SmartShelter|PDF

Document Protection

User Manual
For Windows NT, Me, 2000 and XP
Version 1.0, April 2006

Chapter 1
SmartShelter|PDF

Copyright 2006 by WIBU-SYSTEMS AG

Rueppurrer Strasse 52-54, 76137 Karlsruhe, Germany
Printed in Germany
All rights reserved. No part of this documentation, accompanying software or other
components of the described product may be reproduced or transmitted in any form or by any
means, electronic or mechanical, including photocopying and recording, for any purpose other
than the personal use of the purchaser without the express written permission of WIBUSYSTEMS.
This documentation, the hardware (WIBU-BOX, CM-Stick, power supply etc.) and
accompanying software were produced with great care, yet errors are possible. WIBUSYSTEMS assumes no responsibility for errors within the documentation, the hardware or the
software.
WIBU-SYSTEMS reserves the right to change programs or the documentation from time to time
without informing the user; errors and omissions excepted.

Trademarks
All brand names and product names used in this book are trade names, service marks,
trademarks, or registered trademarks of their respective owners.

WIBU-SYSTEMS is Member of
PCMCIA since 1993
U

USB Implementers Forum since 1997

SIIA Software & Information Industry Association since 1998

Chapter 1
SmartShelter|PDF

Chapter 1 SmartShelter|PDF
1.1

Principle...................................................................................................................................4

Chapter 2 SmartShelter|PDF Author

2.1

Installation ..............................................................................................................................5
Preparation ................................................................................................................5
2.1.1
2.1.2
Installation process...................................................................................................5
2.1.2.1
Possible Problems................................................................................... 6

2.2

Protecting your Documents .................................................................................................6

Security Dialog..........................................................................................................7
2.2.1
2.2.1.1
Encryption Settings ................................................................................ 8
2.2.1.2
Permissions / Compatiblity.................................................................. 9
2.2.1.3
Plaintext passwords ............................................................................... 9
2.2.2
Permissions................................................................................................................9
2.2.3
About Dialog SmartShelter|PDF - Author .....................................................10

2.3

Using SmartShelter | PDF in Adobe Acrobat Batch Mode ........................................11

2.3.1
Removing an existing password protection.......................................................15
2.3.2
Different protection levels ....................................................................................15

2.4

Programming the hardware...............................................................................................16

Chapter 3 SmartShelter|PDF Reader

17

3.1

Installation ............................................................................................................................17
Preparation ..............................................................................................................17
3.1.1
3.1.2
Installation process.................................................................................................17
3.1.2.1
Possible Problems................................................................................. 17
3.1.3
About Dialog SmartShelter|PDF Reader ........................................................18

3.2

Opening a document...........................................................................................................19

3.3

Error handling ......................................................................................................................19

Chapter 1
SmartShelter|PDF

Chapter 1
SmartShelter|PDF
SmartShelter|PDF is the PDF document protection of WIBU-SYSTEMS AG.
With this product you can encrypt your PDF documents with the secure
WIBU-SYSTEMS hardware solutions CodeMeter and WIBU-KEY. All
programs you need are included as plug-ins for Adobe Acrobat or Adobe
Acrobat Reader.
There is also the possibility to protect many documents at once using the
batch processing facility of Adobe Acrobat.
To create protected PDF documents with CodeMeter or WIBU-KEY please
read the section SmartShelter|PDF Author beginning at page 5.
To read protected documents with SmartShelter|PDF Reader please read
the section SmartShelter|PDF Reader beginning at page 17.

1.1

Principle

To protect the PDF document a password is generated with the connected

CM-Stick or WIBU-BOX. The whole document is then encrypted with this
password which is 32 characters long.
The advantage of this solution is that the document is protected with a
strong password, and every document has a different password. But the
readers havent to care about these passwords because all passwords are
generated with the CM-Stick / WIBU-BOX on the fly while opening the PDF
document. Also through the length and randomness of the generated
passwords it is impossible for cracker programs to determine the password.
The PDF document can be opened with the generated password, even if no
CM-Stick or WIBU-BOX is connected.

Chapter 2
SmartShelter|PDF Author

Chapter 2
SmartShelter|PDF Author
This part of SmartShelter|PDF is needed to protect PDF documents. It runs
as plug-in inside Adobe Acrobat.

