I can sign as a different person

[valentin_7774]

Hello everyone,
Working as L1 internal support, I am witnessing a case where 3 users from the same department have each other's digital ID's stored locally in Windows's Internet Optinos -> Certificates directory. Thus resulting in having the additional option to sign as someone else.

They never exchanged laptops, yet windows is storing others's IDs. What could be causing this? Passing documents for signatures?

[Meenakshi Negi]

Hi valentin_7774,

Thank you for reaching out.

Please let us know how these digital IDs are created and saved. This information will give us some idea of what might be causing this behavior. Also, share the steps these users used to add the signature. 

We will try to replcate this behavior and share our inputs.

Thanks,

Meenakshi

[valentin_7774]

Hi @Meenakshi Negi,
Thank you for joinning this thread!
The digital IDs were created manually years ago, they were not issued/taken from corporate shared drive.
Acrobat reader/Preferences/Signatures/Identities & Trusted Certificates.

People report that this occured in the past, it was sporadical.
They are from one department, reporting that in the past user A had the signature of user B, then user B had user C's signature, and that pattern was switching.
believe that they have exchanged documents that needed signatures, possibly carrying already somoene else's digital ID which was somehow stored locally upon arrival.

We have deleted the other digital IDs from Windows's signatures. It is more than one week and I haven't got an answer if the alien IDs re-appeared.