which form security settings? - InfoPath Dev
in

InfoPath Dev

which form security settings?

Last post 04-09-2013 10:57 AM by Sabra. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next

  • 04-03-2013 10:32 AM

    • Sabra
    • Not Ranked
    • Joined on 03-28-2013
    • Posts 6

    which form security settings?

    Reply Contact

     Hi all,

     We use InfoPath 2010 and we do not have sharepoint.  Most, we send forms to users and submit by sending through emails.

    We allow several  internal users to digitally sign it and we use windows internal certificate server.

    which form security should I choose to allow multiple users to sign? (restricted, domain and full trust)

    Thank you.

  • 04-07-2013 10:12 PM In reply to

    Re: which form security settings?

    Mark as Answer
    Reply Contact

    If you're using email to send the forms around, you have to use Restricted.

    If not, the best practice is Domain.

    Doing Full Trust is only necessary for forms that write to the file system or connect with external web sites. You do not need this to sign a form. However, you will need a digital certificate to sign a form template to allow it to run as full trust (this can be confusing since it seems related to digital signatures, but it's not related).

    Patrick Halstead
    Project Manager at Qdabra

  • 04-09-2013 10:57 AM In reply to

    • Sabra
    • Not Ranked
    • Joined on 03-28-2013
    • Posts 6

    Re: which form security settings?

    Mark as Answer
    Reply Contact

     Hi Patrick,

     Thanks for the reply.

    >If you're using email to send the forms around, you have to use Restricted.

    Thank you and will it allow two or multiple internal users to sign it?

    Here is my case:

     

     

    I set up Certificate services server as this link:

    http://marcellotonarelli.wordpress.com/2009/10/28/domain-certificate-authority-signing-infopath-2007-forms/ (use code signing template)

    The form xsn is configured to allow co-sign (multiple users can sign)

    We asked two internal users (only for domain internal userA and userB) to digitally signed and it can not validate signature

    each other.  We do not have sharepoint server and users use InfoPath filler to open it.  Users A signs the form and digitally signed and then send the form to user B through email

    When userB opens the form (attachment) in Outlook (every user has InfoPath installed), userB can not see the userA certificate info and the message shows "the signature is not valid"

    these certificates are issued by our internal CA and our Certificate server is in everyone's trusted root certificate store

    (details: userA requested the cert from our internal CA and install it and  appears in the user personal certificate store; then digitally sign the form by using his certificate; email the

    signed form to user B.  User B open the form and got" the signature is not valid". 

     

    What am I missing?  why do internal users can not validate signatures each other with our internal certificate server?

     

    Thank you for your help.
Page 1 of 1 (3 items)
Copyright © 2003-2019 Qdabra Software. All rights reserved.
View our Terms of Use.