but in Acrobat9, when designing a form, I could create a digital signature in the fly. Can't users do that when they view a document in Reader? Is it a properties issue, or can't a user create a digital signature in Acrobat Reader at all? Seems like extending a form takes away the signing property.
Ken

Similar Messages

KeyUsage does not allow digital signatures

Hello,
I'm getting the security: KeyUsage does not allow digital signatures error (in java log) when trying to authenticate our web-based java app using a smart card (CAC). The smart card authentication works fine on one test system, but not the other. Both are using the same 'certificate' (we believe). Both have the same IIS 6.0 settings, and same java setting...as well as IE browser settings.
Visually, the symptom presents itself via the sun java login prompt when clicking the link to load the java app. We have an asp client that works fine. Only our java app is asking for re-authentication. If we manually type the credentials of a system admin, it loads the applet fine. What I can't figure out is, "Why are we getting prompted for a log-in to begin?"
Note: We have verified that IIS (via IIS logs) that authentication is successful, yet still prompted.
Here is a snippet of the java log: ----------------------------------
security: Checking if SSL certificate is in Deployment permanent certificate store
security: KeyUsage does not allow digital signatures
Exception in thread "HandshakeCompletedNotify-Thread" java.util.ConcurrentModificationException
at java.util.HashMap$HashIterator.nextEntry(Unknown Source)
at java.util.HashMap$EntryIterator.next(Unknown Source)
at java.util.HashMap$EntryIterator.next(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl$NotifyHandshakeThread.run(Unknown Source)
network: Firewall authentication: site=sditap10086.afsac.wpafb.af.mil/134.136.33.21:443, protocol=https, prompt=, scheme=ntlm
java.io.IOException: Server returned HTTP response code: 401 for URL: https://sditap10086.afsac.wpafb.af.mil/report.web/ASP/insight-inpage.jar
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
Any clues?

One of the KeyUsage extension bits is DIGITAL_SIGNATURE which in your case has most likely not been enabled so try getting a certificate signed with the DIGITAL_SIGNATURE bit enabled. It would be a good idea to actual have a look at your certificate to see which KeyUsage bits are enabled and whether the KeyUsage extension is set as critical or not. If the extension is defined as critical, then all the bits have to be followed, whereas if it is not critical, then the bits can be ignored and it depends on the API used on whether they enforce what the bits say.

Save as PDF, allow digital signatures in Reader

After saving the pdf from Pages, security permissions do not allow for digital signatures in Adobe Reader. How do I change this without having to use the full version of Adobe Acrobat?
...Bruce...

Hi Bruce,
Although you are creating the pdf from Pages, it's not Pages that is actually doing the conversion. Pages (and any other application for which pdf is not the 'native' file format) is using code that is part of the OS X package to convert the document to a pdf file.
If that code includes the capability of allowing digital signatures, Apple hasn't bothered to mention the fact in the Pages '09 User Guide. The only pdf option listed there for Export PDF is reduction of file size by resampling image files.
As the conversion is done with OS X bundled code, shared by all applications, you might find more useful answers in the Mac OS X v10.7 Lion community.
Regards,
Barry

Allowing digital signatures in Reader 7.0 (WIN)

I know I'm missing something simple, but can someone tell me how to get Designer 7.0 (WIN) to allow digital signatures in a form opened in Reader 7.0 (WIN)? I've tried everything I can find, including permissions, but it doesn't work for me. Thanks, Bob.

You have to run the form via Reader Extension Server.
Or the user have to use the Acrobat Standard/Prof. Edition.
/Ulf
www.dtp-tjanst.se
www.dtp-tjanst.com

Error msg. page "Adobe Reader not allowed"

When I attempt to use any thing in Adobe on line I get a message that says "Adobe Reader not allowed". What's that mean?

Sounds like you have software running on your system that prevents you from running Reader. Are yo using your own computer or a computer owned by an company? What OS are you running? What version of Reader?

Allowing Digital signatures for Reader

I've come across an issue that I have not been able to figure out. I have created a pdf on my computer which has Acrobat X. Within my document I have portions where there are digital signature. Now I can sign the blocks when I use my computer, but when I transfer the documents to another computer, which only has Reader 9, the document properties change to "SIGNING: NOT ALLOW". What can I do to fix this situation?

You have to run the form via Reader Extension Server.
Or the user have to use the Acrobat Standard/Prof. Edition.
/Ulf
www.dtp-tjanst.se
www.dtp-tjanst.com

UPGRADED 10.4.11 ON MACBOOK PRO TO 10.5, NOW UPDATES TO 10.5.8 WILL NOT SAVE, "DIGITAL SIGNATURE DOES NOT MATCH". ANY IDEAS.

