Acrobat DC Signature with Smartcard - Alogrithm

Forum|Forum|4 years ago
January 14, 2022
1 reply
5117 views

Hello,

we have ECC Smartcards to sign documents with qualified electronic signatures following the EU eIDAS Standard. Therefore the Smartcards were issued from Telesec PKS. The Smartcards are working, we have signed several files with other software.

When loading the required PKCS#11 modules we are able to see the certificate from the smartcard in Acrobat DC. But when we try to sign a file using this certificate we get the error that we are using an unsupported algorithm.

Does anyone know why we cannot sign documents with the smartcard? Following this page https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSigDC/standards.html we should be able to use ECDSA elliptic curve P256 with digest algorithm SHA256 which i guess means SHA256 ECDSA.

Many thanks in advance
Max

Security digital signatures and esignatures

T

Thomas2312321424534

Participating Frequently

Hi Max, have you maybe found a solution in the meantime? Today, I received the same Telesec card, exactly with the algorith that is mentioned in your screenshots. I was happy to have figured out the PKCS#11 integration in Acrobat, but now I am stuck with the "not supported algorithm".

T

Thomas28220369yjvb

Participant

Hi Max,

I was able to successfully sign with a Telesec ECC smartcard in Adobe Reader. My approach does not use the PKCS#11 driver. Instead I installed the " Read Only Cardmodul zur "Signature Card 2.0" - Mit ECC-Unterstützung " (Service -> Downloads -> Produkte & Lösungen -> TCOS Cardmodul zum Microsoft® Smartcard BaseCSP). This loads the smart card certificates into the Microsoft certificate store.

After importing the certificate chain http://tqrca1.pki.telesec.de/crt/TeleSec_PKS_eIDAS_QES_CA_5.crt and http://tqrca1.pki.telesec.de/crt/TeleSec_qualified_Root_CA_1.crt into Windows, I was able to sign with the card using Adobe.