Introduction of the Digital IDs
A digital ID is like an electronic driver’s license or passport that proves your identity. A digital ID usually contains your name and email address, the name of the organization that issued it, a serial number, and an expiration date. Digital IDs and digital signatures are used for certificate security.
Digital IDs contain two keys: the public key locks or encrypts data, and the private key unlocks or decrypts that data. When you sign PDFs, you use the private key to apply your digital signature. The public key is in a certificate that you distribute to others. For example, you can send the certificate to those who want to validate your signature or identity. Store your digital ID in a safe place because it contains your private key that others can use to decrypt your information.
You don’t need a digital ID for most of the work you do in PDFs. For example, you don’t need a digital ID to create PDFs, comment on them, and edit them. You need a digital ID to sign a document or encrypt PDFs through a certificate.
To Note: Unfortunately, you cannot recover or reset your digital ID's password if you’ve forgotten it. If you created the ID yourself, you can create a new one with the same information that you used for the ID. If you got the ID from a certificate authority, contact the authority for help.
Create a self-signed digital ID
-
In Acrobat, select the hamburger menu (Windows) or Acrobat menu (macOS) and then choose Preferences.
-
In the Categories list on the left, select Signatures. On the right, select More for Identities & Trusted Certificates.
-
Select Digital IDs on the left, and then click the Add ID button .
4. Select A New Digital ID I Want To Create Now, and click Next.
5. Specify where to store the digital ID, and click Next.
New PKCS#12 Digital ID File stores the digital ID information in a file with the extension .pfx in Windows and .p12 in macOS. You can use the files interchangeably between operating systems. If you move a file from one operating system to another, Acrobat still recognizes it.
Windows Certificate Store (Windows only) stores the digital ID to a common location from where other Windows applications can also retrieve it.
6. Do the following:
- Type a name, email address, and other personal information for your digital ID. When you certify or sign a document, the name appears in the Signatures panel and in the Signature field.
- Choose an option from the Key Algorithm menu. The 2048-bit RSA option offers more security than the 1024-bit RSA, but the 1024-bit RSA is more universally compatible.
- From the Use Digital ID For menu, choose whether you want to use the digital ID for signatures, data encryption, or both.
- Click Next.
7. Do the following:
- Type a password for the digital ID file. For each keystroke, the password strength meter evaluates your password and indicates the password strength using color patterns. Reconfirm your password.
- The digital ID file is stored at the default location, as shown in the File Name field. If you want to save it somewhere else, click Browse and choose the location.
- Click Finish.
If a digital ID file with the same name exists, you're prompted to replace it. Click OK to replace or browse and select a different location to store the file.
8. The ID is created. You can export and send your certificate file to contacts who can use it to validate your signature.
Register a digital ID
To use your digital ID, register your ID with Acrobat or Reader.
-
In Acrobat, select the hamburger menu (Windows) or Acrobat menu (macOS) and then choose Preferences > Signatures. In Identities & Trusted Certificates, select More.
-
Select Digital IDs on the left.
-
Click the Add ID button .
-
Choose one of the following options:
A File
Select this option if you obtained a digital ID as an electronic file. Follow the prompts to select the digital ID file, type your password, and add the digital ID to the list.
A Roaming Digital ID Stored On A Server
Select this option to use a digital ID that’s stored on a signing server. When prompted, type the server name and URL where the roaming ID is located.
A Device Connected To This Computer
Select this option if you have a security token or hardware token connected to your computer.
5. Click Next, and follow the onscreen instructions to register your digital ID.
Specify the default digital ID
-
In Acrobat, select the hamburger menu (Windows) or Acrobat menu (macOS) and then choose Preferences > Signatures. In Identities & Trusted Certificates, select More.
-
Select Digital IDs on the left, then select the digital ID you want to use as the default.
-
Click the Usage Options button , and choose a task for which you want the digital ID as the default. To specify the digital ID as the default for two tasks, select the Usage Options button again and select a second option.
A check mark appears before selected options. If you select only the signing option, the Sign icon appears next to the digital ID. If you select only the encryption option, the Lock icon appears . If you select only the certifying option or the signing and certifying options, the Blue Ribbon icon appears.
Change the password and timeout for a digital ID
To Note: Self-signed digital IDs expire in five years. After the expiration date, you can use the ID to open but not sign or encrypt a document.
-
In Acrobat, select the hamburger menu (Windows) or Acrobat menu (macOS) and then choose Preferences > Signatures. In Identities & Trusted Certificates, select More.
-
Expand Digital IDs on the left, select Digital ID Files, and then select a digital ID on the right.
-
Select Change Password. Type the old password and a new password. For each keystroke, the password strength meter evaluates your password and indicates the password strength using color patterns. Confirm the new password, and then select OK.
-
With the ID still selected, select the Password Timeout button.
-
Specify how often you want to be prompted for a password:
Always
Prompts you each time you use the digital ID.
After
Lets you specify an interval.
Once Per Session
Prompts you once each time you open Acrobat.
Never
You’re never prompted for a password.
6. Type the password, and select OK.
Delete your digital ID
-
In Acrobat, select the hamburger menu (Windows) or Acrobat menu (macOS) and then choose Preferences > Signatures. In Identities & Trusted Certificates, select More.
-
Select Digital IDs on the left, and then select the digital ID to remove.
-
Select Remove ID.
-
Enter the password, and then select OK.