Skip to main content
Participating Frequently
October 30, 2024
Question

How to disable the ability to create a self-signed Digital ID?

  • October 30, 2024
  • 1 reply
  • 1889 views

I've recently noticed that it's possible to create a digital ID within Reader/Acrobat Pro which also allows creation of a user based certificate. This also allows people to create a signature as someone other than themselves which is problematic for my organization. I have followed the steps to change the registry as noted in the Adobe documentation:

 

Computer\HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Security\cPubSec - bSelfSignCertGen (0)

 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSecurity\cPubSec - bEnableCEFBasedUI (0)

 

However the only change is the modern signature UI is changed - I can still create a new digital ID. Any advice?

 

 

1 reply

Souvik Sadhu
Community Manager
Community Manager
October 31, 2024

Hi @Dillon28281189vi0s,

 

Hope you are doing well. Sorry for the trouble.

 

With all the registry values you shared above, try this:

 

Computer\HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Security\cPubSec

Add Dword bEnableCEFBasedUI and assign the value 0.

More info here: Digital Signatures (https://adobe.ly/48qS7eV)

 

Let me know if this helps.


-Souvik

Participating Frequently
October 31, 2024

Hi @S. S,

 

Thanks for your reply. The linked article is what I referred to when trying this. Unfortunately changing the additional registry entry you mentioned did not resolve the issue. The modern signature UI is now reverted to the old UI as the registry change indicates however I am still able to make a new digital ID.

Souvik Sadhu
Community Manager
Community Manager
November 1, 2024

@Dillon28281189vi0s Thanks for the response.

 

Please allow me some time to get this checked with the team and get back to you.

 

-Souvik