How to Digitally Sign PDFs When FIPS Mode Is Enabled
Question details
Users are unable to digitally sign certain PDF files when FIPS mode is active due to the files relying on unsupported cryptographic hashing algorithms.
- Product
- PDF Editors
- Device & OS
- not provided
- Scenario
- Attempting to apply a digital signature to an older PDF document under strict security environments with FIPS enabled.
- Observed behavior
- The digital signature process fails or is blocked because the PDF relies on older, non-FIPS-compliant hashing algorithms, whereas newer PDFs sign correctly.
Ensure you have the necessary administrative privileges on your computer, as modifying FIPS settings or generating new compliance certificates may require IT administrator approval.
Update or Recreate the PDF Using FIPS-Compliant Methods
If your PDF uses outdated hashing algorithms, recreating it ensures it meets modern cryptographic standards and bypasses FIPS restrictions.
FIPS (Federal Information Processing Standards) mode restricts software to using only approved cryptographic algorithms. Older PDFs utilizing outdated hashes like MD5 or SHA-1 will block the signing process when FIPS is strictly enforced.
Find and open the original source document (such as a Microsoft Word or Excel file) that was used to create the problematic PDF.
Use the 'Save As' or 'Export' function in your document editor to generate a brand new PDF file. Modern PDF creators default to FIPS-compliant algorithms.
Launch your PDF viewer or editor and open the newly created PDF file.
Navigate to the digital signature tool and apply your certificate. The signing process should now complete successfully without FIPS errors.
Consult IT to Temporarily Adjust FIPS Mode
If you must sign a legacy PDF and cannot recreate it, you may need to disable FIPS mode temporarily, subject to your organization's IT policies.
Securely Sign and Manage PDFs with WPS Office
WPS PDF provides built-in tools for applying digital signatures and certificates, ensuring your documents remain secure and verifiable while maintaining high compatibility with standard PDF formats.
- 1. Open your PDF: Launch WPS Office and open the PDF document you need to sign.
- 2. Navigate to the Protect tab: Look at the top ribbon menu and click on the 'Protect' tab to access security features.
- 3. Select the signature tool: Click on 'Sign Document' or 'Digital Signature' from the toolbar options.
- 4. Apply your certificate: Choose your existing digital ID or follow the prompts to create a new, compliant certificate to securely sign the file.
Frequently Asked Questions
What is FIPS mode and why does it affect my PDFs?
FIPS (Federal Information Processing Standards) mode is a security setting that forces the operating system and applications to use only approved, highly secure cryptographic algorithms. It affects PDFs because older documents or signatures often use outdated hashing methods (like SHA-1) that are blocked by FIPS, causing the digital signature process to fail.
Can I check if a PDF uses non-FIPS-compliant algorithms?
Yes, you can typically check this by opening the document properties or security settings in your PDF viewer. Look at the encryption details and the hashing algorithm used for existing document protection; if it relies on MD5 or SHA-1, it is likely non-compliant.
How do I get a FIPS-compliant digital certificate?
You can obtain a FIPS-compliant digital certificate from a trusted third-party Certificate Authority (CA) or directly from your organization's IT department. Ensure that the certificate issued utilizes SHA-256 or a stronger cryptographic algorithm.
