Digital Certificate continually prompts to add a new Digital Certificate Identity

[John30142015ttb0]

Windows 11 Home, Version 22H2

OS Build: 22621.1702

Acrobat Reader version 2023.001.20174

I have been using a digital certificate issued by the Spanish authorities to sign documents in Reader for years. I recently had to update the certificate (not the first update), but after this most recent update I can no longer sign documents. When I do, I get the same prompt:

"This signature field requires a digital signature identity. Would you like to configure one now?"

I follow the onscreen process to create a digital id from a file. However, when I try to sign, the same prompt appears. It does not matter how many times I try. I restart and the issue persists.

When I check in Preferences/Identities&Trusted Certificates/More/ I can see the digital ID I have just created, in addition to the Windows Certificate Store. I have logged in, and the issue still persists.

I tried resetting Preferences to default, issue still persists.
This issue affects all PDF files I have tried to sign, including older PDFs which I had previously signed with older certificates. 

I repaired the installation of Adobe and the issue still persists.

I do not know what else to do try or do. Any help would be GREATLY appreciated.

John

[S. S]

Hi @John30142015ttb0,

Hope you are doing well. Sorry for your experience with Acrobat Reader's digital signing.

Acrobat allows only those digital Ids for signing the document with specific KU and EKU values. 

You can get details at the following link:

https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSig/changes.html#id2

The issue occurs when the certificates shared by the government have the EKU fields but has no required values.

I suggest contacting your CA to get the digital ID issued with the correct combination of KU and EKU.

Hope this helps.

-Souvik