Windows
The latest updates to Acrobat Reader DC have affected some electronic signature users. In some cases, after signing a PDF document using Acrobat Reader DC, the electronic signature appears to be invalid, as in the images below.
If you encounter such an error, we recommend that you install your device’s cryptographic module in Acrobat Reader DC, as shown below, and then resume the steps of signing the PDF document.
Installing the cryptographic module in Acrobat Reader DC on Windows
1. In Adobe Reader DC, click Edit in the main menu and select Preferences.
2. From the left pane of the window that opens, select Signatures and click the More button in the Identities & Trusted certificates section.
3. In the window that appears, double-click Digital IDs in the left pane and select PKCS # 11 Modules and Tokens.
4. Click the Attach Module button in the right pane of the window.
NOTE: If the Attach module button is not active, do the following:
a) Click on Windows Digital IDs (in the left pane) and select PKCS # 11 Modules and Tokens.
b) In the window that appears, check Always open with Protected Mode disabled and click OK.
c) Close Adobe Reader and reopen it.
d) Repeat steps 1-4 described above.
5. From the window that opens, select the PKCS#11 library for your token (available at the address listed below) and click Open.
- Aladdin eToken: C:\Windows\system32\etpkcs11.dll
- SafeNet: C:\Windows\system32\etpkcs11.dll
- Athena: C:\Windows\System32\asepkcs.dll
- Gemalto:
- C:\Program Files\Gemalto\Classic Client\BIN\gclib.dll (32-bit system)
- C:\Program Files (x86)\Gemalto\Classic Client\BIN\gclib.dll (64-bit system)
6. In the next window, you will be able to see the cryptographic module installed. The image below shows the cryptographic module of Aladdin and SafeNet devices.
The cryptographic modules of the other types of devices have the following names:
- Oberthur PKCS#11 Library, for Oberthur devices,
- PKCS#11 Cryptoki Multiplexer, for Gemalto devices,
- ASE Cryptoki, for Athena devices.
7. From the left pane of the window, select the cryptographic module and click the Login button in the right pane.
8. In the window that appears, enter the token PIN and click OK. You are now connected to the device.
9. Select certSIGN, from under the cryptographic module in the left pane of the window. In the right pane you will see the certificate on the device imported in Acrobat Reader.
10. To use this certificate when signing, select it in the right pane and click Usage Options and choose the Use for signing option.
11. A pen-shaped icon will appear in front of your certificate.
12. Because Adobe Reader retains passwords, you will need to close and reopen the Adobe Reader application to generate a valid signature.
13. Electronically sign the document by selecting the PKCS#11 device certificate and then pressing the Continue button.
14. In the window that appears, enter the PIN in the Enter the Digital ID PIN or Password field and click the Sign button to complete the signing.
MacOS
In some cases, after signing a PDF document using Acrobat Reader DC, the error “The credential selected for signing is invalid” is displayed:
If you encounter such an error, we recommend that you install your device’s cryptographic module in Acrobat Reader DC, as shown below, and then resume the steps of signing the PDF document.
Installing the cryptographic module in Acrobat Reader DC on MacOS
1. From the Acrobat Reader DC main menu, select Acrobat Reader> Preferences.
2. From the left pane of the window that opens, select Signatures and click the More… button in the Identities & Trusted certificates section.
3. In the window that appears, click Digital IDs in the left pane. Select PKCS#11 Modules and Tokens and click the Attach Module button in the right pane.
4. In the field that appears, enter your device’s library (as listed below) and click the OK button.
- Aladdin, SafeNet: /usr/local/lib/libeTPkcs11.dylib
- Athena IDProtect Key v2:
- /Library/Application Support/Athena/libASEP11.dylib or
- /usr/local/lib/libASEP11.dylib
5. The cryptographic module of the device will appear in the left pane of the window, under PKCS#11 Modules and Tokens. The name of the cryptographic module is:
- ASE Cryptoki – in the case of Athena devices;
- SafeNet eToken PKCS#11 – for Aladdin and SafeNet devices.
Select the module that corresponds to your token type and click the Login button on the right side of the window.
6. In the window that appears, enter the PIN code (also called password) of your device and click OK.
7. Select certSIGN from under your token library in the PKCS#11 Modules and Tokens tree in the left pane of the window. In the right pane, you can see the certificate on the device imported in Adobe Reader DC.
8. To use this certificate when signing, select it from the right pane, click Usage Options and choose the Use for Signing option.
9. A pen-shaped icon will appear in front of your certificate.
10. Click the Close button to close the window, then close the Preferences window by clicking the OK button.
11. As Acrobat Reader DC holds passwords, for a correct signature, close and reopen the Adobe Reader DC application.
12. Electronically sign the desired document by entering the PIN (also called password) of your device in the Enter certificate… field and then click the Sign button.
