Trust domain CA in all instances of Adobe Reader in domain

[jimb1953]

How do I make all installations of Adobe Reader in our domain trust certificates issued by our domain CA without having to manually add the domain CA's certificate to each individual instance of Adobe Reader in our domain? Can I do this through Windows Group Policy? Or does Adobe have a tool for this purpose?

This only became an issue in the last month or so when users began noticing PDF's digitally signed with certificates issued by our domain CA were marked as untrusted,

[cadbury · Accepted solution]

Dear user,

Please could you confirm the version of Reader that you are using and the timeframe that you started facing this issue.

Did you trust the certificate manually or from by updating AATL/EUTL trust list? Please confirm if the certificate has been recently removed from AATL/EUTL list of Trusted certificates

If you want to trust the Domain CA cert for all machines, Please create an addressbook trusting the Root certificate for this domain.

Please go to Preferences-->Security-->Import ;and manually import the certificate locally kept on the machine. Or Please keep the addressbook on a server location. Select "Load Security Settings from a Server"--> enter url .Select the Check every option to chose how frequently you want it updated. Select "Update now" to load the trust setting immediately.

[TowedJumper]

I know this is old but this is exactly what I am looking for.  Is there a series of registry entries I can create that would let me set these settings in my computers company-wide without having to touch each one?