User manual

Getting digital ID information from other users
You can keep a copy of other users' digital ID certificates in a list of trusted identities.
Your list of trusted identities is like an address book that stores digital ID certificates. The
list lets you validate the signatures of these users on any documents you receive. You can
also use the list of trusted identities to encrypt files. (See Encrypting Adobe PDF files
using certificates.)
The preferred method of adding another user's certificate to your list of trusted identities is
by importing the certificate from an FDF file that the user sends to you. You can also add
a certificate directly from the PDF document signed by someone who used a self-signed
digital ID, although this method may not be trustworthy.
To request a certificate from another user:
1. Choose Advanced > Trusted Identities.
2. Click Request Contact.
3. Type your name, email address, and contact information.
4. To allow other users to add your certificate to their list of trusted identities, select Include
My Certificates.
5. Select whether you want to email the request or save it as a file so that you can email it
later, and then click Next.
6. Select the digital ID file to use, and then click Select.
7. Do one of the following:
● If the Compose Email dialog box appears, type the email address of the person you are
requesting a certificate from, and type a subject. Click Email. A new email message
appears in your default email application with the certificate request attached. Send this
message in your email application.
● If the Export Data As dialog box appears, choose a location for the certificate file in the
Save In box, type a file name, click Save, and then click OK.
To add a certificate from email to your list of trusted identities:
1. After a user sends you certificate information, open the email attachment in Acrobat, and
then click Set Contact Trust in the dialog box that appears.
2. Select trust options, and then click OK. Click OK again, and then click Close.
To add a certificate from a file to your list of trusted identities:
1. If you're using the Certificates feature in Windows to organize certificates, select the
Enable Import And Use Of Identities From The Windows Certificate Store option in the
Security preferences. Click the Windows Integration tab in the Digital Signatures
Advanced Preferences, select the desired options, click OK, and then click OK again. (See
Setting Digital Signature preferences.)
2. Choose Advanced > Trusted Identities.
3. Click Add Contacts.
4. Do any of the following:
● If Windows Certificate digital IDs are allowed, select the appropriate directory and group.
● If you configured an identity search directory, select the appropriate directory and group.
You can then click Search to locate specific digital ID certificates. (See Configuring
identity search directories.)
● Click Browse, locate the certificate file, and then click Open.
5. Select the added certificate, and then click Details.
6. In the Certificate Attributes dialog box, note the MD5 Fingerprint and the SHA-1
Fingerprint numbers. Confirm with the certificate's originator that the information is
correct. If the information isn't correct, the certificate shouldn't be trusted. Click OK.
7. After you verify that the information is correct, click Trust, specify trust options, and then
click OK.
To add a certificate using a signature in a PDF document:
1. Open the PDF document containing the user's self-signed signature.
2. Click the signature in the document to check whether it's valid.
3. Click Signature Properties, and then click Show Certificate.
4. In the Certificate Attributes dialog box, note the MD5 Fingerprint and the SHA-1
Fingerprint numbers. Confirm with the certificate's originator that the information is
correct. After you verify that the certificate information is correct, click Close, click Trust
Identity, click OK, specify trust options, and then click Import.
To delete a certificate from the list of trusted certificates:
1. Choose Advanced > Security Settings.
2. Select the certificate, and click Remove ID.