Operation Manual

324
Security
Last updated 4/7/2015
In FIPS mode, you can open and view documents that are protected with algorithms that are not FIPS compliant.
However, you can’t save any changes to the document using password security. To apply security policies to the
document, use either public key certificates or Adobe LiveCycleRights Management ES.
FIPS mode is configured in the Windows registry by a system administrator. For more information, see Digital
Signatures Guide (PDF) at
www.adobe.com/go/learn_acr_security_en.
More Help topics
Removing sensitive content
Setting up security policies
Modify form field properties (Acrobat Pro)
Run an action (Acrobat Pro)
Attachments as security risks in Acrobat Reader DC and
Acrobat DC
Note: For a full list of articles about security, see Overview of security in Acrobat and PDF content .
Attachments represent a potential security risk because they can contain malicious content, open other dangerous files,
or launch applications. Acrobat DC and Acrobat Reader DC always let you open and save PDF and FDF file
attachments. Acrobat DC and Acrobat Reader DC recognize certain files, such as those whose names end in .bin, .exe,
and .bat, as threats. You can’t attach such files. Acrobat DC does allow you to attach files that cannot be saved or opened
from Acrobat DC, such as ZIP files. However, this practice is not recommended.
Acrobat DC and Acrobat Reader DC maintain a white list of file types that can be opened or saved, and a black list of
file types that cannot. You are allowed to attach file types that are not on either list. However, when you open or save a
file of an “unrecognized” type, you see a dialog box asking whether you trust the file type.
For details, see the Application Security Guide at www.adobe.com/go/learn_acr_appsecurity_en.
Manually add a file type to a black or white list
Administrators can modify the black or white list through the registry. Users can manually add a new file type to a black
or white list by attaching the file and then trying to open it.
1 Choose To o ls > Edit PDF > Attach A File.
2 Add a file type that is not in the black or white list.
3 Right-click the file in the Attachments pane on the left and choose Open Attachment.
4 In the Launch Attachment dialog box, select one of the following options, and then click OK:
Open This File: Opens the file without changing the registry list.
Always Allow Opening Files Of This Type: Adds the file type to the white list and prevents future warnings.
Never Allow Opening Files Of This Type: Adds the file type to the black list and does not open it. You can possibly
attach a file of this type to a PDF, but you can’t open it.
Note: To restrict a file type that you permitted in the past, reset (restore) attachment permissions in the Trust Manager
Preferences.