Sign with a smartcard

Question

hello, Following the migration of the acrobat reader version with the 11.0.9 release, we have seen a regression on the ability to sign a pdf document with an integrated smart card certificate. The 11.0.8 version allowed to do this. Are you aware of this regression? The certificate has the key usage attribute: critical digitalSignature

Answer 1

Hi,
You can find somes details about the problem to sign with a certificate embedded in the smartcard.
For your information, find somes details about the properties of the certificate embedded with the command openssl x509 -in file -txt :
           Netscape Cert Type:
                SSL Client
            X509v3 Extended Key Usage:
                TLS Web Client Authentication, Microsoft Smartcardlogin
            X509v3 Key Usage: critical
                Digital Signature
In the second point; The return of the information given by the commands CertUtil –SCInfo is :
0: Dell Dell Smart Card Reader Keyboard 0
  1: Gemplus USB Smart Card Reader 0
--- Lecteur : Dell Dell Smart Card Reader Keyboard 0
--- Statut : SCARD_STATE_PRESENT | SCARD_STATE_INUSE
--- Statut : La carte est partagée par un autre processus.
---   Carte : Axalto Cryptoflex .NET
---    ATR :
     3b 16 96 41 73 74 72 69  64                        ;..Astrid
--- Lecteur : Gemplus USB Smart Card Reader 0
--- Statut : SCARD_STATE_EMPTY
--- Statut : Aucune carte.
---   Carte :
And the configuration of the driver of the smartcard is Gemalto minidriver for .NET Smart Card
Driver provider : Gemalto / Driver Date : 04/06/2011 / Driver version : 8.3.13 / Driver signature : Microsoft Windows Hardware Compatibility Publisher
a-   When i Checking the capabilities of the adobe reader XI version 11.0.09 to read the x509 certificate, the adobe reader is able to read the x509 Certificate. It s possible to check that with information about the certificate in the box approved identity.
in a second window confirms that the certificate is able to sign a document. In this way , will to try to sign a test file.
For that, we take a test file and we go on the menu “ File and Sign”. We have a box for draw a square for sign.
First problem, a box window don’t present my certificate embedded the SCard. We have only the software certificate which is presented.
In this way, we try to register my card in the store of adobe reader by create a ID. A window appear with a peripheral connected to the computer.
But the result is no really good and why have a message that adobe is not able to find the hardware token.
"Acrobat None normally found new digital ID. If your digital ID is on a hardware token, verify that it is plugged in and its interface is configured correctly. Contact your system administrator for further assistance."
with the previous version of adobe Reader, we have the capabilities to sign the file and the result is :
Version 9.0.0 - Detail of the signature: The signature is created with Abobe Reader 9.0.0   - the  Hash is SHA1
Version 11.0.7 - Detail of the signature: The signature is created with Abobe Reader 11.0.7   - the  Hash is SHA256
If i resume with the version 11.0.9, the connection with the smartcard driver is not etablish, but it is possible to read the certificat with the windows store.
Thanks of for yours feedback on this problem