2.1

Installation

2.1.1

Preparation

Before you install SmartShelter|PDF Author prepare your system:

Windows NT, 2000 or XP is installed with the latest Service Pack.
Adobe Acrobat 6 or 7 is installed with the latest updates.
(Installation for Adobe Acrobat 5 is in preparation).
The latest CodeMeter or WIBU-KEY Development Kit is installed.
A suitable CM-Stick or WIBU-BOX FSB (Firm Security Box) should
be connected. With the Development Kit you should have got at
least a demo FSB with an FirmCode:ProductCode 99:10 entry for
testing. The Firm Security Box allows you to program other CMSticks or WIBU-KEYs.
You need only to install the SmartShelter|PDF Author plug-in. You need
not to install the SmartShelter|PDF Reader plug-in. The reading
functionality is already included in SmartShelter|PDF Author.

2.1.2

Installation process

Please start the installation program SmashPDFAuthor.exe through a

double-click in the explorer and follow the installation steps. Please be sure
that you dont have Adobe Acrobat running. After installation you can start
Adobe Acrobat. You can check if the plug-in is loaded, if you have the menu
entry Help About Third Party Plug-Ins SmartShelter|PDF.

Chapter 2
SmartShelter|PDF Author

2.1.2.1 Possible Problems

2.2

If the menu entry Help About Third Party Plug-Ins

SmartShelter|PDF is not shown please check, if your installation of
Acrobat uses only certified plug-ins. You can fix this with Edit
Preferences Startup, uncheck the item Use only certified plugins and restarting Adobe Acrobat.
If you encounter a message box
There was an error while loading the plug-in SmashPDF.api. Two
plug-ins attempting to register with the same name
you may have installed both SmartShelter|PDF installers. Please
close Adobe Acrobat, uninstall one of the SmartShelter|PDF
programs, and restart Adobe Acrobat again.

Protecting your Documents

You can protect the PDF documents directly inside Adobe Acrobat. For this
there is a new menu point File Save encrypted document.

Also you can use the new toolbar button:

To protect an open document, please select the menu entry or click the
toolbar button. Then the SmartShelter|PDF security dialog is shown, in
which you can setup the encryption parameter in a security dialog. After
accepting the security dialog with OK you are prompted to save the PDF
document as new file.
6

Chapter 2
SmartShelter|PDF Author

For every PDF document there will be two passwords created:

The user password: This is the password which is used for

encrypting the whole PDF document. Without this password there
is no access to the contents of the document.

The owner password: This password protects the open document

for changes of the permissions attributes.

SmartShelter|PDF will generate the user password while opening an

encrypted document. If you want to change the security settings, you will be
prompted for the owner password. SmartShelter|PDF does not handle this.
There is no possiblity so change the security settings of an
SmartShelter|PDF protected documents.

2.2.1

Security Dialog

With the security dialog of SmartShelter|PDF you can set the encryption
parameters. Also you can set the permissions according to the usual Adobe
Acrobat document permissions.

Chapter 2
SmartShelter|PDF Author

2.2.1.1 Encryption Settings

Here you can set the entries, with which the password will be generated
with the WIBU-BOX or CM-Stick. You can select the preferred hardware for
protection, if you have installed both WIBU-KEY and CodeMeter. Enter here
the FirmCode, which is individually assigned to your company. You can
also use the demo FirmCode 10 for testing. Please be sure to have connected
a proper Firm Security Box (FSB) . For WIBU-KEY you can check this by
8

Chapter 2
SmartShelter|PDF Author

opening the WkList32 program. For CodeMeter you can check this by using
the WebAdmin.
The ProductCode (or UserCode for WIBU-KEY users) is a number which
can be chosen as you want. For WIBU-KEY you can also set the used
encryption algorithm version. This may be necessary if your customers have
older WIBU-BOXes which doesnt support the latest algorithm version.
The reader later then must have a programmed WIBU-BOX or CM-Stick
which have exactly an entry with this FirmCode and ProductCode. Then he
can open the PDF document.
After accepting this dialog with OK you will be prompted to save the
document as new PDF file.
2.2.1.2 Permissions / Compatiblity
Here you can open the permissions dialog for setting the document
permissions and backward compatility for older Adobe Acrobat versions.
As default printing and changes of the protected document are not
permitted.
2.2.1.3 Plaintext passwords
SmartShelter|PDF protects documents through generating strong
passwords with the CM-Stick or WIBU-BOX. With the View buttons you
can view these passwords. A reader can open an encrypted PDF document
without a CM-Stick/WIBU-BOX if he knows this password. So it is not
recommended to publish it. Also there is a generated owner password to
protect the document permission settings.

