Adobe Acrobat Pro XI Periodic downloading of Adobe certificates must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-75303	ADBP-XI-001320	SV-89983r1_rule		Low

Description
By default, the user can update Adobe certificates from an Adobe server through the GUI. When updating Adobe certificates is disabled, it prevents the automatic download and installation of certificates and disables and locks the end user's ability to download those certificates.

STIG	Date
Adobe Acrobat Pro XI Security Technical Implementation Guide	2018-01-03

Details

Check Text ( C-75087r2_chk )
Verify the following registry configuration: Note: The Key Names "cDigSig" and "cAdobeDownload" are not created by default in the Acrobat Pro XI install and must be created. Using the Registry Editor, navigate to the following: HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\11.0\Security\cDigSig\cAdobeDownload Value Name: bLoadSettingsFromURL Type: REG_DWORD Value: 0 If the value for bLoadSettingsFromURL is not set to “0” and Type is not configured to REG_DWORD or does not exist, this is a finding.

Check Text ( C-75087r2_chk )

Verify the following registry configuration:

Note: The Key Names "cDigSig" and "cAdobeDownload" are not created by default in the Acrobat Pro XI install and must be created.

Using the Registry Editor, navigate to the following: HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\11.0\Security\cDigSig\cAdobeDownload

Value Name: bLoadSettingsFromURL
Type: REG_DWORD
Value: 0

If the value for bLoadSettingsFromURL is not set to “0” and Type is not configured to REG_DWORD or does not exist, this is a finding.

Fix Text (F-81919r3_fix)
Configure the following registry value: Note: The Key Names "cDigSig" and "cAdobeDownload" are not created by default in the Acrobat Pro XI install and must be created. Registry Hive: HKEY_CURRENT_USER Registry Path: \Software\Adobe\Adobe Acrobat\11.0\Security\cDigSig\cAdobeDownload Value Name: bLoadSettingsFromURL Type: REG_DWORD Value: 0