Install AATL Certificates On Linux Headless

[lurk skywalker]

On a Linux server (headless) I am using a CLI based solution to certify PDFs, with the help of an Entrust token that contains our certificate. In order to produce LTV enabled PDFs, the AATL certificates need to be available on the machine where the certification is taking place.

To illustrate the problem, this is the flow on windows, with a brand new install of the current version of Reader and the token plugged in:

a) if you certify the document before telling Reader to download the AATL certificates (per these instructions), you will end up with this:

b) once you install the AATL certificates then open the document certified in the step above, you will see that the certificate is now valid, but the signature is not LTV enabled. That's progress, as now you only have one problem left.

c) if you sign a new document again, this time AFTER the AATL certs were installed, you will end up with a valid signature which IS LTV enabled. This signature will be fully valid, with LTV, on ANY computer where Adobe Reader has had the AATL certs installed (again, via the instructions mentioned earlier).

Again, in order to produce LTV enabled PDFs, the AATL certificates need to be available on the machine where the certification is taking place. How do I download these certs without installing Adobe Reader?

[ls_rbls · Accepted solution]

Hi,

In order to download  the necessary root certificates, and to be able to complete automatic digital signature verification , you need to subscribe to one of the three Adobe Approved Trust List certificate authorities.

See here: https://helpx.adobe.com/acrobat/kb/certified-document-services.html 

See also, more here: https://helpx.adobe.com/acrobat/kb/approved-trust-list2.html