Skip to main content
jimb1953
jimb1953
Participant
October 4, 2018
Answered

Trust domain CA in all instances of Adobe Reader in domain

  • October 4, 2018
  • 1 reply
  • 3405 views

How do I make all installations of Adobe Reader in our domain trust certificates issued by our domain CA without having to manually add the domain CA's certificate to each individual instance of Adobe Reader in our domain? Can I do this through Windows Group Policy? Or does Adobe have a tool for this purpose?

This only became an issue in the last month or so when users began noticing PDF's digitally signed with certificates issued by our domain CA were marked as untrusted,

    This topic has been closed for replies.
    Correct answer cadbury

    Dear user,

    Please could you confirm the version of Reader that you are using and the timeframe that you started facing this issue.

    Did you trust the certificate manually or from by updating AATL/EUTL trust list? Please confirm if the certificate has been recently removed from AATL/EUTL list of Trusted certificates

    If you want to trust the Domain CA cert for all machines, Please create an addressbook trusting the Root certificate for this domain.

    Please go to Preferences-->Security-->Import ;and manually import the certificate locally kept on the machine. Or Please keep the addressbook on a server location. Select "Load Security Settings from a Server"--> enter url .Select the Check every option to chose how frequently you want it updated. Select "Update now" to load the trust setting immediately.

    1 reply

    cadbury
    Adobe Employee
    cadburyCorrect answer
    Adobe Employee
    October 5, 2018

    Dear user,

    Please could you confirm the version of Reader that you are using and the timeframe that you started facing this issue.

    Did you trust the certificate manually or from by updating AATL/EUTL trust list? Please confirm if the certificate has been recently removed from AATL/EUTL list of Trusted certificates

    If you want to trust the Domain CA cert for all machines, Please create an addressbook trusting the Root certificate for this domain.

    Please go to Preferences-->Security-->Import ;and manually import the certificate locally kept on the machine. Or Please keep the addressbook on a server location. Select "Load Security Settings from a Server"--> enter url .Select the Check every option to chose how frequently you want it updated. Select "Update now" to load the trust setting immediately.

    T
    TowedJumper
    Participant
    April 1, 2020

    I know this is old but this is exactly what I am looking for.  Is there a series of registry entries I can create that would let me set these settings in my computers company-wide without having to touch each one?

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices