Issues with Certificates

[Mats27356468x9y5]

After getting a new Certificate from the Spanish Government, I am unable to sign using Adobe Actobat

1. When going to Tools -> Certificates ->  It asks me to Create Digital ID

2. I create it based on a Personal Information Exchange (.p12) file on my desktop

3. Nothing happens there when I click Sign the entire process starts again

What have I tried?

1. Creating the Digital IR without the "modern interface" -> In fact when I tried to create it, it says the Digital ID is not valid, however I am trying to create a Certificate based on a document

2. Uninstall and Install Adobe Reader twice

3. Update Adobe Reader (Currently version 22.003.20282)

4. Using Windows 11 22H2 and Up to date

This is really frustrating because it was working fine until I got a new certificate.

Thanks!

PS: I am using acrobat reader in Spanish so the steps I follow have been translated from Spanish and might not match the english version

[S. S]

Hi @Mats27356468x9y5,

Hope you are doing well. Sorry for your experience with Acrobat Reader.

We already know of the issue, and a bug has been logged. The issue comes in with the incompatibility of the certificates issued by the Spanish government. Our team is working on a fix, which will be implemented as soon as possible. 

Sorry for the trouble this has caused.

-Souvik.

[jans28077180]

Has this issue been solved? 

I have the same issue: my certificate by the Spanish government (FNMT) works in other programs, but does not work in Adobe Reader (or Acrobat Professional). I can select the .p12 file containing the certificate, I can type in my password, and it then shows me details about the certificate (FNMT). But when I do the final step and click on "sign" nothing happens. 

[S. S]

Hi @jans28077180,

Sorry for your experience.

Would you mind removing the certificate and adding it again while updating the app to the latest version?

If that doesn't work, please share a screen recording of the event for a better understanding and further investigation.

-Souvik

[jans28077180]

The app was already in the most recent version.

I cannot remove the installed certificates from within Adobe Reader. If I try to do so I get the error: 

Removing a digital ID is only permitted if the ID was created by Adobe Reader or Acrobat version 8.0 or later.

[S. S]

@jans28077180,

To do so, press Windows Key + R Key together, type certmgr.msc, and hit enter. You will get a new window with the list of Certificates installed on your computer. Locate the certificate you want to delete and click on the Action button. Then, click on Delete.

You can also find the actual registry entries under:

\SOFTWARE\Microsoft\SystemCertificates\

In HKEY_CURRENT_USERfor user-specific certificates and KEY_LOCAL_MACHINEfor machine-specific certificates.

Hope this helps.

-Souvik

[jans28077180]

Thanks, but I am on a Mac computer.

[S. S]

@jans28077180 Thanks for the input.

I want to escalate this to the dev team for further investigation.

Would you mind sharing a few more details to get this further:

1. The app version number of your Acrobat Reader DC;

2. A screen recording of the event for better understanding;

3. To test, can you create a sample file and use the certificate?

4. If you are enrolled through an enterprise account or an ETLA contract, let me know, and I will get the correct team involved for further assistance.

I would suggest sharing the details over a private message to ensure no sensitive information is visible on the public forums.

Look forward to hearing from you.

-Souvik

[Amal.]

Hi All

Please try to update your digital IDs as per the help page https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSig/changes.html#id2 and see if that works for you.

Regards

Amal

[Mats27356468x9y5]

Hello,

The Digital ID is provided by the Spanish Government, and I am just an
enduser, nit sure sending me the release notes with some technical
instructions (and no clear guidance for an enduser) will work. At least, I
have no idea what to do after reading the doc 🙂

Br,

[Amal.]

Hi @Mats27356468x9y5 

Acrobat is doing as expected. It follows the table given at link https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSig/changes.html#id2. The table itself is based on open standard RFC 5280 .  This behavior has stayed the same for past many years.

The end-users should approach their CA to get the digital ID issued with the correct combination of KU and EKU.

Regards

Amal