SAFE-BIOPHARMA TECHNICAL NOTE Using SAFE-BioPharma Digital Signatures in Adobe Acrobat 9.0 and higher

Transcription

1 SAFE-BIOPHARMA TECHNICAL NOTE 1101 Using SAFE-BioPharma Digital Signatures in Adobe Acrobat 9.0 and higher Introduction Replaces TechNote Revised 17 February 2011 One of the more common uses for SAFE-BioPharma digital certificates is for signing or assessing the validity of PDF documents created or viewed in Adobe Acrobat. This document will assist you in manually configuring your version of Adobe Acrobat 9.0 to correctly generate and verify SAFE- BioPharma compliant digital signatures in PDF documents. Users configure Acrobat and Reader to: 1. Place a SAFE-BioPharma compliant digital signatures on documents. 2. Accept documents with SAFE-BioPharma compliant digital signatures and verify the signature is valid and the document has not been modified after signature NOTE: To apply multiple signatures to documents using versions of Acrobat prior to Version 9.0, please follow the instructions in Appendix A. To enable documents for signature in Acrobat Reader, please go to Appendix B. If you have questions or problems as you follow this document, please send an to rfurr@safebiopharma.org or gwilson@safe-biopharma.org to get assistance.

2 . 1. Creating the SAFE-BioPharma signature block 1. In Acrobat, go to the menu bar. 2. Select Edit/Preferences. 3. Select Security 4. Check the Verify signatures when the document is opened box. Select New. This will open the new signature creation dialog:

3 5. In the Configure Signature Appearance dialog, enter SAFE-BioPharma as the title of the signature. 6. Deselect Location, Distinguished name, Logo, and Labels in the Configure Text box as shown.

4 7. Go to the Configure Graphic box. 8. Select Imported Graphic. 9. Select Import Graphic from File 10. Browse to the SAFE-BioPharma_ Sig Block.pdf.and select OK

5 11. The new signature block is displayed: 12. Select OK. 13. Now select Advanced Preferences.

6 14. This takes you to the Digital Signatures/Advanced Preferences page. In the Verification Pane, in Verify signatures using selection, select the bottom radio button, The time at which the signature was created 15. Ensure the following radio buttons are selected on the Verification tab:

7 When Verifying: Always use the default method ) Default Method for Verifying Signatures should read Adobe Default Security Check the Require certificate revocation box Select the The time at which the signature was created radio button. 16. Select the Creation tab: 17. Set up this tab as shown on the screen. 18. Select the Windows Integration tab:

8 19. Set this window up as follows. On the first time thru, check the enable searching the Windows box and the two boxes for validating signatures and certified documents. Note the first of these boxes becomes grayed out. 20. Click OK to get back to the Preferences screen. 2. Establishing Trust The next step is to verify that you have configured Acrobat to trust SAFE-BioPharma digital signatures. Even if you don t use a SAFE-BioPharma digital ID to sign documents yourself, these steps can also help you set up Acrobat to accurately verify the validity of any SAFE- BioPharma signatures that you may receive. There are several ways to set up trust in Acrobat - you should only need to use ONE of the methods that follow: Method 1. If you have a document from another user that has been signed with a SAFE- BioPharma signature, you can use it to add trust for the SAFE-BioPharma Root Certificate

9 (NOTE: You can also use this method if you don t have a SAFE-BioPharma digital ID but wish to verify the signatures of other users): 1. Open the PDF document containing the SAFE-BioPharma signature. 2. Click the Signature Panel block to open the Signature Panel. Note the Signed and All signatures are valid statement in the panel above the document.

10 3. The Signature Panel opens. 4. Expand the panel by clicking the + box. Continue to expand by clicking all the + boxes in the panel to reveal the signature details and validity verification statement.

11 5. Select Certificate Details by clicking once. The Certificate Viewer is opened and displays the details of the signature.

12 6. In the list of certificates in the left pane of the Certificate Viewer Dialog, select the TC Trust Center Class 3 CA II. 7. Select the Trust tab and click the Add to Trusted Identities button

13 8. In the Import Contact Settings dialog, check the boxes for Signatures and as a trusted root and Certified documents

14 9. Click OK, then Click OK in the Certificate Viewer dialog, then click Close in the Signature Properties dialog to return to the document. 10. Repeat steps (2-9) for the Trans Sped CA certificate. 11. Click on the SAFE-BioPharma signature, and it should now validate.

