PDF certification using AEM Forms fails with an exception
Certifying a PDF using AEM Forms fails with the exception "ALC-DSS-300-013 The document is Ubiquitized/Reader Extended and has Insufficient SIGNATURE_CREATE permissions for performing the operation certify on Signature Field".

Environment

AEM Forms J2EE all versions

Issue

Certifying a PDF using the Certify operation fails with the following exception:

Caused by: com.adobe.livecycle.signatures.client.types.exceptions.PermissionsException:
ALC-DSS-300-013 The document is Ubiquitized/Reader Extended and has
Insufficient SIGNATURE_CREATE permissions for performing the operation certify
on Signature Field . (in the operation : certify)
at
com.adobe.livecycle.signatures.service.impl.SignCertifyImpl.certify(SignCertifyImpl.java:552)
at
com.adobe.livecycle.signatures.service.impl.DocumentSecurityService.certify(DocumentSecurityService.java:1649)
at sun.reflect.GeneratedMethodAccessor798.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.java:118)
... 184 more

Cause

Typically, the above exception is thrown if you attempt to certify a Dynamic XFA PDF.

Certifying a PDF requires a Signature field on the form. In case no Signature field is present, the Certify operation attempts to add one. Adding Signature programmatically is not possible on a Dynamic XFA PDF. Therefore, the operation fails with the above exception indicating that creating a signature was not possible.

Resolution

Add a Signature field (the field is invisible) on the Dynamic XFA PDF, and configure the Certify operation to place the certification on that Signature field.