Secure PDF using certificate

Hi All,
I'm developing a secure PDF using certificate.
When I open the PDF I get acrobat security saying " A digital ID was used to encrypt this document but no digital ID is present to decrypt it.Make sure your digital ID is properly installed or contact the document author. "
Any help in resolving this issue is appreciated?

I have the exact same problem with the following exception:
I encrypted a portfolio with a public key for a committee, including myself, using our public keys to allow just us to be able to open the portfolio. This worked as it should with Acrobat 9.4.1 and Reader 9.4.1.
When I updated to Adobe Reader X, I got the infamous
"Acrobat Security
A digital ID was used to encrypt this document but no digital ID is present to decrypt it. Make sure your digital ID is properly installed or contact the document author" message.
On this same computer I can open the portfolio with Acrobat 9.4.1 and it doesn't prompt me for a password. When I open the same portfolio with Adobe Reader X, it asks for the password and gives the message.
When I upgraded to Reader X, I completely removed Reader 9 prior to loading Reader X. After a successful upgrade, I set my preferences to match what I had with Reader 9. Next, I re-established my security settings as follows:
1) Edit>Protection>Security Settings - then set the same private key as before, and
2) Edit>Protection>Manage Trusted Identities - then set the same public keys as before.
It should have worked, right?

Similar Messages

Unlock Encypted PDF Using certificates

Hi All,
I am using Encryption Service to unlock a pdf file and add reader extension rights to it. API of the Encryption Service: unlockPDFUsingCredential(encryptDoc, keyAlias)
key Alias- The input value is the friendly name i.e. alias of the key present in the IE key store.
This call fails with Error Message : ALC-ENC-100-013 Could not find credential from alias.
Caused By: findCredentialByAlias: no Local or HSM credential found -- No such object in the store(error code bin: 262, hex: 0x106)(CredentialServiceImpl.java466)
Note: The Acrobat pro is able to decrypt the encrypted doc but my LC call is failing.
Encryption is done using this call:
pkiIdentities -- This list has a recipeint which has a X509 cert (whose private key is used to unlock).
encryptPDFUsingCertificates(inDoc,pkiIdentities, certOptionsSpec);
Questions:
1) The API gives no information about the location of the keyStore where it is getting the handle of the key using the alias.
2) I looked at the removePDFCertificateSecurity(encryptDoc, keyAlias) API. That page describes the key should be rpesent in the Live cycle Store.
Note: A private key is stored in the LiveCycle Trust Store. When a certificate is placed there, an alias value is specified.
How can I get a handle to LC Trust Store.
If possible please provice a sample code to do unlocking of the encrupted PDF.
--Thanks
greenday

I was able to find a cuase of the issue and this is how I solved the problem.
The alias required is privateKey firendly name in the LC Trust Store so I have import the pfx credential in the LC Trust Store.
I used the CredentialServiceClient to import a credential and register it in the LC Trust Store with an alias.
--greendayX

Securing WiFi, use certificates or something else?

60 users all with iPhones, 20 of those users are Win 8.1 laptop users. AD at 2012R2 level. We currently have 3APs and use WPA2PSK to secure them. the laptops are all get their WiFi profiles from AirWatch. The iPhones are manual. My goal is not to have to tell the users the psk. plus if a user leaves they'll still have access to the hotspot.
I'm considering setting up Certificates to replace the psk. I'd rather try and setup Radius but am not sure I can setup Radius without certs.
If I must setup CS, I know there are two ways to setup certificate services. Stand alone and Enterprise. I'm unsure which way is best for my situation.
Any input is much appreciated.
This topic first appeared in the Spiceworks Community

Hi,
Sure, I am not a developer to get with you deeper, but Flash
can connect to your database, you can get more info throught the
develper center in this site or google about connecting to SQL
database using Flash.
Also, you can use flex which provide a Flash-based interface
with connecting to your database thought Macromedia develped lang
called MXML.
Hoep this helps

Opening Encrypted/Certificate Secured PDF.

Hello,
I have a pdf encrypted using certificate. I want to open this pdf using Acrobat sdk APIs. I have read the documentation of "Opening secured Pdf". I learnt that AVDocOpen() function calls Acrobat built in authorization procedure and using PD layer to open a encrypted pdf we need to write our own authorozation procedure. I want some example which demostrates how encrypted pdf are opened. Also, when opening certificate secured pdf, where does Acrobat installs the certificate?
Please can someone guide me!!
Thanks in advance.

Yes, you can read XMP w/o opening the PDF – of course, that assumes that the XMP is not encrypted (it's a choice of the PDF authoring/encrypting tool).
From: Adobe Forums <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Mon, 16 Jan 2012 21:10:56 -0800
To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
Subject: Opening Encrypted/Certificate Secured PDF.
Re: Opening Encrypted/Certificate Secured PDF.
created by poortip87<http://forums.adobe.com/people/poortip87> in Acrobat SDK - View the full discussion<http://forums.adobe.com/message/4145422#4145422

Exporting Secured PDF from indesign using apple script

hi there, this is my first go at scripting,
basically what i am trying to do is:
tell indesign to turn on a layer called "proof" in the active document
then export pdf - set pdf preference to smallest file size, all pages, and secure the file WITH A PASSWORD so that it can be opened but not edited (unless by someone at my agency who knows this password). this easy enough to manually, but im sick of typing out a password everytime i save a proof.
then save to a specific folder on the desktop, using the already existing filename - so 'myfile.pdf'
the code below gives me this message "
error "Can’t make name of PDF export preferences into type Unicode text." number -1700 from name of «class DFpf» to Unicode text
could someone please help me word this properly? I tried first referring to a pdf preset instead of setting all the values ie set color bitmap etc but i couldnt get the password to work,
here is what i have so far, written from snippets that other people have tried:
tell application "Adobe InDesign CS4"
          tell active document
try
                              set visible of layer "PROOF" to false
                    end try
set docName to name
                    set baseName to text item 1 of docName
                    set ASTID to AppleScript's text item delimiters
                    set AppleScript's text item delimiters to "."
                    set AppleScript's text item delimiters to ASTID
          tell PDF export preferences
                    set acrobat compatibility to acrobat 4 --> create a 1.3 pdf
                    set use security to true
                    set disallow changing to true
                    set disallow copying to true
                    set disallow document assembly to true
                    set disallow extraction for accessibility to true
                    set disallow form fill in to true
                    set disallow notes to true
                    set disallow hi res printing to false
                    set color bitmap sampling DPI to 100
                    set grayscale bitmap sampling DPI to 100
                    set monochrome bitmap sampling DPI to 100
--set image quality
                    set color bitmap quality to minimum
                    set grayscale bitmap quality to minimum
--set fonts
                    set subset fonts below to 0
--set security
                    set use security to true
                    set change security password to "editedit"
                    set disallow extraction for accessibility to false
                    set disallow copying to true
                    export format PDF type to "/Users/kimwilson242/Desktop/_PROOFS/" & name & ".pdf" without showing options
          end tell
end tell

tell application "Adobe InDesign CS5"
-- prefs belong to app so use in tell app block
          tell PDF export preferences
                    set acrobat compatibility to acrobat 4 --> create a 1.3 pdf
                    set use security to true
                    set disallow changing to true
                    set disallow copying to true
                    set disallow document assembly to true
                    set disallow extraction for accessibility to true
                    set disallow form fill in to true
                    set disallow notes to true
                    set disallow hi res printing to false
                    set color bitmap sampling DPI to 100
                    set grayscale bitmap sampling DPI to 100
                    set monochrome bitmap sampling DPI to 100
--set image quality
                    set color bitmap quality to minimum
                    set grayscale bitmap quality to minimum
--set fonts
                    set subset fonts below to 0
--set security
                    set use security to true
                    set change security password to "editedit"
                    set disallow extraction for accessibility to false
                    set disallow copying to true
          end tell
-- now deal with the doc
          tell active document
                    try
                              set visible of layer "PROOF" to false
                    end try
                    set docName to name
                    set baseName to text item 1 of docName
                    set ASTID to AppleScript's text item delimiters
                    set AppleScript's text item delimiters to "."
                    set AppleScript's text item delimiters to ASTID
-- use flexible path to user desktop… path strings are HFS (colon delimited)
                    export format PDF type to (path to desktop as text) & "PROOFS:" & name & ".pdf" without showing options
          end tell
end tell

Saving to PDF using VBA in Excel 2007 using security features such as password and print restriction

Good Afternoon,
I am wondering if there is a way to implement the security features such as password and print restriction while saving a document to PDF using VBA in Excel 2007.
Regards,
Steve

Bill,
Thank you. I was able to find the security setting section. The problem I have now, however, is writing the VBA to save to PDF and incorporate the security settings. I thought if i applied the settings to the Excel document I was working on it would carry over, but this does not seem to be the case. Any idea's?
Regards,
Steve

I'm trying to timestamp (RFC 3161) a pdf using my own timestamp server hardware but always get an error: "Certificate invalid for use" ...

