Skip to main content
Participant
December 10, 2019
Answered

Trusted Root Certificate Not Validating Signatures

  • December 10, 2019
  • 1 reply
  • 10397 views

I'm having issues validating all digital signatures created from a certificate authority. 

 

I have the root certificate in the Windows Certificate Store under "Trusted Root Certification Authorities".  Trust ALL root certificates in the Windows Certificate Store for validating signatures is selected in preferences.  Yet when I sign a document with a digital signature created under this CA, it still fails to validate.  It will only validate when the actual digital signature cert is added.  I'm looking to have all digital signatures created accross our company's CA be validated by only the root cert.

 

Any ideas why the root certificate is not providing validation here?

(Using Acrobat Reader DC and Acrobat Standard DC)

 

Thanks 

This topic has been closed for replies.
Correct answer robg73190504

Can you briefly describe the steps that you've followed with Reader DC to try to validate the signatures?

 

Or is it simply not letting you adjust any preferences settings in Security, Security Enhanced and Trust Manager sections?


Figured it out!

For some reason I have to disable "Require certificate revocation checking to succeed whenever possible during signature verification" within Acrobat Reader.  But didn't have to do this within Adobe Standard.

Any ways, it's all working now.  Thanks for your input!

1 reply

ls_rbls
Community Expert
Community Expert
December 10, 2019

Did this problem started happening recently after an recent upgrade or update in your system?

 

Are all root certificates the most current ones from the CA authority?

 

 

Participant
December 10, 2019

It's something I'm setting up new right now.  Hasn't been used before.

Root certificate is the current one from CA.

Participant
December 10, 2019

Check in Adobe Acrobat preferences.

 

You may need to configure the Trust Manager and update the Adobe Approved Trust List.

 

AND / OR

 

manually removing and reinstalling the root ca certificates, OR, see if by selecting the appropriate timestamp servers also helps or not.

 

 

Informational link here:

 

https://stackoverflow.com/questions/24905170/validating-a-signature-without-intermediate-certificate 

 

However, i think the best possible explanation to your question is found here:

 

https://stackoverflow.com/questions/24905170/validating-a-signature-without-intermediate-certificate 

 


Update:

It's actually validating the signatures when I open the PDF with Standard DC, but when I open the same PDF with Acrobat Reader DC the signatures do not validate.

Thoughts?