https://www.infopathdev.com:443/forums/41.aspxIf you're not sure where to ask your question, ask it here. If necessary, our moderators will make sure it gets classified in the correct board.enCommunityServer 2007 SP3 (Build: 31118.962)https://www.infopathdev.com:443/forums/thread/88798.aspxTue, 09 Apr 2013 17:57:27 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:88798Sabra0https://www.infopathdev.com:443/forums/thread/88798.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=88798<p>&nbsp;Hi Patrick,</p><p>&nbsp;Thanks for the reply.</p><p>&gt;If you&#39;re using email to send the forms around, you have to use Restricted. </p><p>Thank you and will it allow two or multiple internal users to sign it?</p><p>Here is my case:</p><p>&nbsp;</p><div class="msgBody wrapWord fullMessage"><p><span><font>&nbsp;</font></span></p><p><span><font>I set up&nbsp;Certificate services server as this link:</font></span></p><p><span><a href="http://marcellotonarelli.wordpress.com/2009/10/28/domain-certificate-authority-signing-infopath-2007-forms/" target="_blank"><font color="#0000ff">http://marcellotonarelli.wordpress.com/2009/10/28/domain-certificate-authority-signing-infopath-2007-forms/</font></a><font>&nbsp;(use code signing template)</font></span></p><p><span>The form xsn is configured to allow co-sign (multiple users can sign)</span></p><p><span><font>We asked two internal users (only for domain internal userA and userB) to digitally signed and it can not validate signature </font></span></p><p><span><font>each other.&nbsp; We do not have sharepoint server and users use&nbsp;InfoPath filler to open it. &nbsp;Users A signs the form and digitally signed and then send the form to user B&nbsp;through email </font></span></p><p><span>When userB opens the form (attachment)&nbsp;in Outlook (every user has InfoPath installed), userB can not see the userA certificate info and the message shows &quot;the signature is not valid&quot; </span></p><p><span>these certificates are issued by our internal CA and our Certificate server is in everyone&#39;s trusted root certificate store</span></p><p><span><font>(details: userA requested the cert from our internal CA and install it&nbsp;and &nbsp;appears in the user personal certificate store; then digitally sign the form by using his certificate; email the </font></span></p><p><span><font>signed&nbsp;form to user&nbsp;B.&nbsp; User B open the form and got&quot; the&nbsp;signature is not valid&quot;.&nbsp; </font></span></p><p><span><font>&nbsp;</font></span></p><p><span><font>What am I missing?&nbsp; why do internal users can not validate signatures each other with our internal certificate server?</font></span></p><p><span><font>&nbsp;</font></span></p><p><span><font>Thank you for your help.</font></span></p></div>https://www.infopathdev.com:443/forums/thread/88749.aspxMon, 08 Apr 2013 05:12:59 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:88749Patrick Halstead0https://www.infopathdev.com:443/forums/thread/88749.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=88749<p>If you&#39;re using email to send the forms around, you have to use Restricted. </p><p>If not, the best practice is Domain. </p><p>Doing Full Trust is only necessary for forms that write to the file system or connect with external web sites. You do not need this to sign a form. However, you will need a digital certificate to sign a form template to allow it to run as full trust (this can be confusing since it seems related to digital signatures, but it&#39;s not related).</p>https://www.infopathdev.com:443/forums/thread/88628.aspxWed, 03 Apr 2013 17:32:02 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:88628Sabra0https://www.infopathdev.com:443/forums/thread/88628.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=88628<p>&nbsp;Hi all,</p><p>&nbsp;We use InfoPath 2010 and we do not have sharepoint.&nbsp; Most, we send forms to users and submit by sending through emails.</p><p>We allow several &nbsp;internal users to digitally sign it and we use windows internal certificate server.</p><p>which form security should I choose to allow multiple users to sign? (restricted, domain and full trust)</p><p>Thank you.</p>