I'm trying to timestamp (RFC 3161) a pdf using my own timestamp server hardware but always get an error: "Certificate invalid for use" (Original text - pt_BR:O certificado não é válido para uso). How can I get more info on what I'm missing or whats wrong with the certificate?

Which Acrobat version are you using? Do you use "Document Timestamp" command? If so, do you get this error during the signing process and the signature is not created or signature is created and you get this error when it is validated? If the latter you can open signature properties, click on the "Advanced Properties" and in the next dialog on timestamp's "Show Certificate". If you get this error during the signing process do you get an alert that shows some cryptic info with a number? If you do provide the content of this alert.
Also which Acrobat version (including minor) are you using?

IPad and Secure Email Certificate. How to encrypt e-mail using certificates *. p12?

Dear all!
I would like your assistance in the following matter:
iPad and Secure Email Certificate.
How to encrypt e-mail using certificates *. p12?
What software do I need to buy?
Thanks.

Confirm you have imported your certificates into the Windows Certificate store?
Check the info below for the proper procedure.
1. Locate the certificate files you saved on your computer. Double-click the first .P12 file.
2. In the Certificate Import Wizard Dialog, click Next.
3. The file you selected displays in the File Name field. (If it is not already displaying in the field, click Browse to select it.) Click Next.
4. Enter the appropriate backup password:
For the digital certificate file, enter the password that the Stache web page gave you when you downloaded the certificate.
5. Clear the Enable Strong Private Key protection option.
6. Select the Mark this key as exportable option.
7. Make sure the default option Automatically select the certificate store based on the type of certificate is selected and click Next.
8. The application displays a summary of the settings. Click Finish.

Programmatically encrypt PDF using User Certifcate

Hi all,
I would like to programmatically encrypt a pdf using a user certificate (.cer), where the user certificate is stored in a specified directory. Is there a way to do it using vb.net? I had a look at the the acrobat sdk, but couldn't find relevant coding samples to perform the above.
Please help.
Thanks.
Jess

I now try to write the pass the AcroJS script in my vb.net code through the addScript function of the JSObject:
Dim jso As Object = pdDoc.GetJSObject
Dim JSScript As String = "security.getHandler(""Adobe.PPKMS"", true); "
jso.addScript("Test", JSScript)
However, it gave an error when i tried to execute the getHandler function. I tried putting the code directly into Acrobat as well and that didn't work either.
Am I missing something? Please help.
Thanks.
Jess

Why unable to sign PDF with certificate after applying Nitro PDF password protection? (despite it explicitly allowing signing with certificates)

I used Adobe Reader XI to sign PDFs with certificate, which worked perfectly. Except that the PDF could still be edited by other programs (for example, Nitro PDF) after the signing (but not the fill out fields and the signature). To apply password protection makes sense to avoid changes in the PDF being made after it has been signed. So I applied password protection via Nitro PDF that allows only enter fill-out fields and signing. But when I open it with Adobe Reader, the filling out works fine, but the signing part is not available to click on it (all of the buttons under "Sign" tab are grey). When I go on the Security properties with Adobe Reader, I can explicitly see that signing of this PDF is allowed and yet the option is not open to use for me anymore.
Any ideas on why it is the case and what I could do about that?
Many thanks!
O.

Actually yes, I just asked my colleague to assist me with this, he password-protected the PDF with Acrobat 8, explicitly allowing for signing and fill-out functions, it also appears in Adobe Reader under security properties as "allowed", but it is not open to use in the Reader for me anymore (grey buttons).

Sign a pdf using usb token

I am using below code to sign a pdf using itextsharp version 5.5.1.0 . It works fine. But itextsharp 5.5.1.0
is having AGPL and i think it cannot be used in my application freely. But by using version below 4.1.6 which has GPL licence the same code does not work. So is there any alternative?
using System;
using System.Windows.Forms;
using System.IO;
using System.Security;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;
using iTextSharp.text.pdf;
using iTextSharp.text.pdf.security;
namespace SignPdf
public partial class Form1 : Form
public Form1()
InitializeComponent();
private SecureString GetSecurePin(string PinCode)
SecureString pwd = new SecureString();
foreach (var c in PinCode.ToCharArray()) pwd.AppendChar(c);
return pwd;
private void SignWithThisCert(X509Certificate2 cert)
string SourcePdfFileName = textBox1.Text;
string DestPdfFileName = textBox1.Text + "-Signed.pdf";
Org.BouncyCastle.X509.X509CertificateParser cp = new Org.BouncyCastle.X509.X509CertificateParser();
Org.BouncyCastle.X509.X509Certificate[] chain = new Org.BouncyCastle.X509.X509Certificate[] { cp.ReadCertificate(cert.RawData) };
IExternalSignature externalSignature = new X509Certificate2Signature(cert, "SHA-1");
PdfReader pdfReader = new PdfReader(SourcePdfFileName);
FileStream signedPdf = new FileStream(DestPdfFileName, FileMode.Create); //the output pdf file
PdfStamper pdfStamper = PdfStamper.CreateSignature(pdfReader, signedPdf, '\0');
PdfSignatureAppearance signatureAppearance = pdfStamper.SignatureAppearance;
//here set signatureAppearance at your will
signatureAppearance.Reason = "Because I can";
signatureAppearance.Location = "My location";
signatureAppearance.SignatureRenderingMode = PdfSignatureAppearance.RenderingMode.DESCRIPTION;
MakeSignature.SignDetached(signatureAppearance, externalSignature, chain, null, null, null, 0, CryptoStandard.CMS);
//MakeSignature.SignDetached(signatureAppearance, externalSignature, chain, null, null, null, 0, CryptoStandard.CADES);
MessageBox.Show("Done");
private void Form1_Load(object sender, EventArgs e)
private void button1_Click_1(object sender, EventArgs e)
//Sign with certificate selection in the windows certificate store
X509Store store = new X509Store(StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly);
X509Certificate2 cert = null;
//manually chose the certificate in the store
X509Certificate2Collection sel = X509Certificate2UI.SelectFromCollection(store.Certificates, null, null, X509SelectionFlag.SingleSelection);
if (sel.Count > 0)
cert = sel[0];
else
MessageBox.Show("Certificate not found");
return;
SignWithThisCert(cert);

hi.
you may return to the iTextshap version to 5.3.3, it works fine to sign a PDF using external USB token.
free C#
Excel component being evaluated, any other recommendation is appreciated.
Thanks and Regards.
But version 5.3.3 is also having AGPL licence, As i said in question
version below 4.1.6 has GPL licence.

Permissions with problem when encrypting pdf with certificate

I am using the following javascript code to encrypt a pdf using a certificate:
                    var thePermissions = {
                         allowAll: false,
                         allowAccessibility: false,
                         allowContentExtraction: false,
                         allowChanges: "none",
                         allowPrinting: "none"
                     var theCertificate = security.importFromFile(
                         "Certificate",
                         "/c/user.cer"
                     var theUserEntity = {
                         firstName: "The",
                         lastName: "User",
                         fullName: "The User",
                         certificates: theCertificate,
                         defaultEncryptCert: theCertificate
                     var theGroup = { userEntities: [ theUserEntity ], permissions: thePermissions };
                     encryptForRecipients( { oGroups: [ theGroup ] } );
                    saveAs("encrypted.pdf");
The file "encrypted.pdf" resulting is in fact encrypted, but the permissions doesn't seem to be correct. For instance, the Document Properties show that there are no document restrictions (DocumentProperties.PNG), but when the details are shown, it seems that the correct restrictions apply (DocumentSecurity.PNG). As can be seen in the permissions variable, there should be no permissions to the pdf generated. Can someone possibly help me with this?
Additional info: there should have no human interaction in the process, the certificate is not fixed (preventing using encryptUsingPolicy), and will be selected based on the file name of the original pdf.

