Skip to main content
A
Athanassios25384468b2r5
New Participant
June 12, 2023
Answered

Acrobat + Microsoft Information Protection (MIP) - Double Key Encryption (DKE)

  • June 12, 2023
  • 2 replies
  • 7826 views

We just applied Microsoft Double Key Encryption (DKE), with a corresponding Sensitivity label. It works fine with Word and the MS Unified Labeling Client / Viewer. However, when trying to open a DKE-labelled file with Adobe Acrobat Pro, we get the error attached ("Double Key Consumption is Disabled").

No documentation whatsoever anywhere about this message. Google says "no results found".

 

By reverse-engineering (text search) the binaries of Acrobat and the libraries of the plug-ins (mip_protection_sdk.dll, mip_core.dll, mip_upe_sdk.dll), it seems to me that the libraries themselves support double key encryption. The basic Microsoft Dotnet API seems to have a "flighting" feature to enable it (https://learn.microsoft.com/it-it/dotnet/api/microsoft.informationprotection.flightingfeature).

The question is if Adobe Acrobat has a kind of flag somewhere (Windows registry? maybe at Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown) to enable this.

Any ideas anyone?

Many thanks in advance!

Kind regards

Thanos S.

 

Could you please advise how we can enable the possibility to view DKE-labelled files in Acrobat? Thanks

Correct answer hussein_4160

Hello, i had the same issue and this was the solution:
Suggestions:
1. double-check on registry setting as given in link (bEnableDKEAdmin set to 1)
https://helpx.adobe.com/in/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion
2. Also add Acrobat application client id in your DKE setup on Azure portal (portal.azure.com)
NOTE-More specifically Microsoft has suggested to do step 13 under section “Register your key store” on following link
>https://learn.microsoft.com/en-us/purview/double-key-encryption-setup#register-your-key-store

>You need to add Acrobat clientIds in those steps (Point a). That should permit AAD to issue tokens to your apps.
1. Acrobat Client id: "97bd680b-f203-4917-a342-308a3de4094a"

2 replies

Martin G R
Martin G R
New Participant
December 19, 2024

I do not get the exact same error, however we see the warning: "Double key consumption is disabled"
We've worked through the setup guide: https://helpx.adobe.com/enterprise/kb/mpip-support-acrobat.html#setup-requirements-double-key-encrpytion without any resolution - same warning with all registry keys enabled, except the Sovereign Cloud key.

Any input is welcome.

// Extensive experience with Microsoft Double Key Encryption
S_S
Community Manager
S_SCommunity Manager
Community Manager
January 20, 2025

Hi @Martin G R,

 

Hope you are doing well. Sorry for the trouble.

 

Would you mind sharing the below info:

  1. Please share the screenshot of registry setting.
  2. Please create and share logs as mentioned in following steps:
  3. Turn Sandbox mode off:  ( PreferencesàSecurity(Enhanced)àTurn off Enable Protected Mode at startup).
  1. Clear MIP credentials: 
    Preferences-> Security-> Microsoft Purview Information Protection-> Clear remembered account information
  1. Exit Acrobat
  2. Set Registry for MIP logging: 
    1. Turn on Registry:  HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\DC\MicrosoftAIP
    2. "bEnableLogging"=dword:00000001
  3. Start screen recording.
  4. Launch Acrobat.  Apply Double key encryption label.  Exit Acrobat
  5. Share the following items:
    1. Screen Recording
    2. Zip the folder for logs: C:\Users\<username>\AppData\Local\Microsoft\RMSLocalStorage
    3. registry screenshot from Point 1 above

 

-Souvik

Martin G R
Martin G R
New Participant
January 20, 2025

Hi
I will do that asap. Meanwhile, someone in Microsoft forums mentioned that it's only available for paid versions of Adobe - is that the case?

// Extensive experience with Microsoft Double Key Encryption
I
iCharles
Brainiac
June 13, 2023

Hi @Athanassios25384468b2r5 ,

 

Moving this thread to the Acrobat community for further assistance.

M
Michael31176369ryf6
New Participant
July 19, 2023

Hi! I'm very keen on hearing about DKE integration with Adobe. Where can I follow the discussion and latest updates from the Adobe side?

A
Athanassios25384468b2r5Author
New Participant
July 20, 2023

I haven't heard anything new. Adobe Enterprise Support reported

quote

Hi Admin,

Greetings from the Adobe Enterprise Support team!

As informed after checking with product experts, we only support MIP. Currently DKE is not supported by Acrobat / Reader

 

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices