Adobe ACROBAT READER 7.0 Manual page 159

Building a list of trusted identities
You can keep a copy of other users' digital ID certificates in a list of trusted identities.
Your list of trusted identities is like an address book that stores digital ID certificates. The
list lets you validate the signatures of these users on any documents you receive.
The preferred method of adding another user's certificate to your list of trusted identities is
by importing the certificate from an FDF file that the user sends to you. You can also add
a certificate directly from the PDF document signed by someone who used a self-signed
digital ID, although this method may not be trustworthy.
To request a certificate from another user:
1. Choose Document > Trusted Identities.
2. Click Request Contact.
3. Type your name, email address, and contact information.
4. To allow other users to add your certificate to their list of trusted identities, select Include
My Certificates.
5. Select whether you want to email the request or save it as a file so that you can email it
later, and then click Next.
6. Select the digital ID file to use, and then click Select.
7. Do one of the following:
If the Compose Email dialog box appears, type the email address of the person you are
requesting a certificate from, and type a subject. Click Email. A new email message
appears in your default email application with the certificate request attached. Send this
message in your email application.
If the Export Data As dialog box appears, choose a location for the certificate file in the
Save In box, type a file name, click Save, and then click OK.
To add a certificate from email to your list of trusted identities:
1. After a user sends you certificate information, open the email attachment in Adobe
Reader, and then click Set Contact Trust in the dialog box that appears.
2. Select trust settings, and then click OK. Click OK again, and then click Close.
To add a certificate from a file to your list of trusted identities:
1. If you're using the Certificates feature in Windows to organize certificates, select the
Enable Import And Use Of Identities From The Windows Certificate Store option in the
Security preferences. Click the Windows Integration tab in the Digital Signatures
Advanced Preferences, select the desired options, click OK, and then click OK again. (See
Setting Digital Signature
2. Choose Document > Trusted Identities.
3. Click Add Contacts.
4. Do any of the following:
If Windows Certificate digital IDs are allowed, select the appropriate directory and group.
If you configured an identity search directory, select the appropriate directory and group.
You can then search for specific digital ID certificates. (See
directories.)
Click Browse, locate the certificate file, and then click Open.
5. Click Add To Contacts List.
6. Select the added certificate in the Contact To Add list, and then click Details.
7. In the Certificate Viewer dialog box, note the MD5 Fingerprint and the SHA-1 Fingerprint
numbers. Confirm with the certificate's originator that the information is correct. If the
information isn't correct, the certificate shouldn't be trusted. Click OK.
8. After you verify that the information is correct, select the certificate, click Trust, specify
trust options, and then click OK.
To add a certificate using a signature in a PDF document:
1. Open the PDF document containing the user's self-signed signature.
2. Click the signature in the document to check whether it's valid.
3. Click Signature Properties, and then click Show Certificate.
4. In the Certificate Attributes dialog box, note the MD5 Fingerprint and the SHA-1
Fingerprint numbers. Confirm with the certificate's originator that the information is
correct.
5. After you verify that the certificate information is correct, click Close, click Trust Identity,
click OK, specify trust options, and then click Import.
To delete a certificate from the list of trusted certificates:
1. Choose Document > Trusted Identities.
2. Select the certificate, and click Delete.
preferences.)
Configuring identity search