How to Fix 'Signature Does Not Cover the Whole Document' in Acrobat
Question details
The user is encountering a 'Signature does not cover the whole document' error message in iText for Java for a PDF digitally signed in Adobe Acrobat 2018.
- Product
- Adobe Acrobat / iText for Java
- Device & OS
- not provided
- Scenario
- Validating a digitally signed PDF document using iText or Acrobat.
- Observed behavior
- The system throws an error stating that the signature does not cover the entire document, raising concerns about document integrity and post-signing modifications.
Ensure you have the original signed PDF file and avoid making any edits or saving new versions before validating the signature.
Verify Signature Validity and Document Integrity in Acrobat
Check if Adobe Acrobat recognizes the signature as valid and inspect the document for incremental updates that might have broken the byte range.
The iText message usually occurs when incremental updates or changes were added after the document was initially signed. When this happens, the signature's byte range no longer covers the complete PDF file.
Launch Adobe Acrobat and open the PDF document that is displaying the signature error.
Click on the 'Signatures' panel on the left navigation pane to view the validation status of all digital signatures in the document.
Look for messages indicating whether the document has been modified since it was signed. Expand the signature details to check for any listed post-signing revisions.
If Acrobat reports post-signing modifications or structural problems, you must finalize all document edits first, update Acrobat to the latest version, and apply a completely fresh digital signature.
Analyze PDF Revision Structure with a Validation Tool
Use specialized PDF validation tools to check the exact byte range of the signature if Acrobat and iText provide conflicting reports.
Sign and Validate PDFs Seamlessly with WPS Office
Avoid complex signature byte range errors by using WPS Office to securely sign and manage your PDF documents. WPS PDF ensures your digital signatures are applied correctly, preventing validation issues across different platforms.
- 1. Open PDF in WPS: Launch WPS Office and open your target PDF file using the built-in WPS PDF editor.
- 2. Access the Signature Tool: Navigate to the 'Fill & Sign' or 'Protect' tab on the top ribbon menu.
- 3. Apply Your Signature: Click the 'Sign' button, create or select your digital signature, and place it accurately on the document page.
- 4. Save the Signed Document: Save the document immediately after signing to ensure the signature locks securely over the entire file without incremental updates.
Frequently Asked Questions
Why does iText say the signature does not cover the whole document?
This happens when incremental changes (such as adding a form field, annotation, or extra page) are saved to the PDF after the digital signature was applied. As a result, the signature's original byte range no longer encompasses the newly appended file data.
Can I fix a broken digital signature without re-signing the document?
No. If a document was modified after signing, the original mathematical signature is permanently broken for the new file state. You must finalize all edits and ask the signer to apply a new digital signature to the final version.
How do I check if my PDF was modified after it was signed?
Open the PDF in a standard PDF viewer like Adobe Acrobat or WPS PDF, open the Signatures panel on the left, and check the signature properties. The panel will explicitly specify if any revisions or changes were made after the signature was applied.