UPGRADED 10.4.11 ON MACBOOK PRO INTEL TO 10.5.1 (FAMILY PACK VERSION), UPDATES TO 10.5.8 WILL NOT SAVE DUE TO, "DIGITAL SIGNATURE DOES NOT MATCH". ANY IDEAS? CAN I UPGRADE TO 10.6.1 WITHOUT SAME ISSUE.

Well, not sure if having the disk in a firewire case or over a network would have made a difference.
The solution of making a disk image as in article http://support.apple.com/kb/TS2664 was what worked for me.
After, mounting the disk image the Migration Assistant completed without errors. So far everything seems to be working like it did on 10.4.11.

Can Not Delete digital signature

Acrobat 6.0 Windows. Have a digital signature field (mine) in a document. The digital signature tab and the field both show a red X. The signature tab says the field is invalid. It says it contains potentially malicious content - Java actions. It also says that changes were made to the document that invalidate the signature.
I need to add some more text fields and fill in their values and can NOT do that now.
I have checked the Knowledgebase and the Help file and can NOT delete the signature the way they say - it says the signature is read-only.
Please HELP !

Hi,
It sounds like the document author set the file up so the creation of the signature locked all of the fields in the document (to prevent tampering). If that was the case, then the signature field was locked as well which prevents the signature from being cleared. Sorry, but there is no work around.
Steve

Problems with badge reader of the digital signature

I have the badge reader of the Athena Smartcard Solution.
It worked with the OS X 10.4.8. Now after updating to 10.4.9, the reader doesn't work. I have a PB with PPC. I have tried it with a MacIntel and it works. This is a great problem for me because I have to use the badge reader for the legal digital signature.
Anyone could help me, please?

Try zapping the PRAM:
http://docs.info.apple.com/article.html?artnum=2238
And if that doesn't work I would contact the Smart Card reader company and let them know you are having this problem. It sounds like they used some non-standard coding for their USB drivers, and need to get an updated firmware for their hardware. In the meantime, reverting back to 10.4.8, while not easy can be done if you either backed up before upgrading, or follow the steps at the end of my FAQ*:
http://www.macmaps.com/upgradefaq.html
There is a slight risk some applications from Apple may not run properly if they weren't designed to run with 10.4.8 but were with 10.4.9. Do clone* your machine in 10.4.9 at least twice before attempting this:
http://www.macmaps.com/backup.html
* Links to my pages may give me compensation

Acrobat Reader 8 and digital signatures

What are the limitations of Acrobat Reader 8 with respect to digital signatures? I have been trying to create a form, that can be distributed through e-mail and digitally signed by Acrobat Reader 8 users, and am getting unpredictable results. It seemed like these users were able to sign this document last week, but today are unable to. Is the digital signature feature entirely stable?
I have read through the documentation and it is vague at best and seems to blur the lines between Acrobat Reader and Professional.

>What are the limitations of Acrobat Reader 8 with respect to digital signatures?
Generally, it can't do them. (Adobe Reader, if I was being picky, the
name was changed after 5.0).
You CAN enable signing using a special function. However, you are
contractually limited by the EULA; to oversimplify, no more than 500
users per form, or uses per form.
Aandi Inston

Acrobat is not validating digital signature

Hi Everybody...
I have generated a pdf file which includes digital signatures.
But the acrobat is not validating the digital signature. But if
we open this file in PDF-xchange viewer, it shows that the
signatures are valid. Acrobat generates the following error...
Error during signature verification.
Signature contains incorrect, unrecognized, corrupted or
suspicious data.
Support Information: SigDict /Contents illegal data
What may be the problem?

Thank you Bernd for your kind and simple reply
I am uploading my file with my certificate which i am using for my digital
signatures. Please have a deep look at contents entry. Use ASNVIEWER or
decoder etc......
Thanks again and Best Regards

MS Visual Basic for Applications will not apply digital signatures

When using Microsoft Visual Basic for Applications within any office application (Excel in this case), i cannot see the certificate store when creating digital certificates. It appears to be localised to the operating system but can't seem to find the issue.
To create the digital signature within Excel i normally go to Developer > Visual Basic > Tools > Digital Signature. When i select 'Choose', the certificates are not presented.
Has anyone experienced this?
Thanks in advance.

Hi,
As far as I know, If we want to use the digital signatures, we need to Digital Certificate for VBA Projects tool which a set of extra tools. I recommend we repair/reinstall the tool with a backup install CD.
Then, we may follow the below links to reset a digital signatures and add the digital signatures in the trust list(Location: File>Option>Trust center.) to test if it is helpful:
http://www.wiseowl.co.uk/blog/s240/digital_certificates_for_macros.htm
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
George Zhao
TechNet Community Support

Acrobat/Reader and PADES (Digital Signatures)

I've read the document that James King of Adobe published and made the configurations to make Acrobat PADES compliant. However when I sign a document and inspect the generated CMS package inside the PDF, the signing-certificate value in Signed-Attributes is not present. So I'm assuming that the signature is still not PADES-BES compliant. Is there anything I can do to make Acrobat put a PADES-BES signature?
Also, I for verification, I made a test. I've externally signed a PDF with a CMS packet that has signing-certificate signed attribute. The signature has been validated in Acrobat. After that, I've intentionally put a random value as signing-certificate value. When I opened that PDF, it still validated fine in Acrobat. Therefore I understand that Acrobat doesn't do full PADES-BES validation. Is this right? Is there a configuration that can make Acrobat make a full PADES validation?
I'm using 9.1.3 version of Acrobat under Windows.
Thanks in advance

Hi Stewen,
Thank you for your answer.
I've took the value of Contents dictionary value and inspected it with an ASN.1 viewer. You're right, the signing certificate is on the PKCS7 (CMS) package. However, PaDES doesn't suffice with that. It requires a signing-certificate value in the signed attributes inside SignerInfo sequence in CMS. Also, the subfilter value should say ETSI.CAdES.detached as mandated in ETSI TS 102 708-3 V.1.1.1 page 8.
e) The signature dictionary shall contain a value of ETSI.CAdES.detached for the key SubFilter.
Since we are mandated by EU guidelines our customers require ETSI compatibility.
Thanks for you help

Digital Signature Not Showing Up in Saved PDF

I am frequently sent pdf contracts that need to be filled out, signed and returned. I turn the pdf into a form and then add a signature field, click "certify with visible signature," sign it and save it as a pdf. But then when I email the signed pdf it has all the form content but doesn't show the signature. Same for when I open the file in Preview. The signature only shows up in Acrobat. Can anyone help explain what I am doing wrong?
Thanks in advance.

Hi,
It was dsaks who originally asking about creating a digital signature and that's what the core of this thread is about. When Mobius Strip asked about flattening the signature into a bitmap image that I suggested using a custom signature appearance, because the progenitor of the thread was asking about digital signatures. If they can get by with using a custom stamp then that's fine by me, but that wasn't the thread topic.
On to your questions:
mrtoner wrote:
I understand why Adobe won't (if that's the case) license the digital signatures ability so that Preview and other applications can use it. However, it should be trivial to allow that wet ink signature appear in other apps and I don't see a compelling reason to prevent it -- afer all, it's not a digital signature.
There is no licensing involved here. The PDF specification is public and the Acrobat SDK even has an example of how to create your own signature plug-in. When it comes to the actual cryptographic operations we license the software from RSA. As far as how the signature is created, and how it should be processed, that's all covered by public facing documentation. In fact, Apple is more than capable of processing signatures using their Keychain utility, it's just that they have elected not to include that functionality into Preview.
If your job is to monitor this forum and assist users, why couldn't you manage to suggest that the other users use the stamps feature, since it was clear that what they were wanting was only the signature image? These folks are spending hundreds and thousands of dollars on your products and they deserve better than this.
It's not my job to monitor the forum. I chime in on digital signature issues because it's a complex subject and there are so few people who understand the minutia of how they work. If dsaks hadn't added "certify with visible signature," to the original post I would have skip this completely, but he/she did so I tried to answer their question.
Finally, it's a bit disingenuous when you stated "The image does not display at all, except in Acrobat/Acrobat Reader". It just doesn't display in the free Mac Preview app. There are other third party signature handlers that will process and display a digital signature in a PDF file, but there are not a lot of them in free PDF viewers. As I said above, if dsaks can get by with a custom stamp then great, but if he/she needs a cryptographically sound digital signature then there is no reason why not to created it because everyone can get the free Reader for the Mac, Windows and Linux platforms.
Steve

Creating Digital signature blocks w/ Acrobat 10.1.2 and using reader to sign...

I'm using Adobe Acrobat 10.1.2 to add digtal signatures to pdf's but when I save them as a reader extended version so people that only have access to Reader can sign them, Reader won't allow them to sign. How do I fix this problem?

It's important to remember when you are extending a PDF document for digital signatures workflow that you create all of the signature fields need in the document prior to extending the document. Adobe Reader does not allow for signature field creation when signing.

Reader not allowing digital signatures

Similar Messages

Maybe you are looking for