Acrobat + Microsoft Information Protection (MIP) - Double Key Encryption (DKE)

[Athanassios25384468b2r5]

We just applied Microsoft Double Key Encryption (DKE), with a corresponding Sensitivity label. It works fine with Word and the MS Unified Labeling Client / Viewer. However, when trying to open a DKE-labelled file with Adobe Acrobat Pro, we get the error attached ("Double Key Consumption is Disabled").

No documentation whatsoever anywhere about this message. Google says "no results found".

By reverse-engineering (text search) the binaries of Acrobat and the libraries of the plug-ins (mip_protection_sdk.dll, mip_core.dll, mip_upe_sdk.dll), it seems to me that the libraries themselves support double key encryption. The basic Microsoft Dotnet API seems to have a "flighting" feature to enable it (https://learn.microsoft.com/it-it/dotnet/api/microsoft.informationprotection.flightingfeature).

The question is if Adobe Acrobat has a kind of flag somewhere (Windows registry? maybe at Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown) to enable this.

Any ideas anyone?

Many thanks in advance!

Kind regards

Thanos S.

Could you please advise how we can enable the possibility to view DKE-labelled files in Acrobat? Thanks

[iCharles]

Hi @Athanassios25384468b2r5 ,

Moving this thread to the Acrobat community for further assistance.

[Michael31176369ryf6]

Hi! I'm very keen on hearing about DKE integration with Adobe. Where can I follow the discussion and latest updates from the Adobe side?

[Athanassios25384468b2r5]

I haven't heard anything new. Adobe Enterprise Support reported

Hi Admin,

Greetings from the Adobe Enterprise Support team!

As informed after checking with product experts, we only support MIP. Currently DKE is not supported by Acrobat / Reader

[Miroslav338276459a7e]

Hi, 

are there any news about this? 
Is DKE still not supported? 

[ivo_6417]

found this one in the documentation... but it doesnt work for me.. 😞
https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpy... 

[S. S]

Hi @ivo_6417,

Hope you are doing well. Thanks for writing in!

When you mention not working for you, any specific error you see when trying to use MPIP? 

It would help us understand the issue better and assist with proper troubleshooting steps.

Can you ensure that the Double Key Encryption is set up for the user using the steps mentioned here: Set up Double Key Encryption (DKE) | Microsoft Learn?

Look forward to hearing from you.

-Souvik

[ivo_6417]

Yes i got this Error:
Error 2024-12-11 12:58:21.680 double_key_protection_request_transformer.cpp:93

MSRMSPIBroker (8476) "DoubleKeyProtectionRequestTransformer::CreateReplayRequest - Double key feature is disabled Failed with: [InternalError: 'Unrecognized exception']"

mipns::DoubleKeyProtectionRequestTransformer::CreateReplayRequest

3040

[ivo_6417]

and everything with MIP and DKE in our Enviroment worked fine... i can open every PDF with the AIP Viewer... 
Just issues with Adobe Acrobat

[S. S]

Thanks, @ivo_6417, for the details.

Any possibilities of sharing Fiddler logs with us?

More info available here: How to collect a network trace | Microsoft Learn

-Souvik

[ivo_6417]

yes i can do... what format would you like? i can not upload saz files here..
https://file.io/8I9cvfRZ6tSu

[S. S]

Thanks, @ivo_6417,

That works. Let me take this up with the team and get back to you.

-Souvik

[S. S]

Hi @ivo_6417,

An update: We have logged a ticket for the team to investigate further.

I will keep you updated through the thread with further info as and when I get it.

Thanks,
Souvik

[S. S]

@ivo_6417, Would you mind sharing MIP logs with us?

To share MIP logs:

1. Turn on Registry:  HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\DC\MicrosoftAIP

1. "bEnableLogging"=dword:00000001
2. Log path: "C:\Users\<username>\AppData\Local\Microsoft\RMSLocalStorage\msrmsLog.txt"

1. MIP SDK log: ( "C:\Users\<username>\AppData\Local\Microsoft\RMSLocalStorage\mip\logs\mip_sdk.miplog"

Also, try the same with Sandbox mode off  ( Preferences  -> Security(Enhanced) -> Turn off Enable Protected Mode at startup). Restart Acrobat and try.

Look forward to hearing from you.

-Souvik

[ivo_6417]

Hey @S. S  i generated Log Files today and uploaded here: https://file.io/lZrlyPliV19M

[ivo_6417]

if i disable potected Mode i got a diffrent error message:

[S. S]

@ivo_6417

Thanks! Forwarded this to the devs for investigation.

-Souvik

[ivo_6417]

any News?

[S. S]

Hi @ivo_6417,

This is in progress. 

Since it's a relatively new feature in Acrobat, the team is still investigating it, and updates about it should be available soon.

I'll check on this with the team and get back to you at the earliest.

-Souvik

[Martin G R]

I do not get the exact same error, however we see the warning: "Double key consumption is disabled"
We've worked through the setup guide: https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpy... without any resolution - same warning with all registry keys enabled, except the Sovereign Cloud key.

Any input is welcome.