Security certificate updates

Adobe is currently investigating what appears to be the inappropriate use of an Adobe code signing certificate for Windows. We plan to revoke the impacted certificate on October 4, 2012 for all software code signed after July 10, 2012. Customers should not notice anything out of the ordinary during the certificate revocation process.

Is your Adobe software vulnerable because of this issue? No. This issue has no impact on the security of your genuine Adobe software. Are there other security risks to you? We have strong reason to believe that this issue does not present a general security risk.

The revocation of the certificate affects the Windows platform and three Adobe AIR applications* that run on both Windows and Macintosh. The revocation does not impact any other Adobe software for Macintosh or other platforms.

Adobe is issuing updates for all impacted products to provide customers with software code signed using a new digital certificate.

For more information, read the FAQ or ask a question.

If you haven't installed Adobe software or updates after July 10, 2012, you don't need to do anything.

If you use Adobe software on Windows*, click any of the following links to find out whether you need to update your software:

I use Flash Player.

I use Acrobat or Adobe Reader.

I use other Adobe desktop products.

I use Adobe enterprise products.

I manage Adobe applications as an IT administrator.

Go to the Flash Player Help page and make sure that you have the latest version.

You don't need to do anything, but we encourage all end users to keep their software up to date. Download the latest version.

If you use Adobe software on Windows*, simply follow these guidelines.

NOTE: These updates typically take minutes to install—they're not full products.

Contact your IT administrator. If you are the administrator, check the list of enterprise products with updates, and then see Guidance for IT administrators.

Check the list of enterprise products to update, and then see Guidance for IT administrators.

The table below lists products with updated security certificates. If your product isn't listed here, you don't need to do anything.

To get updated certificates, choose from one of these options:

• For CS6 and Creative Cloud Choose Help > Update in your software. If you're a Creative Cloud subscriber, you get updates that contain product features not available in regular product updates on Adobe.com.
• Use the Adobe Customer Response Tool for Windows Download and install the Adobe Customer Response Tool for Windows. The tool determines which products have updated certificates and gives you links to install them. (Not available for Creative Cloud.) If you're a system administrator, download and install the enterprise version.
  
• Download updates from Adobe.com If you want to update products on your own, use the list below.

** Presenter 8 and ColdFusion 10 customers can either download the update, or contact support to request a new DVD free of charge.

You can find updates for desktop products in the table above, or download and install the Adobe Customer Response Tool for Windows. The tool determines which products have updated certificates and gives you links to install them. (Not available for Creative Cloud.) You can also find updates on the Licensing Website (LWS).

For Digital Marketing product updates, go to your Digital Marketing account.

See Guidance for IT administrators for instructions on updating the following enterprise products:

• Adobe Application Manager - Enterprise Edition (AAMEE)
• Adobe Update Server Setup Tool (AUSST)
• Remote Update Manager (RUM)
• Flash Player and Reader
• Report Builder - Digital Marketing Suite
• SiteCatalyst Real-Time Dashboard - Digital Marketing Suite
• Adobe Provisioning Toolkit Enterprise Edition (APTEE)
  
• Flash Media Server 4.5.3
• ColdFusion 10

* Adobe Muse and Adobe Story AIR applications as well as Acrobat.com desktop services