Create a signing certificate by using FXCLI
Perform the following steps to create a signing certificate on the HSM:1
Open the FXCLI prompt by running the
fxcli-hsm command in a terminal.2
Connect your laptop to the HSM by using the USB port on the front, and run the following command:
FXCLI
3
Run the following command to log in with both default Admin identities. When prompted for the username and password, enter them. You must run this command twice.
FXCLI
4
Generate an RSA key pair and store it in a key slot on the HSM. The slot must be within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
FXCLI
5
Create a signing certificate and designate a slot to save the certificate within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
FXCLI
6
Run the following commands to set a PKCS #11 key label and link the private key to the certificate:
FXCLI
7
Run the following commands to set a PKCS #11 certificate label and link the certificate to the private key:
FXCLI
Configure the Futurex PKCS #11 library in Adobe Acrobat Desktop
This section provides instructions on attaching the Futurex PKCS #11 library to Adobe Acrobat Desktop.1
Open Adobe Acrobat as Administrator.
2
Select Menu in the upper-left corner and select [ Preferences ].
3
Inside Preferences, select Signatures in the left-side menu.
4
Under I dentities & Trusted Certificates, select [ More ].
5
In the Digital ID and Trusted Certificate Settings window, select PKCS #11 Modules and Tokens in the left-hand menu. Then, select [ Attach Module ].
6
Browse for the
fxpkcs11.dll file and select it.7
After you select the
fxpkcs11.dll file, expand PKCS #11 Modules and Tokens and select FxPKCS11 underneath it in the left-side menu.8
Select [ Login ] and enter the password for the identity you configured for this integration. Then, select [ OK ].
9
After you log in, you can expand the FxPKCS11 section in the left-hand menu. Select Futurex in that section.
In the Futurex menu, you should see the Signing Certificate you created earlier by using FXCLI displayed as a Digital ID.
10
Close the Digital ID and Trusted Certificate Settings window.
Sign a PDF by using your signing certificate
Perform the following steps to sign a PDF by using your signing certificate:1
Open a PDF document you want to sign.
2
In the left-hand Tools menu, select [ Use a Certificate ].
3
Select [ Digitally Sign ].
4
Use your mouse to click and drag to draw the area where you want the signature to appear.
5
In the Sign with a Digital ID window, select your signing certificate and select [ Continue ].
6
Modify the appearance as needed and select [ Sign ].
7
Select where you want to save the signed document and select [ Save ].
The document now shows a digital signature and a message stating that Signed and all signatures are valid.
8
To view more information about the signature, double-click your digital signature and select [ Signature Properties ]. Here, you can view information about the validity and display the certificate.