These instructions are intended for Adobe Acrobat Pro/Adobe Acrobat DC licensed(paid) software versions for people who have a need to Create or Edit PDF forms.
For people who simply need to sign documents, Acrobat digital signatures has been superceded by UT Docusign
| Table of Contents |
|---|
Basic Instructions
If you don't already have a digital certificate:
- go to https://certificates.security.utexas.edu/ to request one
...
- Choose UT austin from the list and click select to get started
- Click Request a new certificate and use your @austin.utexas.edu address. Only Office365 supports digital signatures at this time.
- go to https://stache.utexas.edu/
...
- .
- Use your EID and EID password to log in.
...
- Authenticate with Duo.
- The
...
- entry with your digital certificate will be named encryption and mail signing cert in stache. Click on the newest dated entry
- Download your mail encryption key
- The entry with your digital certicate has a password. you will need that password from the Encrypted file password field to import
...
- the certificate into your
...
Double click the downloaded key file named something like YourEmailAddress.P12
for MAC:
It should automatically try to import into your keychain and will ask for the password for that file which was the password on the page where you downloaded the encryption key in the box that says "Encrypted File Password". enter that password. It may also need your EID password just to allow the importation into the keychain when it asks for your "login" password.
if you imported it successfully, there will be a Keychain list on the left, and also a Category list. click My Certificates in the Category pane and locate your certificate. Click the triangle beside your certificate so it shows your private key beside your email address. Double Click the Key icon with your email address.
if you get this far, click the Access Control tab. in the box underneath where it says "Always allow access by these applications:" click the + sign underneath and navigate your way to your Applications folder and add Adobe Acrobat Pro.app, or whichever version of Adobe Acrobat you're using. I usually add Mail.app so I don't have to go back at a later date to set them up for email signing and encryption. Don't bother with Mail.app if you use Outlook for email.
Save Changes. it should ask for your "login" (EID password) password again.
...
- Acrobat Digital IDs. Select the password with your mouse and hit Command-C or go to the Edit menu and choose Copy.
Then
For MAC:
- Open Acrobat by clicking on it if it's in your dock, or by going to your Applications folder and double clicking Acrobat Pro/Acrobat Pro DC/Acrobat Reader DC
- Go to the Acrobat Menu and slide down to Preferences
- slide down to Signatures and click on it
- in the Identities & Trusted Certificates section, click More
- Click Add ID
- Leave the default selection of My existing digital ID from: A file and click Next
- Browse to your Downloads folder, click on the .P12 file, and click Open
- Enter the password from the stache field labeled Encrypted file password or paste the previously copied password (Command-V or choose Paste from up top in the Edit menu)
- Click Next
- Click Finish
- Click the newly imported Digital ID that has your FIrstName LastName <emailaddress>
- up in the Usage Options heading, slide down and click Use for signing. Do this again for Use for Certificy and Use for Encryption
- Click Close
- Click OK
- To test it out, you can open a PDF document and sign a document AFTER you Update the Adobe Trusted Root Certificates (below).
For Windows:
Double clicking the p12 file will open Certificate Import Wizard.
Go through. You shouldn't have to tick off anything. Do not check the box to force strong protection or it will make you enter your password every time you want to use the key.
Finish the wizard.
in Acrobat:
...
.
...
on the right is Identities & Trusted Certificates. Click More.
...
click Close
This wiki page has an attachment for demonstrates how to place a signature in Acrobat. The On a mac, the first time you sign a document, it will ask for your Login password. It will be your EID password. Make sure you click Always Allow or it will make you do this for every document you try to sign.
Update the Adobe Trusted Root Certificates To Allow For Successful Validation of UT Employee Signed Documents
When someone uses their UT assigned digital certificate to sign a document, by default new installations of Adobe Acrobat/Reader will not trust the signature, which will result in a warning being displayed when people open up the signed document and verify the authenticity of the certificate used to sign the document. This happens because the certificate company that UT uses for their certificates is not currently built into and trusted by Adobe Acrobat/Reader. So you have to manually update Acrobat to download the latest global trusted Certificate Authorities. This manual trust has to be done on a per-user account basis so if you have multiple users on a computer, each user account will need to go through the process of downloading Trusted Cerficate Authorities.
...
•Now when you verify the UT employee digital certificate used to sign a document it should show up as valid. This should happen automatically