15 Method 2. Add trust using an FDF data exchange file: 1. On the desktop, double-click on a file with the.fdf extension that contains the SAFE- BioPharma Root Certificate information (alternatively, open the.fdf file through the File>Open menu in Acrobat or Reader) 2. The Data Exchange File - Import Contact dialog will appear - there are two variations on how this dialog may appear - which variation appears will depend on whether the Data Exchange File has been digitally signed by a contact that is already trusted in Acrobat. a. Unsigned Data Exchange Files

16 i. When you open an Unsigned Data Exchange file, a dialog will appear describing the contents of the file ii. - The dialog will have two buttons: Set Contact Trust and Close. iii. Click the Set Contact Trust button which opens the Import Contact Settings dialog. iv. In the Import Contact Settings dialog, check the boxes for Signatures and as a trusted root and Certified documents v. Click OK

17 vi. Click OK in the Import Complete dialog, then click Close in the Data Exchange File - Import Contact dialog. vii. Repeat steps i to vi for the TC Trust Center root fdf file. b. Signed Data Exchange Files i. When you open a Signed Data Exchange file, a dialog will appear describing the contents of the file ii. the dialog will have two buttons: Set Contact Trust and Close. iii. Click the Set Contact Trust button to open the Import Contact Settings dialog. iv. In the Import Contact Settings dialog, check the boxes for Signatures and as a trusted root and Certified documents v. click OK. vi. Click OK in the Import Complete dialog, then click Close in the Data Exchange File - Import Contact dialog.

18 Method 3. Add trust for the SAFE-BioPharma Root Certificate using the Trusted Identity Manager in Acrobat or Reader: 1. In Acrobat, select from the menu: Advanced> Manage Trusted Identities. If you are using Reader, select: Document>Manage Trusted Identities 2. In the Display drop-list at the top of the page, the default selection is Contacts 3. Change the selection to Certificates

19 4. Select the Trans Sped SAFE-BioPharma CA I from the list (if this certificate is not present in the list, use one of the other methods listed here.) 5. With the Trans Sped SAFE-BioPharma CA I selected, click the Edit Trust button

20 6. The Edit Certificate Trust dialog will appear. 7. In the Edit Certificate Trust dialog, check the boxes for Signatures and as a trusted root and Certified documents. 8. Click OK. 9. Click Close in the Manage trusted identities dialog. 10. Repeat steps 1-9 for the TC Trust Center Class 3 CA II root. 11. SAFE-BioPharma signatures should now validate.

21 Appendix A Setting documents to accept multiple signatures for users with previous versions of Acrobat (Note this is not required if users have Acrobat 9.0 or higher) To enable Adobe 8 and earlier versions to be able to certify a document and then apply multiple signatures. 1. You first need to turn on an additional toolbar 2. Go to the View/Toolbars drop down on the menu bar: 3. Select Advanced Editing.

22 4. Next, in the main menu bar, go to Forms/Add or edit fields 5. This takes you to the next screen:

23 6. Select Add New Field/Digital Signature. 7. Move your cursor to the location where you want to place the signature and left click. Note that you may change the name of the signature block to reflect either the signing person or role. 8. The following is displayed:

24 9. Repeat for each signature block. 10. When you have added all the needed signature blocks, go to the upper right part of the screen and select Close Form Editing

25 11. You will be returned to your document and note that signature blocks are now included as created.

26 12. You are now ready to certify your document. Note that there is a signature block on the lower right part of the signature section that does not have name and title information associated with it. 13. This is the signautre block that will be used to certify the document. 14. On the menu bar, select Sign/Certify with Visible Signature

27 15. Follow the instructions in the dialog box. 16. Select OK. 17. Right click on the certification signature block. 18. Select Certify with Visible Signature

28 19. Select Certify with visible signature

29 20. In the upper right of this screen select Sign Document 21. The signing dialog is displayed:

30 22. In the reason section, select Certify Document. 23. In the Permitted Actions After Signing Section, select Form Fill-In And Digital Signatures. 24. Click Sign. Acrobat performs required certificate verification using an OCSP request. If the signer s certificate is valid, signing proceeds. If the certificate is no longer valid, the signing process stops and the user is advised that their certificate is no longer valid.

31 25. Navigate to the folder in your file system where you wish to save the document and click Save. 26. Follow the prompts. 27. Enter the passphrase for your token.

32 28. Click OK.

33 29. The document is certified. 30. Note the verification of the certification in the Signature bar. 31. Select Signature Panel to open the full panel.

34 32. Note the details availalble. 33. User may also wish to deselect the Highlight Fields button on the right of the Signature bar. This removes the light blue highlights form the signature fields. 34. The document can now be signed by all parties withoout affecting the validation of any of the other signatures.

35 Appendix B Enabling a document for signature in Acrobat Reader 1. Go the menu bar. 2. Select Advanced/Enable Usage Rights in Acrobat Reader 3. The following screen is displayed:

36 4. Select Save Now 5. click thru the Save routine. 6. Rename the document to reflect that this is the certified version until the document is saved.

37 7. Subsequent users may digitally sign the document. 8. Right click on a signature block and sign.

38 9. Note that in this case, I have floated my cursor above the signature at the lower left of the signature area. This signature was the first signature applied. When I float over the signature, I receive an indication that signature is valid. I can also open the Signature Panel as shown in the following screen:

39 10. The expanded details show that the signatures are all valid. Full details, including the validation report is available from within this panel.