Hi, I haven't had a chance to see if there are Wizard bugs for this feature, but here's a tip that will make it not matter: Because the trust framework has been evolving so rapidly, the feature in the latest version of Reader is more rich than the Wizard is able to configure. What I would do is configure an installed version of the product via the UI and then use the Wizard's Registry drag and drop feature to set up the installer the way you want. So: Go to Prefs > Security (Enhanced). Set all your privileged locations, enable enhanced security, decide whether to trust Win OS (IE) trust zones, etc. Note that most IT folks already manage site trust via IE, so one checkbox may get you what you need. Open the Wizard and go to the Registry feature. Drag the registry folder called cTrustManager to the target computer. Now you've copied your settings to the installer. BTW, 10.1.2 is going out in a few days and contains many improvements you may want. For example, trusting Win OS sites now only includes "Trusted Sites." With 10.1.2, it also includes "Local Intranet" zones. There are many other improvements as well. Next week new versions of these docs will go out: Preference Reference: A dictionary of 450 configurable preferences contained in the AIM AIR app. Application Security Guide: details about each security feature with a change history. Admin Guide. Get them all here (after Tuesday): http://www.adobe.com/go/acrobatitinfo. ... View more

Hi Brian, You're looking for a hack because not only are 7 and 8 not supported, they are doubly not supported in conjunction with Reader 10.0. If you had 9.x and later products, you could specify which app was the default PDF handler. There could be a way to do what you want, but you're out in the wilderness on this one. Ben ... View more

You need to talk to your cert vendor about how to create end entity certs that chain up to your trusted root. Ben ... View more

Well it looks like you get to have "Fun with PKI." First, admins should always backup sigs. Archiving is part of a pki, but if you're using self signed certs there's not much point anyway. Users can always create another and they are easily spoofed. If you actually care about security, you need to purchase your certs or choose an alternative signing methodology (see below). You can integrate with LDAP servers whether or not you buy certs from from a vendor I think. Usually the admin manages trust so that users don't have to set this up themselves on each machine. End user certs should chain to a trust anchor (such as the company's or Verisign, etc.) So if all your users trust the anchor, they trust each other. I think you might benefit from one of these: Adobe Acrobat Trust List (AATL) Adobe Echosign service (not cert based). And read these: http://www.adobe.com/go/learn_acr_security_en hth, Ben ... View more

I've confirmed the Acrobat installer does not write to that location. Since this problem is not reported elsewhere, it looks like there is something unique about your environment that's causing the issue. I'm glad you have a workaround. Ben ... View more

Ok. I wouldn't bother testing 10.1 or 10.0.x as that's not supported. You can install 10.1.1 over 10.0 to get to the latest. Of course, that probably doesn't solve your problem as you know. This is somewhat of a guess, but is Reader installed on the machine (including in the past) and/or are you doing anything with the default PDF viewer (handler) settings or properties? Changing the default PDF viewer invokes the installer. Before you can troubleshoot this, you need to have a clean machine. Since older Acrobat products and an unsupported 10.x update order has existed on the machine, you should uninstall and manually clean up any files and registry items. I bet this problem does not appear on a new machine that's never seen a version of Acrobat before. Ben ... View more

Hi Beerdini, You cannot install 10.1 over 10.<anything>. Updates are cumulative to the base release, and 10.1 should be installed over 10.0. Go here http://www.adobe.com/go/acrobatitinfo to get the admin guide, update quick key, or go to kb note 88814 to see the installer list. All resources indicate what the supported update order is. Ben  ... View more

Yep, that's what the Citrix doc in the admin guide says: http://www.adobe.com/go/acrobatitinfo. Ben ... View more

I'm wondering if it would facilitate the troubleshooting effort to remove Reader and then try a reinstall Acrobat on the clean machine. Ben ... View more

Hi, You've figured it all out correctly. Your update paths are good. If you've installed a version that you can't install over, it's true you need to redeploy. I see from your other thread you are contemplating using bootstrapper deployments because you think they are easier. You are correct again. Yes, pay attention to the Release Notes Library, or you could start here first: http://kb2.adobe.com/cps/888/cpsid_88814.html. hth Ben ... View more

Bootstrapper is easier. It doesn't have the same order constraints. ... View more

Go here: http://www.adobe.com/go/acrobatitinfo. Download the admin guide which describes deployment. Use the links to the kb notes to identify the enterprise installers. Go to the release note library to get do the same as #3 + get additional information. If you want to do some predeployment configuration, download the Wizard and AIM. Ben ... View more

I also noticed you are using Acrobat bundled with a Suite. Have you downloaded the CS deployment guide and the doc about deploying Acrobat with CS products? Acrobat installation and licensing is handled differently that the other CS products. Ben ... View more

Do you meet these sys reqs? : Windows Server 2008 R2 Enterprise Edition 64-bit. Client operating systems: Windows XP Professional SP3, Windows Vista SP2 and Windows 7 (both 32-bit and 64-bit) Standard/Administrator user profiles were set up via Active Directory. ... View more

You cannot install quarterlies over out of cycle patches or quarterlies over other quarterlies. With 10.x, installers are cumulative. Thus, the basic formula is: Acrobat: Base release + latest quarterly + latest patch (if any). hth, Ben ... View more

http://www.adobe.com/products/eulas/pdfs/Citrix_Policy_A10-5-31-2011.pdf I think you need a license for the appropriate version. E.g. you can't use 9.x licenses to use a 10.x product. hth ben ... View more

Download the update from ftp://ftp.adobe.com/pub/adobe/acrobat/win/9.x/ and install it yourself. Ben ... View more

Interesting: I haven't thought about the implications of switching from an AIP to a non-AIP workflow. I'll look into it. I hope you find the 10.x installers much improved over 9.x. Few updates and less work. Ben ... View more

brape33, I don't think there's no reason to uninstall anything. Why are you doing that? Ben ... View more

Hi rdw566, I was incorrect in the last posting. 10.1.1 is a quarterly, so it's cumulative to 10.0. Acrobat quarterlies are cumulative to the base install. Reader quarterlies are cumulative to the last MSI (in this case 10.1). hth Ben ... View more

10.x installers are cumulative. After installing the base release, just install the last quarterly and last update. In this case 10.0 > 10.1 > 10.1.1. Have you looked at the admin guide at http://www.adobe.com/go/acrobatitinfo? Ben ... View more

The following is the doc on this. If it doesn't work, report back. Ben ------------ 10.x products support the use of wildcard matching of subdomain  components for trusted host URLs. For example, for a basic URL of  a.b.c.adobe.com, you can wildcard on all of a, b, or c. It is required  that at least the first subdomain is specified (adobe in this case).  So  *.corp.adobe.com or lcforms.*.adobe.com works, but  *forms.corp.adobe.com or lcforms.corp.*.com will not. ... View more

It's called Updater.acroplugin, not updater.api. Do you see the Plug-ins directory? ... View more

Hi, Can't help without product and version info. Is Reader also in play? Adhere to the App Security Guide information (http://www.adobe.com/go/learn_acr_appsecurity_en)  Look up when * was supported. Also, what Win security zones have you tried. Try adding the host to the Local Intranet Zone. Ben ... View more

Tthere is on my Mac. I believe you right click and choose Show Package Content, but I don't have the machine at hand right now. See if that works. Ben ... View more

Well I do know you don't have to redeploy the entire app. I'll get some example cmd lines, but it might not be until tomorrow. Ben ... View more

Howdy, Ok: Acrobat updates are MSPs (the MSI note above was for Reader). Do you want to use an AIP for this deployment? Ben ... View more