Configure Adobe Acrobat for signing
This section explains how to create a key for digital signing and configure Adobe Acrobat to integrate with the HSM to use the keys for document signing.
Perform the following steps to create a signing certificate on the HSM. so you can use Adobe Acrobat to sign documents with the PKCS #11 library
Open the FXCLI prompt by running the fxcli-hsm command in a terminal.
Connect your laptop to the HSM by using the USB port on the front, and run the following command:
Run the following command to log in with both default Admin identities. When prompted for the username and password, enter them. You must run this command twice.
Generate an RSA key pair and store it in a key slot on the HSM. The slot must be within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
Create a signing certificate and designate a slot to save the certificate within the slot range of the identity you created. Remember this slot because another command in this section refers to it.
Run the following commands to set a PKCS #11 key label and link the private key to the certificate:
Run the following commands to set a PKCS #11 certificate label and link the certificate to the private key:
This section provides instructions on attaching the PKCS #11 library to Adobe Acrobat.
Open Adobe Acrobat as Administrator.
Select Menu in the upper-left corner and select [ Preferences ].
Inside Preferences, select Signatures in the left-side menu.
Under Identities & Trusted Certificates, select [ More ].
In the Digital ID and Trusted Certificate Settings window, select PKCS #11 Modules and Tokens in the left-hand menu. Then, select [ Attach Module ].
Browse for the fxpkcs11.dll file and select it.
After you select the fxpkcs11.dll file, expand PKCS #11 Modules and Tokens and select FxPKCS11 underneath it in the left-side menu.
Select [ Login ] and enter the password for the identity you configured for this integration. Then, select [ OK ].
After you log in, you can expand the FxPKCS11 section in the left-hand menu. Select Futurex in that section.
In the Futurex menu, you should see the Signing Certificate you created earlier by using FXCLI displayed as a Digital ID.
Close the Digital ID and Trusted Certificate Settings window.
Open a PDF document you want to sign.
In the left-hand Tools menu, select [ Use a Certificate ].
Select [ Digitally Sign ].
Use your mouse to click and drag to draw the area where you want the signature to appear.
In the Sign with a Digital ID window, select your signing certificate and select [ Continue ].
Modify the appearance as needed and select [ Sign ].
Select where you want to save the signed document and select [ Save ].
The document now shows a digital signature and a message stating that Signed and all signatures are valid.
To view more information about the signature, double-click your digital signature and select [ Signature Properties ]. Here, you can view information about the validity and display the certificate.