2.2.2

Permissions

With the SmartShelter|PDF permissions dialog you can set the usal PDF
document permissions, which you find in Adobe Acrobat 5 7. As default
there is no printing allowed and no changes are permitted.

Chapter 2
SmartShelter|PDF Author

With the Compatibility combo box you can choose, with which
Adobe Acrobat version the encrypted document can be at least
opened.

With the selections Printing Allowed and Changes Allowed

you can allow the reader the rights for printing and changing the
document.

If the checkbox Enable copying is activated the reader can copy

contents out of the encrypted document.

2.2.3

About Dialog SmartShelter|PDF - Author

With the About dialog of SmartShelter|PDF you can get more information
about the current installation. Also the displayed information will help our
support team to find out problems you may encounter using
SmartShelter|PDF.
You can view the About dialog with the menu Help About Third-Party
Plug-Ins. The following dialog will be shown:

10

Chapter 2
SmartShelter|PDF Author

2.3

Using SmartShelter | PDF in Adobe Acrobat

Batch Mode

Adobe Acrobat can process multiple files with different commands through
Batch Processing. For this you create a sequence of commands. These
sequences are saved and can be used later again. SmartShelter|PDF offers
you a new command inside the batch processing of Adobe Acrobat.
To protect multiple PDF files with the SmartShelter|PDF encryption, please
follow these steps. The whole batch processing dialogs are from Adobe
Acrobat, only the security dialog is from SmartShelter|PDF. We show here
the dialogs of Adobe Acrobat 7.

11

Chapter 2
SmartShelter|PDF Author

1.

Open the Batch processing command of Adobe Acrobat with the

menu item Advanced Batch processing

2.

You see the Batch sequences dialog, in which you can define
different action sequences. We will now create a new sequence for
encrypting documents with SmartShelter|PDF.

3.

Click here on the New Sequence button, and give the new
sequence a name like Protect with SmartShelter.

4.

The dialog Edit Batch Sequence is displayed.

To built up a sequence, you must first choose a command which
will be later executed. Please activate in the Edit Batch Sequence
dialog the button Select commands.
12

Chapter 2
SmartShelter|PDF Author

5.

Here you see a dialog with all possible commands which are
registered in Adobe Acrobat.

Please select here the command SmartShelter Encrypt multiple

files and take this with the Add >> button to the right side.
6.

13

Now press the Edit button. The normal SmartShelter|PDF

security dialog comes up. Please enter here the FirmCode and
ProductCode, with which you want to protect your documents. Also
you can set permissions, which will be applied to these documents.
Please accept then the settings with the OK button.

Chapter 2
SmartShelter|PDF Author

7.

Accept the Edit sequence dialog with OK, too. You see again
the Edit Batch sequence, now with the new command Encrypt
multiple files.

8.

In the step 2. Run command on please select, which documents or

folders you want to process.

9.

In the step 3. Select output location you can state, where the
encrypted documents should be stored. With the dialog Output
options you also can define how the new files are named.

10. Accept this dialog with OK, and you have defined a new
sequence!
11. You can execute this sequence with the button Run sequence. The
parameters are stored in the sequence, so you can rerun the
encryption process with other documents easily later!

14

Chapter 2
SmartShelter|PDF Author

Of course it is possible to combine the SmartShelter encryption command

with the other commands of Acrobat!

2.3.1

Removing an existing password protection

If you have many documents, which were already protected with one single
password (not with SmartShelter|PDF), you can remove it also within the
batch process:
1. Select the menu entry Edit Preferences Gerneral Batch
Processing
2. Set the security method from Do not ask for password to
Password security.
You are now requested to enter the current password of the documents if
you start the batch process.

2.3.2

Different protection levels

The HTML version of SmartShelter has the concept of PageClasses to

protect different HTML pages with different levels of protection. You could
protect one set of pages with FC:PC 10:13 and another set with FC:PC 10:14.
How can this be achieved using SmartShelter|PDF?
You can only protect one whole PDF document with one encryption so you
must first split them into different documents. You can connect them with
the Adobe Acrobat link tool (Tools Advanced Editing Link Tool). Then
you can encrypt every document with the Save encrypted document
command or with the batch command with different FirmCode and
ProductCode settings.

