…

                                                                                                 Verify O r g a n i z a t i o n s
                                                                                                   Verify I n d i v i d u a l s
                                                                                                       Verify C o n t e n t




Adobe ® Certified Document Services
Document Signing Solution for Secure Electronic Document Publishing



PUBLISH AND DISTRIBUTE ELECTRONIC DOCUMENTS SAFELY                                            KEY FEATURES & BENEFITS
Every day, businesses, educational institutions and government agencies publish and
share information electronically. Because these organizations depend on rapid, easy           Certified Document Services
information access, they bring their documents and business processes online to               provides:
improve efficiency, reduce costs, serve users more effectively and comply with                  · Certified digital signatures
regulatory mandates.                                                                            · Electronic document control
                                                                                                · Persistent document security
Yet, online fraud and identity theft, combined with instant information dissemination via
e-mail and the Web, provide an easy way for fraudulent documents to be distributed.           Assurance of authenticity of author
While incompatible security technologies and desktops make sharing documents                  and integrity of content
cumbersome and inconsistent. As a result, documents sent outside an organization are
often left unprotected, and recipients are rarely assured of a document's integrity or        Real-time certificate validation when
author's identity.                                                                            PDF is viewed

GeoTrust's Certified Document Services (CDS) is changing the way enterprises use and          Compliance with federal e-signature
trust electronic information. It allows authors to publish trusted Adobe® Portable            law
Document Format (PDF) files to an open community where pre-existing trust
relationships don't already exist.                                                            Easy acceptance by recipients with
                                                                                              free Adobe® Reader
ENSURE DOCUMENT INTEGRITY SEAMLESSLY AND SIMPLY
Together, Adobe and GeoTrust have developed a revolutionary solution for document             Server-based and desktop
security. CDS is the first ubiquitous implementation of public-key document validation        implementation available
technology; and, because it is embedded within existing Adobe applications, it is truly
seamless and easy to use.                                                                     Allows for one-way publishing
                                                                                              (author-to-recipient) and counter-
The highest level of document security available                                              signing of documents
Certified documents differ significantly from standard digitally signed ones. For example,
although Adobe® Acrobat® allows authors to sign PDFs with any x.509 v3 digital
certificate, this isn't the same as signing a PDF document with a CDS certificate issued
from GeoTrust. A CDS certificate is signed by the GeoTrust for Adobe Certificate
Authority (CA) that has been issued by the Adobe trusted root and embedded in Adobe
Reader and Acrobat, versions 6.0 and higher. Only certificates issued from this hierarchy
will receive the certified signature validation mark automatically when opened with
Adobe Reader or Acrobat.

Relying parties don't need to decide for themselves whether the issuing CA should be
trusted since the Adobe Reader or Acrobat applications automatically verify the validity of
the certificate and display a message to the relying party that the signature and/or
contents have been validated. In addition, CDS signing ensures the highest level of
document integrity and verification because the user's or department's digital credentials
must be stored on a cryptographic hardware device and they must be issued by a
WebTrust-certified CA using strict guidelines.
How it works                                                                                          SOLUTION HIGHLIGHTS
With CDS, GeoTrust provides CA services to Adobe. Authors or                                          Certified Document Services is available to either individuals or
organizations interested in creating certified documents will                                         departments within an organization, and is available in two
register with GeoTrust, have their identification information                                         hardware configurations to meet varying volume requirements.
verified and be provided with a digital certificate that can be used
to sign PDF documents.                                                                                    · Desktop-based solution is designed for low or moderate
                                                                                                            volume signing using Adobe Acrobat. A SafeNet* FIPS
Document recipients using the free Adobe Reader or Acrobat will                                             140-2 level 2 cryptographic smart card or USB token is
then have the ability to automatically validate certified documents                                         issued to an individual (Sarah Jones) or a department (ABC
with no additional software or configuration. The document                                                  Company, Human Resources). The smart card or token,
recipient simply opens the document and is presented with a                                                 which holds the verified signer's CDS certificate, must be
document validity signature box. It includes easy to understand                                             installed in the signing party's USB computer port, and each
certification status symbols that indicate whether the document                                             PDF document is signed individually, using a secure, two
is certified and/or if it has been modified (see below).                                                    factor, process (token plus password).
                                                                                                          .

