0 Replies Latest reply on Nov 3, 2011 8:32 AM by helpcrypto

    Acrobat integration with MS.CAPI/OSX.KeyStore/Linux? - How to detect acrobat architecture version...

    helpcrypto

      Hi all.

       

      I have been requested to do some Acrobat (Reader or Pro, depending on the user) configuration when installing one software our users need.

       

      The desired configuration is to enable "Windows Integration" for Security/Certificates/Signing (Seems to be available only on Windows, and maybe Bundled on OSX).

      I have started on Windows, and later will continue with the other OS.

      Googling a bit i have found these keys are needed:

       

      [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cASPKI\cAdobe_TSPProvider]

      "bUseExpiredTimestamps"=dword:00000001

      [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cASPKI\cASPKI\cVerify]

      "iReqRevCheck"=dword:00000002

      [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cASPKI\cMSCAPI_DirectoryProvider]

      "iMSStoreTrusted"=dword:00000062

      [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cHandlers]

      "aVerify"="Adobe.NoHandler"

      "bVerifyUseAlways"=dword:00000000

      [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cPPKHandler]

      "bCertStoreImportEnable"=dword:00000001

      "iSigVerificationTime"=dword:00000002

      "bIgnoreDocValidationInfo"=dword:00000000

       

      Is this ok?

       

      I have tried that and works, but now i have to make it flexible:

      If the system is x86+acrobat in x86 -> HKEY_CURRENT_USER\Software\Adobe\

      If the system is x64+acrobat in x86 -> HKEY_CURRENT_USER\Software\Wow6432Node\Adobe\

      If the system is x64+acrobat in x64 -> HKEY_CURRENT_USER\Software\Adobe\

       

      Also, if the acrobat is:

      Reader: -> ...Adobe\Acrobat Reader

      "Profesional" -> ...Adobe\Adobe Acrobat

       

      Even more, if the version is:

      10.0 -> [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Security\cHandlers]

                  "aVerify"="Adobe.NoHandler"

      7.0 ->  other registry keys are set

       

      ...So, this becomes very dissapointing

       

      So here are my questions:

      Is there any tool to do this on a higher-level of abstraction? (kind of "acrobatConfig.exe /windowsCAPI=1")

      Is there a simple way to get the architecture/version of acrobat?

      What happend if theres is more than one version...how could i get "all acobat versions"?

      How could i enable this to all acrobat architecturesversions/products on an elegant-scalable way?

      Is it possible to apply all this configurations to "all users" instead of current user?

      ...(maybe more questions im missing)

       

       

      Thanks in advance for any help you could provide.

      Thanks a lot!