Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Adobe Acrobat Pro XI periodic downloading of Adobe European certificates must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-75281 | ADBP-XI-000990 | SV-89961r1_rule | Low |
| Description |
|---|
| By default, the user can update Adobe European certificates from an Adobe server through the GUI. When updating Adobe European certificates is disabled, it prevents the automatic download and installation of certificates and disables and locks the end user's ability to download those certificates. |
| STIG | Date |
|---|---|
| Adobe Acrobat Pro XI Security Technical Implementation Guide | 2017-07-24 |
Details
| Check Text ( C-75065r2_chk ) |
|---|
| Verify the following registry configuration: Note: The Key Names "cDigSig" and "cEUTLDownload" are not created by default in the Acrobat Pro XI install and must be created. Using the Registry Editor, navigate to the following: HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\11.0\Security\cDigSig\cEUTLDownload Value Name: bLoadSettingsFromURL Type: REG_DWORD Value: 0 If the value for bLoadSettingsFromURL is not set to “0” and Type is not configured to REG_DWORD or does not exist, this is a finding. |
| Fix Text (F-81897r3_fix) |
|---|
| Configure the following registry value: Note: The Key Names "cDigSig" and "cEUTLDownload" are not created by default in the Acrobat Pro XI install and must be created. Registry Hive: HKEY_CURRENT_USER Registry Path: \Software\Adobe\Adobe Acrobat\11.0\Security\cDigSig\cEUTLDownload Value Name: bLoadSettingsFromURL Type: REG_DWORD Value: 0 |