Setting up security policies for PDF’s

Configurare noua (How To)

Situatie

If you often apply the same security settings to multiple PDFs, you can save your settings as a policy that you can reuse. Security policies save time while ensuring a consistently secure workflow. Creating policies for password and certificate security lets you reuse the same security settings for any number of PDFs. Two kinds of security policies are available:

  • Organizational policies are especially useful if you want others to have access to PDFs for a limited time. Adobe Experience Manager – Forms Server (Document Security) policies are stored on a server. Users must have access to the server to use these policies. Creating these policies requires specifying the document recipients from a list on Adobe Experience Manager – Forms Server (Document Security)Adobe Experience Manager – Forms Server (Document Security) controls access to PDFs and auditing events as defined by the security policy. You can use Experience Manager – Forms Server (Document Security) if your company has licensed the software and made it available to you.
  • User policies are created and applied by individuals. If you apply the same security settings to numerous documents, you can save time by creating a user policy. Then, apply the user policy to documents. User policies for passwords and public key certificates are stored on your local computer. With access to Adobe Experience Manager – Forms Server (Document Security), you can create a user policy that’s stored on the Forms Server. That policy is available only to you.

Solutie

Pasi de urmat
How organizational policies are authenticated

In addition to reusing security settings, policies stored on Adobe Experience Manager Forms Server (Document Security) enable you to expire and revoke documents. You can also maintain accountability by auditing users who open protected documents.

Adobe LiveCycleRights Management
Security policies

A. Policies are stored on server. B. Policies are applied to a PDF. C. Users can open, edit, and print a document only if permitted by policy.

Setting up server-based security policies involves four main stages:

Configure the Adobe Experience Manager – Forms Server

The system administrator of your company or group usually configures Adobe Experience Manager – Forms Server (Document Security), manages accounts, and sets up organizational policies. For more information on configuring Adobe Experience Manager – Forms Server (Document Security), see the Adobe website.

Publish a document with a security policy

An author creates a PDF and applies a policy stored on Adobe Experience Manager Forms Server to the PDF. The server generates a license and unique encryption key for the PDF. Acrobat embeds the license in the PDF and encrypts it using the encryption key. The author or administrator can use this license to track and audit the PDF.

View a document with a policy applied

When users try to open the secure PDF in Acrobat, they must authenticate their identities. If the user is granted access to the PDF, the PDF is decrypted and opens with the permissions specified in the policy.

Administer events and modify access

By logging in to an Adobe Experience Manager – Forms Server (Document Security) account, the author or administrator can track events and change access to policy-secured PDFs. Administrators can view all PDF and system events, modify configuration settings, and change access to policy-secured PDFs.

User policies can use passwords, certificates, or Adobe Experience Manager – Forms Server (Document Security) to authenticate documents.

The policies for password and certificate security can be stored on a local computer. Security policies created using Adobe Experience Manager – Forms Server  (Document Security) are stored on a server. You can audit actions and change security settings dynamically. You can use Adobe Experience Manager – Forms Server (Document Security) if your company has licensed the software and made it available to you.

Create a password policy
  • In Acrobat, choose Tools > Protect > More Options > Manage Security Policies.

  • Click New.
  • Select Use Passwords, and then click Next.

  • Type a name and description for the policy, do one of the following, and then click Next:
    • To specify passwords and restrictions whenever you apply this policy to a document, clear the Save Passwords With The Policy option.
    • To save passwords and restriction settings with the policy, select Save Passwords With The Policy.
  • Specify a compatibility setting and password options. If you selected Save Passwords With The Policy, specify the password and restrictions. Click OK.
  • Review the policy details, click Finish, and then click Close.
Create a certificate policy
  • In Acrobat, choose Tools > Protect > More Options > Manage Security Policies.

  • Click New.
  • Select Use Public Key Certificates, and then click Next.
  • Type a name and description for the policy, and specify the document components to encrypt.

    Certificates must be current and have key usage that allows for encryption.

  • Determine how to enforce the policy:
    • To create a policy that is associated with individual recipients, do not select Ask For Recipients When Applying This Policy.
    • To create a policy that is associated with individual documents, select Ask For Recipients When Applying This Policy.
  • Select an encryption algorithm from the menu that is compatible with the recipients’ version of Acrobat, and click Next.
  • Do one of the following:
    • If you selected Ask For Recipients When Applying This Policy, review the policy settings and then click Finish.
    • If you did not select Ask For Recipients When Applying This Policy, specify recipients by selecting digital IDs (including your digital ID). Then click Next.
  • Click Finish.
For example, when you send confidential documents, including non-PDF files, you only want the recipient to view the documents. You can embed these documents as attachments in a security envelope, encrypt the envelope, and send it by email. Anyone can open the envelope, view its cover page, and even view a list of the contents. However, only the recipient can view the embedded attachments and extract them.
Embed file attachments in security envelopes for secure transit
Embed file attachments in security envelopes for secure transit.
  • Choose Tools > Protect > More Options > Create Security Envelope.

