Adobe Acrobat Pro XI Security Technical Implementation Guide

The Adobe Acrobat Pro XI Security Technical Implementation Guide (V1 R2) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jan 26 2018

Adobe Acrobat Pro XI certified document trust must be disabled.

Adobe Acrobat Pro XI Security Technical Implementation Guide

Assessment Title

Rule Text

Adobe Acrobat Pro XI certified document trust must be disabled.

Description

Discussion Text

Certified document trust elevates signed PDF files to a privileged location and bypasses privileged view security protections. Disabling certified documents disables and locks the end user's ability to elevate certified documents as a privileged location.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-75297

Rule

SV-89977r1_rule

Severity

medium

Rule Version

ADBP-XI-001335

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the following registry configuration:

Using the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown

Value Name: bEnableCertificateBasedTrust
Type: REG_DWORD
Value: 0

If the value for bEnableCertificateBasedTrust is not set to "0" and Type is not configured to REG_DWORD or does not exist, this is a finding.

Implementation Procedure

Fix Text

Configure the following registry value:

Registry Hive:
HKEY_LOCAL_MACHINE
Registry Path:
\Software\Policies\Adobe\Adobe Acrobat\11.0\FeatureLockDown

Value Name: bEnableCertificateBasedTrust
Type: REG_DWORD
Value: 0

STIG check 16 of 26 in the Adobe Acrobat Pro XI STIG checklist

← Previous · V-75295Adobe Acrobat Pro XI must disable the ability to store files on Acrobat.com.Next · V-75299 →Adobe Acrobat Pro XI privileged host locations must be disabled.