Skip to main content
A
Athanassios25384468b2r5
New Participant
June 12, 2023
Answered

Acrobat + Microsoft Information Protection (MIP) - Double Key Encryption (DKE)

  • June 12, 2023
  • 2 replies
  • 7826 views

We just applied Microsoft Double Key Encryption (DKE), with a corresponding Sensitivity label. It works fine with Word and the MS Unified Labeling Client / Viewer. However, when trying to open a DKE-labelled file with Adobe Acrobat Pro, we get the error attached ("Double Key Consumption is Disabled").

No documentation whatsoever anywhere about this message. Google says "no results found".

 

By reverse-engineering (text search) the binaries of Acrobat and the libraries of the plug-ins (mip_protection_sdk.dll, mip_core.dll, mip_upe_sdk.dll), it seems to me that the libraries themselves support double key encryption. The basic Microsoft Dotnet API seems to have a "flighting" feature to enable it (https://learn.microsoft.com/it-it/dotnet/api/microsoft.informationprotection.flightingfeature).

The question is if Adobe Acrobat has a kind of flag somewhere (Windows registry? maybe at Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown) to enable this.

Any ideas anyone?

Many thanks in advance!

Kind regards

Thanos S.

 

Could you please advise how we can enable the possibility to view DKE-labelled files in Acrobat? Thanks

Correct answer hussein_4160

Hello, i had the same issue and this was the solution:
Suggestions:
1. double-check on registry setting as given in link (bEnableDKEAdmin set to 1)
https://helpx.adobe.com/in/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion
2. Also add Acrobat application client id in your DKE setup on Azure portal (portal.azure.com)
NOTE-More specifically Microsoft has suggested to do step 13 under section “Register your key store” on following link
>https://learn.microsoft.com/en-us/purview/double-key-encryption-setup#register-your-key-store

>You need to add Acrobat clientIds in those steps (Point a). That should permit AAD to issue tokens to your apps.
1. Acrobat Client id: "97bd680b-f203-4917-a342-308a3de4094a"

2 replies

Martin G R
Martin G R
New Participant
December 19, 2024

I do not get the exact same error, however we see the warning: "Double key consumption is disabled"
We've worked through the setup guide: https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion without any resolution - same warning with all registry keys enabled, except the Sovereign Cloud key.

Any input is welcome.

// Extensive experience with Microsoft Double Key Encryption
S_S
Community Manager
S_SCommunity Manager
Community Manager
January 20, 2025

Hi @Martin G R,

 

Hope you are doing well. Sorry for the trouble.

 

Would you mind sharing the below info:

  1. Please share the screenshot of registry setting.
  2. Please create and share logs as mentioned in following steps:
  3. Turn Sandbox mode off:  ( PreferencesàSecurity(Enhanced)àTurn off Enable Protected Mode at startup).
  1. Clear MIP credentials: 
    Preferences-> Security-> Microsoft Purview Information Protection-> Clear remembered account information
  1. Exit Acrobat
  2. Set Registry for MIP logging: 
    1. Turn on Registry:  HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\DC\MicrosoftAIP
    2. "bEnableLogging"=dword:00000001
  3. Start screen recording.
  4. Launch Acrobat.  Apply Double key encryption label.  Exit Acrobat
  5. Share the following items:
    1. Screen Recording
    2. Zip the folder for logs: C:\Users\<username>\AppData\Local\Microsoft\RMSLocalStorage
    3. registry screenshot from Point 1 above

 

-Souvik

Martin G R
Martin G R
New Participant
January 20, 2025

Hi
I will do that asap. Meanwhile, someone in Microsoft forums mentioned that it's only available for paid versions of Adobe - is that the case?

// Extensive experience with Microsoft Double Key Encryption
I
iCharles
Legend
June 13, 2023

Hi @Athanassios25384468b2r5 ,

 

Moving this thread to the Acrobat community for further assistance.

M
Michael31176369ryf6
New Participant
July 19, 2023

Hi! I'm very keen on hearing about DKE integration with Adobe. Where can I follow the discussion and latest updates from the Adobe side?

I
ivo_6417
Participating Frequently
January 7, 2025

@ivo_6417

 

Thanks! Forwarded this to the devs for investigation.

 

-Souvik


any News?

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices