Using Certificates For Certificate Security (Encryption); Using Directory Servers To Add Trusted Identities - Adobe 22002484 Manual

Acrobat Family of Products
Security Feature User Guide

3.3.3 Using Certificates for Certificate Security (Encryption)

You only need to specify a certificate's encryption usage if you are using certificate security. When more
than one certificate is associated with the contact, you can select which one to use as the default
encryption certificate. For details, see "Certificate Security" in the Document Security User Guide.

3.4 Using Directory Servers to Add Trusted Identities

Businesses often use a centrally managed certificate repository such as an LDAP directory server. Directory
servers are capable of returning X.509 public key certificates. These servers are searchable so that you can
easily expand your list of trusted identities. Both Adobe Acrobat and Adobe Reader for Windows ship with
default servers:
Versions 7.x:

VeriSign Internet Directory Service

GeoTrust Directory Service

IDtree Directory Service

Version 8.x and 9x:

VeriSign Internet Directory Service

Home users may never need to use directory servers. In most cases, needed certificates will be sent
directly to you or will be embedded in a signature. However, enterprise users will likely use directory
servers when their administrator has set up an LDAP server as part of a public key infrastructure. This
allows the administrator to make the certificates available to teams and workgroups while managing them
from a central location. The administrator usually preconfigures user machines, tells the user how to
configure the server manually, or sends the server configuration details in a file as described in
and Sharing Security Settings" on page
Figure 31 Policy restrictions
Managing Certificate Trust and Trusted Identities
Using Certificates for Certificate Security (Encryption)
112.
40
"Migrating