15

Chapter 2
SmartShelter|PDF Author

2.4

Programming the hardware

To open your encrypted PDF documents you readers need a properly

programmed CM-Stick or WIBU-BOX.

For WIBU-KEY a WIBU-BOX can be programmed using the tool

WkList32

For CodeMeter a CM-Stick can be programmed through the

CmProducer.
If the reader has already a CM-Stick it can be programmed via CMTalk.

You must program the boxes with your used FirmCode and ProductCode
and deliver them to your reader.
Also it is possible to program CM-Sticks and WIBU-BOXes through Remote
Programming.
Please check the documentation of the Development Kits for further
information about these issues.

16

Chapter 3
SmartShelter|PDF Reader

Chapter 3
SmartShelter|PDF Reader
3.1

Installation

3.1.1

Preparation

Before you install SmartShelter|PDF Reader prepare your system:

Windows NT, Me, 2000 or XP is installed with the latest Service
Pack.
Adobe Acrobat Reader 6 or 7 or Adobe Acrobat 6 or 7 is installed
with the latest updates. (Installation for Adobe Acrobat/Reader 5 is
in preparation).
The latest CodeMeter or WIBU-KEY RuntimeKit is installed.
A suitable CM-Stick or WIBU-BOX should be connected.
For reading encrypted PDF documents you need only to install
SmartShelter|PDF Reader.

3.1.2

Installation process

Please start the installation program SmashPDFRdr.exe through a doubleclick in the explorer and follow the installation steps. Please be sure that you
dont have Adobe Acrobat Reader running. After installation you can restart
Adobe Acrobat Reader. You can check if the plug-in is loaded, if you have
the menu entry Help About Third Party Plug-Ins SmartShelter|PDF.
3.1.2.1 Possible Problems

17

If the menu entry Help About Third Party Plug-Ins

SmartShelter|PDF is not shown please check, if your installation of
Acrobat Reader uses only certified plug-ins. You can fix this with
Edit Preferences Startup, uncheck the item Use only certified
plug-ins and restarting Adobe Acrobat Reader.
If you encounter a message box
There was an error while loading the plug-in SmashPDFRdr.api.

Chapter 3
SmartShelter|PDF Reader

Two plug-ins attempting to register with the same name

you may have installed both SmartShelter|PDF installers. Please
close Adobe Acrobat Reader, uninstall the SmartShelter|PDF
Author program, and restart Adobe Acrobat Reader again.

3.1.3

About Dialog SmartShelter|PDF Reader

With the About dialog of SmartShelter|PDF Reader you can get more
information about the current installation. Also the displayed information
will help our support team to find out problems you may encounter using
SmartShelter|PDF Reader.
You can view the About dialog with the menu Help About Third-Party
Plug-Ins. The following dialog will be shown:

18

Chapter 3
SmartShelter|PDF Reader

3.2

Opening a document

To open a SmartShelter|PDF protected document just double-click the PDF

document in the explorer. Or you can open the PDF document through the
File Open dialog of Adobe Acrobat Reader.
If you dont have connected a CM-Stick or a WIBU-BOX with the correct
entries, you will see the following dialog:

After that you are requested to enter the password for this document. To
open this document please ask the author for a programmed CMStick/WIBU-BOX or for the password of this document.

3.3

Error handling

19

If you try to open an encrypted PDF document from a hyperlink in

the web browser, you are requested for the password, even if you
have connected a correct CM-Stick / WIBU-BOX. This is a known
behaviour and cannot be changed. To open PDF documents from
the web browser please save them first to your hard disk and then
open them just as normal PDF file.

If you try to open a protected document which was created with a

newer version of SmartShelter|PDF the following error message
will be displayed:

Chapter 3
SmartShelter|PDF Reader

In this case please download the latest version of

SmartShelter|Reader from the download site of WIBU-SYSTEMS
(www.wibu.com).

If you open a protected PDF document and you havent yet installed
the CodeMeter or WIBU-KEY Runtime Kit, the following message
appears:

The software from the runtime kit is needed to access the hardware
(CM-Stick or WIBU-BOX). The latest version of the
20

Chapter 3
SmartShelter|PDF Reader

CodeMeter/WIBU-KEY Runtime Kit is available from the download

site of WIBU-SYSTEMS (www.wibu.com).
Please download the runtime kit from this web site and install it
prior to starting Adobe Acrobat Reader again.

21