In Acrobat or Acrobat Reader Trusted Certificate Store, the certificates containing hexadecimal sequence “FE FF” in their X.509 data get corrupted after updating AATL (Adobe Approved Trust List) or EUTL (European Union Trust List).
Corruption occurs when the Trusted Certificate Store is rewritten or optimized, for example when updating AATL/EUTL or when manually importing a certificate into the Trusted Certificate Store.
As a result:
Windows, OS X (macOS)
|
Acrobat |
Reader |
---|---|---|
DC Continuous / Subscription |
Win: 18.011.20035 |
Win: 18.011.20036 |
DC Classic 2015 |
Win: 15.006.30413 (2015.006.30413) |
Win: 15.006.30413 (2015.006.30413) |
Acrobat 2017 / Acrobat Reader 2017 |
Win: 17.011.30078 (2017.011.30078) |
Win: 17.011.30078 (2017.011.30078) |
Update to the latest version of Acrobat and Reader, and then update AATL and EUTL so that corrupt certificates are replaced with correct certificates in the Trusted Certificate Store.
Update to the latest version: In Acrobat or Reader, go to Help > Check for Updates, and then the follow onscreen instructions.
Update AATL/EUTL: In Acrobat or Reader, go to Edit > Preferences and then do the following:
If you manually trusted a certificate outside AATL or EUTL, and are seeing signatures being reported as invalid for the manually trusted certificate, do the following:
Update to the latest version: In Acrobat or Reader, go to Help > Check for Updates, and then the follow onscreen instructions.
Close Acrobat or Reader if it's running.
Delete the trust list by deleting the following file:
C:\Users\[UserName]\AppData\Roaming\Acrobat\<product version, for example, DC, 2015, or 2017>\Security\addressbook.acrodata
Re-create trust list file ( addressbook .acrodata) by updating AATL, EUTL as described above - step 2 in the previous procedure.
Manually add the certificate that you want to trust to the Trust Identities.
To add a certificate manually to the Trusted Identities:
1. Go to Edit > Preferences.
2. Under Categories, select Signatures.
3. For Identities & Trusted Certificates, click More.
4. Select Digital IDs on the left.
5. To import an ID, click the Add ID button, and then follow the onscreen instructions.
The problem is fixed in the following builds/versions of Acrobat/Reader:
Sign in to your account