Participating Frequently

Answered

Disable FIPS mode in Adobe Acrobat Reader DC?

Forum|Forum|7 years ago
October 18, 2018
6 replies
174046 views

Hi all,

I have searched far and wide, still can't figure out nor find any solution to disabling FIPS mode. Any documents that are configured to use digital signatures for us error out when signing with the following error:

"The document could not be saved. Use of non FIPS cryptography is not permitted while in FIPS mode." Then states document couldn't be signed obviously.

Anyone find a solution to this? I tried the bFIPSMode=0 manual HKCU entry that doesn't do anything. I also disabled protected mode. This instance of Adobe DC is on Windows 10.

Thanks for any help!

Correct answer BobDaWebGuy

Zer0Null,

FWIW, I just encountered this for the first time. The resolution, within my org, is to have that user added to FIPS-related Windows Active Directory Group. I don't know how the policy is configured, but that resolved the issue.

Best of luck to you!

Cheers,

Bob

BobDaWebGuyCorrect answer

New Participant

Zer0Null,

FWIW, I just encountered this for the first time. The resolution, within my org, is to have that user added to FIPS-related Windows Active Directory Group. I don't know how the policy is configured, but that resolved the issue.

Best of luck to you!

Cheers,

Bob

AnandSri

Community Manager

Hello @BobDaWebGuy!

I hope you are doing well. Thanks for sharing the steps that worked for you. This will help other users in the community facing a similar issue with an IT-managed machine. For an individual-managed computer, read and write permissions are required on the Adobe folders, as described above.

Feel free to reach out if you need any assistance.

Thanks,

Anand Sri.

F

frieda15A9

New Participant

It's been some years since this question was posted, but I don't see that anyone provided an answer, so here it is:

For those of you who do not control the admin rights to a .pdf, but need to sign it and are receiving above error message, you just need to drag .pdf to your desktop, and then open it with Adobe Acrobat Reader. You should then be able to sign it.

G

Glenn26848304hndh

New Participant

This solution sounds incredibly simple and I don't know why dragging a file onto my desktop and opening the document would then allow me to save a FIPS document. I tried it anyway and dragging this file to my desktop before opening it did not change the unwanted behavior.

C

Charis5D9B

Participating Frequently

I tried saving the doc to my desktop and it did NOT resolve the issue.

T

Test Screen Name

Brainiac

It sounds as you may have very strict registry blocks stopping software reading and writing preferences. Check with your admins for policies.

T

Test Screen Name

Brainiac

What do you have under HKCU\Software? Anything else other than Adobe ?

Zer0NullAuthor

Participating Frequently

Just the usual: Classes, Microsoft, Policies

T

Test Screen Name

Brainiac

Yes, that is DC, though it’s not the latest. You should have that in the registry if Reader ever ran. What does Regedit have under HKCU\Software\Adobe ?

Zer0NullAuthor

Participating Frequently

Only "\DC\AVGeneral" that I manually created for bFIPSMode

cadbury

Adobe Employee

Dear user,

Please confirm if you are setting the registry key correctly at the below mentioned path:

HKEY_CURRENT_USER/SOFTWARE/Adobe/Acrobat Reader/DC/AVGeneral/bFIPSMode

DWORD value to 0 to disable

Zer0NullAuthor

Participating Frequently

Correct, I have that entry yet FIPS mode is still enabled and the error is persistent.

Zer0NullAuthor

Participating Frequently

Dear user,

We could not reproduce the issue in house. We are able to use non FIPs compliant algorithms while signing when FIPS is disabled[with PM on/off] and not able to create with FIPs enabled.

Please could you tell us the Signature algorithm for the certificate[Select the digital id--View Details--Details--Signature Algorithm] .

Have you set any registry key to specify digest method while signing? Please could you go to HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Security\cPubSec and send us a screenshot of the registries set under this key.

I had to manually create the "HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\" path since it did not exist. So I would need to manually create "\Security\cPubSec" as well? What should I put under this key?

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded