Acrobat + Microsoft Information Protection (MIP) - Double Key Encryption (DKE)

Question

We just applied Microsoft Double Key Encryption (DKE), with a corresponding Sensitivity label. It works fine with Word and the MS Unified Labeling Client / Viewer. However, when trying to open a DKE-labelled file with Adobe Acrobat Pro, we get the error attached ("Double Key Consumption is Disabled").

No documentation whatsoever anywhere about this message. Google says "no results found".

By reverse-engineering (text search) the binaries of Acrobat and the libraries of the plug-ins (mip_protection_sdk.dll, mip_core.dll, mip_upe_sdk.dll), it seems to me that the libraries themselves support double key encryption. The basic Microsoft Dotnet API seems to have a "flighting" feature to enable it (https://learn.microsoft.com/it-it/dotnet/api/microsoft.informationprotection.flightingfeature).

The question is if Adobe Acrobat has a kind of flag somewhere (Windows registry? maybe at Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown) to enable this.

Any ideas anyone?

Many thanks in advance!

Kind regards

Thanos S.

Could you please advise how we can enable the possibility to view DKE-labelled files in Acrobat? Thanks

hussein_4160 · Accepted Answer

Hello, i had the same issue and this was the solution:
Suggestions:
1. double-check on registry setting as given in link (bEnableDKEAdmin set to 1)
https://helpx.adobe.com/in/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion
2. Also add Acrobat application client id in your DKE setup on Azure portal (portal.azure.com)
NOTE-More specifically Microsoft has suggested to do step 13 under section “Register your key store” on following link
>https://learn.microsoft.com/en-us/purview/double-key-encryption-setup#register-your-key-store

>You need to add Acrobat clientIds in those steps (Point a). That should permit AAD to issue tokens to your apps.
1. Acrobat Client id: "97bd680b-f203-4917-a342-308a3de4094a"

Martin G R · Answer

I do not get the exact same error, however we see the warning: "Double key consumption is disabled"
We've worked through the setup guide: https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion without any resolution - same warning with all registry keys enabled, except the Sovereign Cloud key.

Any input is welcome.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded