Skip to main content
W
whispering_reality2281
New Participant
May 29, 2013
Question

Security violation error (error code 2148532330) in Acrobat Pro XI with Windows 8

  • May 29, 2013
  • 4 replies
  • 24377 views

I have two certificates, physically residing on the same (Belgian) government issued smart card. One is labeled "Authentication" (Intended usage: sign transaction), and the other is labeled "Signature" (Intended usage: sign document). I have been trying to add a signature to a pdf document in Acrobat Pro XI (trial) on WIndows 8 Home (64 bit). It works perfectly with the "Authentication" certificate, but all attempts with the "Signature" certificate yield the following error:

Error encountered while signing:

The Windows Cryptographic Service Provider reported an error:

Access was denied because of a security violation.

Error Code: 2148532330

The only relevant difference between both certificates that I have been able to spot, is in the "key usage" field of the certificate ("sign transaction" versus "sign document"). Any thoughts on what might be wrong?

Thanks.

This topic has been closed for replies.

4 replies

A
Amaruma2
New Participant
July 4, 2013

I got the following answer from FEDICT which describes a workaround while they are working on an update of their middleware

U kan als tijdelijke workaround de volgende procedure volgen:

Onze ontwikkelaars zijn momenteel bezig met nieuwe installatiepakketjes te bouwen die deze nieuwe minidriver bevatten. We hopen deze zo snel mogelijk te kunnen  publiceren op onze website.

A
Amaruma2
New Participant
June 4, 2013

Hey,

Problem is not linked to Adobe but seems to be a general problem with the Belgian eID and probably his middleware when accessing the certificate with KeyUsage=Non-Repudiation". You can easily reproduce he problem when signing a message under OUTLOOK (2010) and also with DigiSigner or PDF Sign & Seal from Ascertia. Need to find a contact at Fedict (the guys which have ownership of the Belgian eID middleware).

A
Anonymous
June 5, 2013

I assume you are implying "biztax" application here, right?

I have contacted their program lead, with no result at all.

Past days I have been searching for a solution - reinstalls / new systems - no solution.

This issue appeared a week or two ago only.

I found http://forums.adobe.com/message/5338853 useful - but no positive results either.

http://test.eid.belgium.be/faq/faq_nl.htm obviously didnt help either.

If anyone finds a solution to this issue, please do let me know - any help is appreciated.

Biztax tells to use the "signature", not the "authentication"  - but it is only Auth. that is showing up as option to sign (that works)

ps, did you fiddle with the Adobe Reader XI security settings and import that PKI etc as well? I hoped that would be the breaktrough. Sadly i'm still crying in my chair.

Oh, and dont forget: they claim nobody else got this issue. Maybe one or two people. (We got about 8 customers experiencing exactly the same symptoms at the same time )

>  I noticed that when I try to open the pdf  document that is 'signed' by the government it is not showing the filename in the title bar, but only " - Adobe Reader".    every piece of info helps I guess.

Obviously last version of Reader   11.0.03

J
jd256
New Participant
May 31, 2013

Hi,

I have the same problem. I've tested with Adobe Reader version 9.5, 10.1 and 11.0.3 and different OS versions  All versions give the same error.

This is also with a Belgian Eid card. Same behavior: can sign with authentication certificate, but not with signature certificate.

Any one knows a solution for this?

I
IsakTen-RwIoo2
Inspiring
May 29, 2013

"Sign transaction" means that the certificate is used to sign digital signatures. "Sign document" (in Acrobat-speak) actually means non-repudiation (revocation check is required for this certificate, subject to user preferences). Certificates that I have, have both . "Sign transaction" and "Sign document" usage bits set. You canot sign with a certificate that does not have "Sign transaction" usage. I do not know what's the purpose of a certificate that has only Non-repudiation (aka "Sign Document") usage set.

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices