Disable FIPS mode in Adobe Acrobat Reader DC?

[Zer0Null]

Hi all,

I have searched far and wide, still can't figure out nor find any solution to disabling FIPS mode. Any documents that are configured to use digital signatures for us error out when signing with the following error:

"The document could not be saved. Use of non FIPS cryptography is not permitted while in FIPS mode." Then states document couldn't be signed obviously.

Anyone find a solution to this? I tried the bFIPSMode=0 manual HKCU entry that doesn't do anything. I also disabled protected mode. This instance of Adobe DC is on Windows 10.

Thanks for any help!

[cadbury]

Dear user,

Please confirm if you are setting the registry key correctly at the below mentioned path:

HKEY_CURRENT_USER/SOFTWARE/Adobe/Acrobat Reader/DC/AVGeneral/bFIPSMode 

DWORD value to 0 to disable

[Zer0Null]

Correct, I have that entry yet FIPS mode is still enabled and the error is persistent.

[cadbury]

Dear user,

We could not reproduce the issue in house. We are able to use non FIPs compliant algorithms while signing when FIPS is disabled[with PM on/off] and not able to create with FIPs enabled.

Please could you tell us the Signature algorithm for the certificate[Select the digital id--View Details--Details--Signature Algorithm] .

Have you set any registry key to specify digest method while signing? Please could you go to HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Security\cPubSec and send us a screenshot of the registries set under this key.

[Zer0Null]

I had to manually create the "HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\" path since it did not exist. So I would need to manually create "\Security\cPubSec" as well? What should I put under this key?

[Test Screen Name]

If you had to manually create that your Reader version is not DC. Please share the full version number shown by About Acrobat Reader.

[Zer0Null]

Adobe Acrobat Reader DC Continous Release | Version 2018.011.20038

[Test Screen Name]

Yes, that is DC, though it’s not the latest. You should have that in the registry if Reader ever ran. What does Regedit have under HKCU\Software\Adobe ?

[Zer0Null]

Only "\DC\AVGeneral" that I manually created for bFIPSMode

[Test Screen Name]

What do you have under HKCU\Software? Anything else other than Adobe ?

[Zer0Null]

Just the usual: Classes, Microsoft, Policies

[Test Screen Name · Accepted solution]

It sounds as you may have very strict registry blocks stopping software reading and writing preferences. Check with your admins for policies. 

[frieda15A9]

It's been some years since this question was posted, but I don't see that anyone provided an answer, so here it is:

For those of you who do not control the admin rights to a .pdf, but need to sign it and are receiving above error message, you just need to drag .pdf to your desktop, and then open it with Adobe Acrobat Reader.  You should then be able to sign it.

[Glenn26848304hndh]

This solution sounds incredibly simple and I don't know why dragging a file onto my desktop and opening the document would then allow me to save a FIPS document.  I tried it anyway and dragging this file to my desktop before opening it did not change the unwanted behavior.

[Charis5D9B]

I tried saving the doc to my desktop and it did NOT resolve the issue.

[sheldon_3406]

I found when using the 64 bit version it gave me the error but if I used the 32 bit version - it did not.

[AnandSri · Accepted solution]

Hi @sheldon_3406,

I hope you are doing well. Thanks for reaching out.

The error/issue occurs due to the read and write permission of the installed app. Please ensure the installed Acrobat Reader app has full permission.

Also, see these related community articles on similar scenarios: 
https://adobe.ly/3ZFw1D1
https://adobe.ly/3zm5G2g
https://adobe.ly/47K8qTS

I hope this helps.

~Anand Sri.

[BobDaWebGuy · Accepted solution]

Zer0Null,

FWIW, I just encountered this for the first time.  The resolution, within my org, is to have that user added to FIPS-related Windows Active Directory Group.  I don't know how the policy is configured, but that resolved the issue.

Best of luck to you!

Cheers,

Bob

[AnandSri]

Hello @BobDaWebGuy!

I hope you are doing well. Thanks for sharing the steps that worked for you. This will help other users in the community facing a similar issue with an IT-managed machine. For an individual-managed computer, read and write permissions are required on the Adobe folders, as described above.

Feel free to reach out if you need any assistance.

Thanks,

Anand Sri.