Signatures on check

Can anyone point me to where I can find some documentation on digital signatures for check printing? Thanks.

Joseph,
I don't know of any reference to signature files for producing check. Reports does have the ablility to include image files on the report and if the signature capture software stores the signature as an image, we should be able to display that image on the report in the proper position. On the layout editor or the live previewer, you can add the image by selecting the link object item. Look at the online help for examples. Also look at "read from file" field property in help to see how to display an image also. Hope this gives you some ideas.
Regards,
The Oracle Reports Team.

Similar Messages

Fault in adobe digital signature revocation checking schema

Hello,
I have found some fault in adobe digital signature revocation checking schema. If OCSP response signing certificate contains CRL distribution point (in my case CDP (CRL) and AIA (OCSP)), online OCSP check executes, but after getting all chain certificate OCSP responses, validating signature against CRL (it’s looks from Local cache). It means you never get OCSP validation data in Adobe Acrobat or Reader signature revocation tab.
Adobe Revocation Checking Quick Key schema is following:
Check      Embedded revocation responses
Check      local CRL cache C:\Documents and Settings\<user>\Application      Data\Adobe\Acrobat\9.0\Security\CRLCache
Check      Online OCSP response
Check      Online CRL response
LAB environment:
Certificate      chain E-ME SSI      (RCA) (Root Certificate) -> E-ME PSI (PCA) (Policy Certificate) -> E-ME IS (CA1) (Issuer certificate) -> User      certificate (Document signing certificate)
Sign      PDF document (Ocsp-CHECK.pdf)      using Adobe Acrobat 9 with User certificate (Don’t add revocation information in signature)
Test steps:
Sign      PDF document using Adobe Acrobat 9 with User certificate (Don’t add revocation      information in signature)
Clear      Local CRL cache under C:\Documents and Settings\<user>\Application      Data\Adobe\Acrobat\9.0\Security\CRLCache
Open      signed file using Adobe Acrobat 9 or Reader 9
Verify      signature. Verification process finishes successfully. Under signature      properties in certificate windows and user certificate revocation tab you      can see that revocation information data comes from CRL. The same for all      chain certificates. But if we look in chain and user certificate its holds      AIA record for OCSP service.
After      a couple of tests I tried to disable access for Acrobat to local CRL cache      folder (Everyone – Full control deny).
After      disabling access to local CRL cache folder - verify the same signed PDF      file. Opening document you can see OCSP checking progress and verification      process finishes successfully. Under signature properties in certificate      windows and user certificate revocation tab you can see that revocation      information data comes from OCSP. The same for all chain certificates.
Resolution:
Its looks when Adobe starts online OCSP checking and receives OCSP response they start parsing OCSP response signer certificate and check OCSP signer certificates revocation information. In this process CRL for OCSP signer certificate is downloaded and placed in Local CRL cache C:\Documents and Settings\<user>\Application Data\Adobe\Acrobat\9.0\Security\CRLCache
Somehow when Adobe gets all chain certificate OCSP responses and have verified also all OCSP signer certificates, online OCSP check is no more continued and revocation information are taken from Local CRL cache.
Can you please help me to clear how to deal with this problem, to make sure that procedure works correctly?
Message was edited by: Gatis Žeiris

Sorry i add corect link to Signed test file: http://www.dsistemas.lv/files/Ocsp-CHECK.pdf

Electronic Signature in checks

Hi All,
Is it possible to have a electronic signature on a paycheck during the priting of the check.
The siganture should vary with different conditions.
Thanks in advance.
Regards
Satish.

Hi,
Please take a look at http://help.sap.com/saphelp_webas630/helpdata/en/53/251a355d0c4d78e10000009b38f83b/frameset.htm. See if it helps.
Regards

How to digital signature in check printing.

Hi Team,
A new digital signature has been given to me by payroll team and requested me for some configuration changes so the new digital signature appears on the check during check printing program.
Can some one give me step by step procedure of how to do this in SAP.
thanks and appreciate your help in advance.

Hi Team,
Please let me know how to do this in SAP?

Need help with Signature on Checks using SAP SCRIPT

Hi,
I am looking for some help on how to get the Printer Resident Singature on to the Check using SAP Script. We have a HP Laser 8150 Priter in which the Chip Contains the Signature ( Printer Resident Singaure ) and currentlly the ORACLE application is able to print this signature on the checks. Right now we are in Migration to SAP and we are trying to get this Signature to print on the Check using SAP Script.
Please help us.

There are many ways to do this, the simplest way to print the signature is using HEX ENDHEX command.
1. Print the Printer font list from the printer configuration menu, Find the signature in the font list, next to it there'll be esacape sequence in ASCII and Hex format.
2. Add the following command in the window of the signature:
/: HEX TYPE PCL
/= Enter the Hex escape sequence(begins with 1B) from first step
/: ENDHEX
Regards
Sridhar

Accounts Payable Check Signatures

We have a requirement for check signatures that I am not certain how to satisfy;
There are four people in the company who are authorized to sign checks but for each check run only two of the four will perform a review / audit. The Vice President wants only signatures of the two who reviewed the check run to appear on the checks.
Any suggestions would be greatly appreciated!
Thanks,
Kelly

Hi Kelly
Check out the dynamic signatures for checks on the XMLP blog ...
http://blogs.oracle.com/xmlpublisher
regards
Tim

Validate Digital Signature - Check CRL

Hi all,
(1) Is it possible for LiveCycle Document Security to validate the digital signature and check CRL, if there is NO CRL Distribution Point in the certificate itself?
(2) Can I hardcode the CRL's URL in the LiveCycle Document Security's configuration file?
Thanks.
Sanney

Sanney,
I don't know about the CRL URL question, but if I understood correctly what you are trying to achieve, then:
If you already have CRLs or certificate files at your disposal, you can store them in disk. You can then select "advanced" option when installing. This will allow you to point at the directories containing the credentials , so these can be included as an integral part of the overall server deployment.
If later on you want to update the credentials, you can run Configuration Manager. You must then rededploy the updated server components to the application server.
I'm currently writing this out of memory, but the documentation is very clear about this procedure.
HTH,
Evangelos

Signature on the Check Priting

Hello Experts,
As we have to support mutliple country's SAP Systems, We have different landscapes. There is a new requirement to add signature on Check Priting Form from country A. As we already have implemented this functionality in other country's landscape(which was implemented 10years back). So when I looked at the SAPScirpt(Z_PRENUM_CHECK) to see how it was designed, there is a window for Signature.
The text-element for this window is:
*PRINT-CONTROL ZDABC
!"#$%&'()*
+,-./01234
56789:;<=>
?@ABCDEFGH
Before looking at this Text-Element, I had expected that they would have uploaded a .tiff file of signature and used it for printing.
PS: The Print Program RFFOUS_C was never changed. I have searched for the Print Control ZDABC in SPAD and could not found.
Can anybody please explain what does that symbol mean and how the signature functionality was implemented?
Thanks.

Closing this post as it is moved to "appropriate" forum.

Signature NOT coming on top (Checked the option as well)

When I check the box for "place signature above quoted text", the signature is still displayed at the bottom of the email when adding a signature manually. This is really frustrating since I respond to a client and then use a signature at the end of the email in all of my emails. Currently, when the box is checked, the signature is always placed at the bottom. Is there anything I can do about this? If I cannot resolve this, I'll have to move back to Entourage and all of the work moving will be wasted. Any help would be greatly appreciated.

This is driving me mad too.
I have just tested this and found that if I have selected a signature in the Preferences using Choose Signature and checked Place signature above quoted text then the selected signature does get placed correctly.
If one then replies to an email this default signature will be used, but it can be changed to another signature and this change replaces the signature text above the quoted text. So use a default signature that is general but applicable to all recipients then have client specific signatures that can be selected from the list.

AP Payment approvals with Digital Signature

Hi,
Below is the requirement for workflow in AP. Any guidance is greatly appreciated.
In the current Accounts Payable setup,SAP Check Print Form has CEOu2019s signature.
Checks get printed with CEO signature in one batch sorted by lowest to highest check amount. The accounting clerk pulls out all checks worth more than $50,000 and requests AP head to verify and stamp her signature on each of those checks.
The client wants a workflow in place which requires the checks which are greater than 50k to be routed to the inbox of AP Head for approval. Once AP head approves them, AP clerk should be able to print all checks together and checks above $50,000 should print with two signatures (CEO and AP Head). But the rest of the checks will be printed only with CEO's signature.
Note: There is no requirement to have communication with the bank.
Thank you

Hi,
This is not a standard WF.
Please search in the forums here for getting guidance. FSCM forum is certainly not the place to find answers.
Regards
Heinrich

Error checking in document to content server

Hi,
While storing the document to content server we are getting "Error while checking in and storing " error. We use ECC 6.0 Request any inputs where to trace this error.
Thx.
Anirudh,

Hello Anirudh,
i assume that you get this error only after you click on the save button.Before clicking on the save button i assume you had checked in the original.
Suggest you to put start the debugger using "/h" and then click on the the Save button. Once the debugger opens, put a break point on the "Message" using the debugger. And start debugging using F8 key. When the control stops at any message statement , just have a look at the content of the internal table filled before the Message stmt. It would help you to figure out the exact cause of the error message.
Seeing the error message , i think that in your case it might be that signature are not sent from your system to the content server.
You can see the details about the signature associated to he content repository from the "csadmin" transaction. if you have any problem with regarding to signatures, just check if you have any active signature. I think there is not active signature, just select one signature and activate the signature.
If the problem still exists and it maps to the content server, contact your content server admin.
Hope this helps you out, Best of luck.
Regards,
Om

Verifying a Digital Signature

I have a smart card, which I am trying to use to digitally sign some bytes. Then I want to verify the signature using the public key which I can get from the certificate on the smart card.
I am able to send some bytes to the card (using an apdu) and get back some RSA signed bytes. But when I try to verify the signature, it always returns false.
To verify, I do:
X509Certificate x = ... //gets the certificate from the card
Signature sig = Signature.getInstance(x.getSigAlgName()); //"SHA1withRSA"
sig.initVerify(x.getPublicKey());
sig.update(dataBytes, 0, dataBytes.length);
boolean isSigned = sig.verify(signed);
As far as I can tell, this part is good.
I think my problem is related to how I am sending the bytes to the card to get signed. Sending dataBytes in plaintext returns errors regarding length. It seems the signing command I am using on the card wants the data to equal the key length (data=128 byte, key=1024 bit). So what I did next was an attempt to hash the data and then pad it before I send it to the card.
     MessageDigest md = MessageDigest.getInstance("SHA1");
     md.update(dataBytes);
     byte [] digest = md.digest();
     PKCS1SignaturePadding pkcs1 = new PKCS1SignaturePadding(PKCS1SignaturePadding.SHA1);
     byte [] padded = pkcs1.encode(digest, 128);
But after I sign, I try to verify the signature but it still returns false. I'm not sure if I'm doing something wrong or if I'm misunderstanding something (I'm relatively new to digital signatures and smart cards).

PKCS#7 SignedData objects are far more complex then it looks like you are taking them. First the PKCS#7 SignedData object will contain the OID for the message digest algorithm used and for the encryption algorithm used. From the looks of your code you are simply assuming MD5.
It also contains all of the data that was signed which is typically much more than just the document. It also of course contains the public keys and signatures which singed the document. In your case it will probably only have one public certificate and one signature.
Also note that a signature is an encrypted hash. Looking at your code I do not see you use encryption at all or rather for verification decryption.
Here is the basic process a signature takes.
MessageDigest md = MessageDigest.getInstance(algOID);
byte[] digest = md.digest(message.getBytes(charEncoding));
Cipher c = Cipher.getInstance("RSA/2/PKCS1Padding");
c.init(Cipher.ENCRYPT_MODE, priKey);
byte[] signature = c.doFinal(digest);Note that the resulting byte array is not the message digest but the encrypted message digest. You must use the corresponding public key to decrypt the signature to get the message digest value. It is because the trusted public key can decrypt the correct message digest that we know it was encrypted by the holder of the private key. It is because the decrypted message digest value is equal to my computed message digest value that we know the document has not be altered...
Now PKCS#7 SignedData does not take the message digest of the document, in your case your PDF. It creates a message digest on an ASN.1 object which includes the bytes of your document plus a bunch of meta data.
For more info on the exact format of a PKCS#7 signature file check out
http://www.rsasecurity.com/rsalabs/pkcs/pkcs-7/index.html
Look through this doucment for SignedData as a starting place and follow through all of the sub objects that make up a SignedData object. This will give you an idea of what is involved.

Verifying a Digital Signature using message digest

Hi, i am new to java.
I have a Digitally signed document, i wanna verify this signed document against the original one.
i got the idea from this link:
http://help.sap.com/saphelp_45b/helpdata/en/8d/517619da7d11d1a5ab0000e835363f/content.htm
i signed a pdf doc with my SmartCard. the third party signing tool passed me the PKCS7 digital signature and i stored it in database. the problem arose when i retrieved this digital signature from DB and verified against the original doc using the message digest method. the base64 result strings are always not equal.
I am sure about this:
-the retrieved digital signature was GOOD.
-the original doc was GOOD.
but why i can't get the same 2 message digests? can somebody please help?
below is part of my code:
while (rsetDs.next())
     InputStream DSName2 = rsetDs.getBinaryStream(1);
     ByteArrayOutputStream byteStream = new ByteArrayOutputStream();
     byte[] myByte = Base64.decode(byteStream.toString());
     ByteArrayInputStream newStream = new ByteArrayInputStream(myByte);
     CertificateFactory cf = CertificateFactory.getInstance("X.509");
     Collection c = cf.generateCertificates(newStream2);
     Iterator i = c.iterator();
     while (i.hasNext())
          Certificate cert = (Certificate)i.next();
          X509Certificate cert1 = (X509Certificate)cert;
          try
               java.security.MessageDigest md = java.security.MessageDigest.getInstance("MD5");
               /*=============DB MD (BEGIN)==================*/
               byte [] pubkeyByte = cert1.getPublicKey().getEncoded();
               md.update(myByte);
               md.update(pubkeyByte);
               byte[] raw = md.digest();
               String db_md = Base64.encode(raw);
               /*============DB MD (end)============*/
               /*=============PDF MD (BEGIN)==================*/
               DataInputStream m_disFile = new DataInputStream(new FileInputStream("C:\\" + "original_doc.pdf"));
               int m_iNum = m_disFile.available();
               byte[] msgBytes = new byte[m_iNum];
               m_iNum = m_disFile.read(msgBytes, 0, m_iNum);
               md.update(msgBytes);
               byte[] digestMd = md.digest();
               md.reset();
               String pdf_md = Base64.encode(digestMd);
               /*=============PDF MD (END)==================*/
..thanks in advance.

PKCS#7 SignedData objects are far more complex then it looks like you are taking them. First the PKCS#7 SignedData object will contain the OID for the message digest algorithm used and for the encryption algorithm used. From the looks of your code you are simply assuming MD5.
It also contains all of the data that was signed which is typically much more than just the document. It also of course contains the public keys and signatures which singed the document. In your case it will probably only have one public certificate and one signature.
Also note that a signature is an encrypted hash. Looking at your code I do not see you use encryption at all or rather for verification decryption.
Here is the basic process a signature takes.
MessageDigest md = MessageDigest.getInstance(algOID);
byte[] digest = md.digest(message.getBytes(charEncoding));
Cipher c = Cipher.getInstance("RSA/2/PKCS1Padding");
c.init(Cipher.ENCRYPT_MODE, priKey);
byte[] signature = c.doFinal(digest);Note that the resulting byte array is not the message digest but the encrypted message digest. You must use the corresponding public key to decrypt the signature to get the message digest value. It is because the trusted public key can decrypt the correct message digest that we know it was encrypted by the holder of the private key. It is because the decrypted message digest value is equal to my computed message digest value that we know the document has not be altered...
Now PKCS#7 SignedData does not take the message digest of the document, in your case your PDF. It creates a message digest on an ASN.1 object which includes the bytes of your document plus a bunch of meta data.
For more info on the exact format of a PKCS#7 signature file check out
http://www.rsasecurity.com/rsalabs/pkcs/pkcs-7/index.html
Look through this doucment for SignedData as a starting place and follow through all of the sub objects that make up a SignedData object. This will give you an idea of what is involved.

SAP LSO : Error Checking in Content

Hi All,
I am trying to check in the content from Authoring Tool to Content Management Repository of Portal.And I am getting the following error.
Address already in use: connect
java.net.BindException: Address already in use: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305) at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158) at java.net.Socket.connect(Socket.java:461) at java.net.Socket.connect(Socket.java:411) at java.net.Socket.<init>(Socket.java:310) at java.net.Socket.<init>(Socket.java:125) at com.sap.hcm.ls.shared.repository.access.wdslide.implext.SocketConnection.<init>(SocketConnection.java:37) at com.sap.hcm.ls.shared.repository.access.wdslide.implext.SocketConnectionManager.getSocketConnection(SocketConnectionManager.java:62) at com.sap.hcm.ls.shared.repository.access.wdslide.implext.HttpClient2.openConnection(HttpClient2.java:660) at com.sap.hcm.ls.shared.repository.access.wdslide.implext.HttpClient2.executeMethod(HttpClient2.java:257) at com.sap.hcm.ls.shared.repository.access.wdslide.implext.WebdavResource2.putMethod(WebdavResource2.java:2271) at com.sap.hcm.ls.shared.repository.access.wdslide.WDRepository.writeFile(WDRepository.java:697) at com.sap.hcm.ls.shared.repository.exchange.CopyMan$DeepCopyTask.doJob(CopyMan.java:645) at com.sap.hcm.ls.shared.util.MultiThreadWorker.run(MultiThreadWorker.java:399) at java.lang.Thread.run(Thread.java:534)
Does any one have an idea of what this error is about??Any help is greatly appreciated
Regards,
Santhosh

Hello Anirudh,
i assume that you get this error only after you click on the save button.Before clicking on the save button i assume you had checked in the original.
Suggest you to put start the debugger using "/h" and then click on the the Save button. Once the debugger opens, put a break point on the "Message" using the debugger. And start debugging using F8 key. When the control stops at any message statement , just have a look at the content of the internal table filled before the Message stmt. It would help you to figure out the exact cause of the error message.
Seeing the error message , i think that in your case it might be that signature are not sent from your system to the content server.
You can see the details about the signature associated to he content repository from the "csadmin" transaction. if you have any problem with regarding to signatures, just check if you have any active signature. I think there is not active signature, just select one signature and activate the signature.
If the problem still exists and it maps to the content server, contact your content server admin.
Hope this helps you out, Best of luck.
Regards,
Om

How to include signature ABOVE the quote, in a response?

The signature is always inserted below the quoted message, in a response. Is there a way to have the signature appear together with my own text, i.e. before the quoted message?
Thanks!

go to Mail preferences->signatures and check the box to place signature above quoted text.

Signatures on check

Similar Messages

Maybe you are looking for