Hi Leonard,
I see the same thing executing the script from the JavaScript console. There is a slight wrinkle in the steps to reproduce. Even if everything worked as it's supposed to, you would still need to close and then reopen the file in order to get the perm restrictions to take effect. This is because when you initially encrypt the file you are still the document owner, and thus none of the perms have yet taken effect. However, once you do close and then reopen the file (thus forcing an authentication), the file should open with the perms being enforced, but alas, they are not.
Interestingly, if you go into the Document Properties and then select the Security tab (or just click the Permissions Details button in the DMB) you see that the Restriction Summary shows that everything is allowed, but when you click the Show Details button, which just displays the restrictions applicable to the encryption handler, it shows the correct settings. Of course the real bug isn't that the restriction summary is incorrect, but rather that it is correct and all of the supposedly restricted operations are allowable.
I'll enter this as a bug against 10 along with the ER to add the encryption algorithm as an option to the encryptForRecipients JS function.
Steve

Print to PDF - using Snow Leopard (Saving a PDF file when printing is not supported. Instead, choose

i have a PDF form that i created that is used as a custom proposal that my company sends out to potential clients. the form in its editable state is only used internally. we recently upgraded to snow leopard, but prior to the upgrade, we were able to fill the custom proposal form out using adobe reader, and, as you well know, we weren't able to save that edited document as a PDF with the custom form fields filled out. our work around using adobe reader was to print to a pdf using the adobe pdf printer in the printer dialog. with the addition of snow leopard, however, instead of choosing the adobe pdf printer, we were to choose PDF from the bottom left corner, then Save As PDF, and it would spit out an uneditable pdf that then allowed us to email it to the potential client without them being able to edit it as well as have an internal, digital copy for our records instead of having lots of paper floating around (i know this is also doable using security that disallows the client certain editing privileges, but printing to a pdf is much quicker and more efficient, and the pdf security isn't really that secure at its best).
in any case, i came across this gem of a post here on the support forums that installs another option from the PDF drop down on the bottom left of the print dialog menu that reads Save As Adobe PDF and is supposed to do exactly what i am trying to get it to do...print to a pdf file from adobe reader.
http://kb2.adobe.com/cps/509/cpsid_50981.html
once i updated to acrobat 9.2 (as the link above suggests 9.1), however, the Save As Adobe PDF does appear in the print dialog menu, but it still gives me the same error that acrobat 8 - 9 gave me while using Snow Leopard — Saving a PDF file when printing is not supported. Instead, choose File > Save — and as i've already explained, you can't save an edited pdf form in reader (as i am the only one in the office with acrobat) and still keep the fields as you've entered them in. the only work around is to print to a pdf but is apparently having some recent problems.
using acrobat, however, i know that i can save the editable pdf as a new file with the fields customized as i have left them, but it still saves it as an editable pdf and the print to a pdf option still remains the best option...that way we have digital copies internally that are uneditable that can be printed at any time or emailed to the client.
how can i do print to a pdf, based on what i've written above, using snow leopard and acrobat and reader?

A simple way is to flatten the form fields, which converts the field appearances to regular page contents. You can do this with JavaScript or PDF Optimizer (Advanced > PDF Optimizer > Discard Objects > Flatten form fields). A very nice script that adds a custom menu item can be found here: http://www.uvsar.com/projects/acrobat/flattener/

Highlighting text & adding notes to a secured pdf

Hi,
I have a secured pdf (locked for edit) which is fine by me, but why can't I highlight the text or add notes to that PDF?
Am i missing something? I am not altering the text or anything, just highlighting it...
Other application, as well as the Windows 8 reader do allow it!
I am using Adobe PDF reader touch for Windows 8.
Thanks

We bought a PDF book from the site that you mentioned and inspected the document restrictions. The PDF book is encrypted.
Currently, Adobe Reader Touch does not support any changes to encrypted PDF documents, even if the document permissions allow "Changing the document" or "Commenting".
We hope to offer the capability of making changes to encrypted PDF in a future release. Sorry for the inconvenience.

How to configure Oracle 10g Advanced Security to use SSL concurrently with

How to configure Oracle 10g Advanced Security to use SSL concurrently with database User names and passwords
In Oracle Advanced Security Documentation it is mentioned that i can use SSL concurrently with DB user names and passwords. But when i configure the client certificate on the client my DB connection is getting authenticated using the certificate, which out passing user id or password.
We want to connect to Oracle DB over SSL channel so that the data packets are not in clear text. Also we want the user to make a connection using user id and password.
Basically we want SSL with out authentication.
Need your expert advice

Read the documentation (I have given following links assuming you are running a 32 bit architecture)
Server installations:
http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14316%2Ftoc.htm&remark=portal+%28Books%29
Client installations:
http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14312%2Ftoc.htm&remark=portal+%28Books%29
You can find the required books (if not using 32 bit architecture) from
http://www.oracle.com/pls/db102/portal.portal_db?selected=3

Secure PDF using certificate

Similar Messages

Maybe you are looking for