                                                                                                          · Server-based solution is designed for organizations that are
                                                                                                            publishing high-volumes of documents (such as bank
 Document is Valid                Validity Unknown                Document is Invalid                       statements, billing statements, or reports in the name of an
                                                                                                            organization). This solution works in conjunction with the
By clicking on the signature properties, recipients can view                                                Adobe LiveCycleTM Security server, and eliminates the step
additional information, such as certificate details, signer's contact                                       of manually opening each PDF file and applying a certified
information and validation method.                                                                          signature. In this configuration, the CDS certificate is
                                                                                                            securely stored on a SafeNet FIPS 140-1 level 3 hardware
APPLICATIONS FOR CERTIFIED DOCUMENT SERVICES                                                                security module (HSM).
The need to certify document authenticity is stronger than ever
in today's electronic business environment. Digital signature
capabilities enable important documents and information to be                                         Both solutions include a fully-managed, centralized and secure
published inside and outside an organization with added                                               Web-based management system that provides authorized
assurances that the information arrives exactly as it was                                             Registration Authorities the ability to enroll users, run reports,
intended.                                                                                             revoke certificates and perform other certificate lifecycle
                                                                                                      functions; a one-year signing license; and world-class customer
Certified Document Services is an ideal solution for                                                  support via phone and email. Professional system integration
organizations that publish documents that need to be trusted,                                         services, as well as a full range of support options, are also
including:                                                                                            available.

   · Financial Services that are driven by high value transactions,                                   ABOUT GEOTRUST, INC.
     the conservative nature of business operations and need to                                       GeoTrust is a leader in identity verification and trust services for
     adhere to government regulations such as the Sarbanes-                                           e-business, and the fastest growing Certificate Authority
     Oxley Act                                                                                        according to market research firm Netcraft. Its products include
                                                                                                      web security services for secure e-commerce transactions,
   · Healthcare Organizations that must maintain highly sensitive                                     identity verification for consumers, managed security services for
     information and compliance with HIPAA regulations                                                enterprises, digital signing for documents and computer code,
                                                                                                      and TrustWatch (www.TrustWatch.com), a free toolbar and
   · Educational Institutions that want to expedite the                                               search site that helps consumers recognize whether a site has
     dissemination of grades and transcripts, and save on                                             been verified and is safe for the exchange of confidential
     processing costs                                                                                 information. GeoTrust's TC TrustCenter division, located in
                                                                                                      Germany, is a market leader in client credentialing solutions
   · Manufacturing Companies that are facing pressure to reduce                                       which are deployed on smart cards, tokens or as soft tokens, and
     costs by streamlining business work-flow by replacing paper                                      used for authentication and digital signature applications. With
     transactions with electronic transactions                                                        more than 100,000 companies worldwide using its technology
                                                                                                      for online security, GeoTrust has rapidly become the second
   · Government Agencies that need to support the                                                     largest digital certificate provider in the world. Visit
     e-government Act of 2002 and the Government Paperwork                                            www.geotrust.com or www.trustcenter.de for more information.
     Elimination Act

   · Other uses for CDS include distribution of invoices, legal
     documents, engineering and architectural plans, sales
     quotes, financial and banking documents, real estate
     documents, press releases, privacy statements, and human
     resource documents
                                                                                                                                                        117 Kendrick Street, Suite 350
                                                                                                                                                        Needham, MA 02494
                                                                                                                                                        Phone: (781) 292-4100
                                                                                                                                                        Toll Free: (800) 944-0492
                                  *SafeNet, Inc. has partnered with GeoTrust to provide customers with                                                  Fax: (781) 444-3961
                                  hardware-based protection for sensitive application and user identity keys.                                           E-mail: info@geotrust.com
                                                                                                                                                        www.geotrust.com

DS-CDS-0206 © GeoTrust, Inc. All rights reserved. All specifications subject to change without notice. GeoTrust, the GeoTrust corporate logo and True Credentials are registered trademarks of GeoTrust,
Inc. All other trademarks referenced herein are the property of their respective owners. Some information contained in this document is copyrighted by Adobe Systems, Inc.