  • Click Add File To Send, select the documents you want to attach, and then click Open. Click Next.

  • Select an envelope template, and click Next.

  • Select a delivery method, and click Next.

  • If an envelope policy has been created, select it or select New Policy. Then, follow the steps to create a policy.

  • Review the information and click Finish.

  • For some policies, you are asked to type the information you want displayed on the envelope. Enter enough information to allow recipients to identify the sender of the envelope.
  • Complete the security information (password, certificate, or policy).
  • When the envelope is displayed, type the names of the recipients. Then, either click the Save or Mail icon in the toolbar.

    If you click the Mail icon, your default email program opens with the security envelope as an attachment. Type the email addresses of the recipients, and send the email message.

Create a user security policy with Adobe Experience Manager – Forms Server (Document Security)

If you have access to Adobe Experience Manager Document Security, you can restrict document access and rights of individuals registered with the server. When you create a user policy using Adobe Experience Manager Forms Server, you’re redirected to the Experience Manager Forms Server web page.

  • Do one of the following:
    • For a single PDF or a component PDF in a PDF Portfolio, open the PDF.
    • For a PDF Portfolio, open the PDF Portfolio and choose View Portfolio Cover Sheet.
  • Choose Tools > Protect More Options Manage Security Policies.

  • Click New.
  • Select Use The Adobe Experience Manager – Forms Server (Document Security), and click Next.

  • On the Adobe Experience Manager – Forms Server (Document Security) web page, click Policies, and then click New.

  • Type a name and description, set the validity period, and any other options.
  • Select the users or groups, set permissions for them, and click OK.

  • Specify the document components you want to encrypt, and whether you want a watermark.
  • When you’re done, click Save at the top of the page.

You can apply either an organization policy or a user policy to a PDF. To apply a server policy to a document, connect to Adobe Experience Manager – Forms Server (Document Security)Adobe Experience Manager – Forms Server (Document Security) security policies must be stored on a server, but PDFs to which the policies are applied need not. You can apply policies to PDFs using Acrobat, server-side batch sequences, or other applications, such as Microsoft Outlook.

Only the policy administrator can edit or remove organizational policies.

Apply a security policy to a PDF

  • Do one of the following:
    • For a single PDF or a component PDF in a PDF Portfolio, open the PDF.
    • For a PDF Portfolio, open the PDF Portfolio and choose View > Portfolio > Cover Sheet.
  • If you are using a server policy, choose Tools > Protect > More Options > Manage Security Policies. Select a policy. Choose an Adobe Experience Manager – Forms Server (Document Security) policy from the list and then click Refresh.

    Refreshing security policies ensures that you get the most up-to-date server policies.

  • Choose Tools > Protect > More Options > Manage Security Policies. Select a policy, and then click Apply To Document.

Apply a policy to attachments in Outlook

You can send different types of files as secure PDF attachments in Microsoft Outlook. This option is available only if Adobe Experience Manager – Forms Server (Document Security) is set up and available in Acrobat.

  • In Outlook, choose New Mail Message on the Home ribbon.
  • Click the Attach As Secured Adobe PDF button   on the Adobe PDF ribbon.
  • Select the file you want to attach by typing the file path or by clicking Browse.
  • Specify how you want to secure the document, and click OK.

    The file is converted to PDF and encrypted using the security method you choose.

  • Complete the email message, and then click Send.

Remove a user security policy from a PDF

You can remove a security policy from a PDF if you have appropriate permissions. In general, a document owner can remove a security policy from a PDF.

  • Do one of the following:
    • For a single PDF or a component PDF in a PDF Portfolio, open the PDF.
    • For a PDF Portfolio, open the PDF Portfolio and choose View Portfolio Cover Sheet.
  • Select Tools > Protect More Options > Remove Security.

Export security settings

  • In Acrobat, Choose Edit Preferences > Security > Export.

  • Choose which groups of settings you want to share and click OK.

  • Review and modify the security settings as needed, and then click Export.
  • Select the method to use to encrypt the security settings (if desired), and then click OK.

  • Choose Recipients and click OK twice.

  • Sign the file.

Revoke a policy-protected PDF

To restrict access to a policy-protected PDF that you made available to a group of users, you can revoke the document.

  • Do one of the following:
    • For a single PDF or a component PDF in a PDF Portfolio, open the PDF and log in to Adobe LiveCycle Rights Management ES.
    • For a PDF Portfolio, open the PDF Portfolio, log in to Adobe Experience Manager – Forms Server (Document Security), and choose View > Portfolio > Cover Sheet.
  • Choose Tools > Protect > More Options > Document Security > Revoke.

  • From the menu on the web page, choose an option that explains why you’re revoking the document, or type a message. If you’re replacing the revoked document, type the URL location of the new document.
  • Click OK to save your changes.

Tip solutie

Permanent

Voteaza

(4 din 9 persoane apreciaza acest articol)

Despre Autor

Leave A Comment?