Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.futurex.com/llms.txt

Use this file to discover all available pages before exploring further.

This section explains how to create a key on the Vectera Plus that can be used for digital signing in Adobe Acrobat Desktop.

Create a signing certificate by using FXCLI

Perform the following steps to create a signing certificate on the HSM:
1
Open the FXCLI prompt by running the fxcli-hsm command in a terminal.
2
Connect your laptop to the HSM by using the USB port on the front, and run the following command:
FXCLI
  connect usb
3
Run the following command to log in with both default Admin identities. When prompted for the username and password, enter them. You must run this command twice.
FXCLI
  login user
4
Generate an RSA key pair and store it in a key slot on the HSM. The slot must be within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
FXCLI
  generate --algo RSA --bits 2048 --usage sign,verify --name AdobeKeyPair --slot 10

5
Create a signing certificate and designate a slot to save the certificate within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
FXCLI
  x509 sign --private-slot AdobeKeyPair --key-usage DigitalSignature --dn 'O=FFuturex\CN=Integrations' --save-slot 11

6
Run the following commands to set a PKCS #11 key label and link the private key to the certificate:
FXCLI
  keytable extdata --slot 10 --p11-attr label --p11-value "Integrations Private"
  keytable extdata --slot 10 --p11-attr id --p11-value "IntegrationsPki"
7
Run the following commands to set a PKCS #11 certificate label and link the certificate to the private key:
FXCLI
  keytable extdata --slot 11 --p11-attr label --p11-value "Integrations Cert"
  keytable extdata --slot 11 --p11-attr id --p11-value "IntegrationsPki"

Configure the Futurex PKCS #11 library in Adobe Acrobat Desktop

This section provides instructions on attaching the Futurex PKCS #11 library to Adobe Acrobat Desktop.
1
Open Adobe Acrobat as Administrator.
2
Select Menu in the upper-left corner and select [ Preferences ].
3
Inside Preferences, select Signatures in the left-side menu.
4
Under I dentities & Trusted Certificates, select [ More ].
5
In the Digital ID and Trusted Certificate Settings window, select PKCS #11 Modules and Tokens in the left-hand menu. Then, select [ Attach Module ].
6
Browse for the fxpkcs11.dll file and select it.
7
After you select the fxpkcs11.dll file, expand PKCS #11 Modules and Tokens and select FxPKCS11 underneath it in the left-side menu.
8
Select [ Login ] and enter the password for the identity you configured for this integration. Then, select [ OK ].
9
After you log in, you can expand the FxPKCS11 section in the left-hand menu. Select Futurex in that section.
In the Futurex menu, you should see the Signing Certificate you created earlier by using FXCLI displayed as a Digital ID.
10
Close the Digital ID and Trusted Certificate Settings window.

Sign a PDF by using your signing certificate

Perform the following steps to sign a PDF by using your signing certificate:
1
Open a PDF document you want to sign.
2
In the left-hand Tools menu, select [ Use a Certificate ].
3
Select [ Digitally Sign ].
4
Use your mouse to click and drag to draw the area where you want the signature to appear.
5
In the Sign with a Digital ID window, select your signing certificate and select [ Continue ].
6
Modify the appearance as needed and select [ Sign ].
7
Select where you want to save the signed document and select [ Save ].
The document now shows a digital signature and a message stating that Signed and all signatures are valid.
8
To view more information about the signature, double-click your digital signature and select [ Signature Properties ]. Here, you can view information about the validity and display the certificate.