Adobe Acrobat Reader DC PKCS#11 ECC - unsupported algorithm error

[David5D15]

Hello, we tried to generate a digital signature with PKCS#11:

• Adobe Acrobat Reader DC version 2021.001.20145
• Default signing format: PKCS#7 - Detached
• PKCS#11 key stored on smart card (QSCD):
  CKA_KEY_TYPE: CKK_EC
  CKA_EC_PARAMS: { 1 2 840 10045 3 1 7 }
• ECDSA elliptic curve P256 with digest algorithm SHA256
• Windows 10, macOS Catalina

We successfully loaded the PKCS#11 module. We started the signature process, added the PIN and after we tried to save the document we received the following error message:
"Error encountered while signing: unsupported algorithm."

The last function is called by Acrobat is the C_GetAttributeValue with CKA_KEY_TYPE: CKK_EC. There is further communication between Acrobat and PKCS#11 module.

According to the Acrobat DC Digital Signatures guide, the above-mentioned algorithm is supported:
https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSigDC/standards.html
On the other hand, with Minidriver, we can generate a digital signature with the same key/certificate.

Is there any information about PKCS#11 supported algorithms?

Thanks

[arnauldd23274658]

Hello,

Is there any update on this problem please ?

Is this really supposed to be supported ?

Thanks all,

AD

[Koen225142565mmt]

Did you solved this problem. We have now the same problem. I have a new eID. But the certificates were not longer recognised. So I re-Installed Adobe Acrobat Reader DC. The certificate for signature is now accepted and tested (5 green check marks). But at the end of the process to sign a .pdf document the error appears: (dutch:) “Fout aangetroffen tijdens ondertekenen: Niet-ondersteund algoritme” (free translated:)”Error encountered while signing: Unsupported algorithm”. What can I do? Please answer.

[Koen225142565mmt]

The problem is solved. Solution : configure Acrobat Reader without pkcs#11 module.
If this module has already been linked, the already linked module must therefore be uncoupled again.
After unlinking, restart Acrobat Reader and try signing again.
BELGIUM uses software called eID middleware that communicates with the card for Windows. In the past Acrobat Reader could not use this middleware and Acrobat Reader needed the pkcs11 module to do the communication with the card. Recently, ADOBE has made the necessary changes so that READER can work with the middleware.
The pkcs11 module has now basically become optional within Acrobat Reader.

[Denis5E48]

Hi Koen, 

THanks for the help. Could you explain further how to set up the eid for acrobat since "ADOBE has made the necessary changes so that READER can work with the middleware." ? 

If it is not with the pkcs#11 anymore, how should I configure the card reader to work with Acrobat for digital signatures? 

[Jan223605198qle]

I have the same issue/experience. I removed the pkcs#11 but cannot manage to configure the card reader,..

Any support would be very helpfull

[S. S]

Hi @Jan223605198qle,

Hope you are doing well. Sorry for your experience with setting up your PKCS#11 cards.

Help articles are available that will help you better understand how to set up the card: https://adobe.ly/3FOZMtq.

Also, if you need to turn towards the eID software, here are some FAQs on their page, which might give you more clarity: https://adobe.ly/45Ix5Ji.

Hope this helps.

Regards,
Souvik.