Encrypting and Decrypting PDF Documents encrypting-and-decrypting-pdf-documents

Include project files.

Include client JAR files, such as adobe-encryption-client.jar, in your Java project’s class path.

Create an Encryption Client API.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get a PDF document to encrypt.

• Create a java.io.FileInputStream object that represents the PDF document to encrypt by using its constructor and passing a string value that specifies the location of the PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Set encryption run-time options.

• Create a PasswordEncryptionOptionSpec object by invoking its constructor.
• Specify the PDF document resources to encrypt by invoking the PasswordEncryptionOptionSpec object’s setEncryptOption method and passing a PasswordEncryptionOption enumeration value that specifies the document resources to encrypt. For example, to encrypt the entire PDF document, including its metadata and its attachments, specify PasswordEncryptionOption.ALL.
• Create a java.util.List object that stores the encryption permissions by using the ArrayList constructor.
• Specify a permission by invoking the java.util.List object ‘s add method and passing an enumeration value that corresponds to the permission that you want to set. For example, to set the permission that lets a user copy data located in the PDF document, specify PasswordEncryptionPermission.PASSWORD_EDIT_COPY. (Repeat this step for each permission to set).
• Specify the Acrobat compatibility option by invoking the PasswordEncryptionOptionSpec object’s setCompatability method and passing an enumeration value that specifies the Acrobat compatibility level. For example, you can specify PasswordEncryptionCompatability.ACRO_7.
• Specify the password value that lets a user open the encrypted PDF document by invoking the PasswordEncryptionOptionSpec object’s setDocumentOpenPassword method and passing a string value that represents the open password.
• Specify the master password value that lets a user remove encryption from the PDF document by invoking the PasswordEncryptionOptionSpec object’s setPermissionPassword method and passing a string value that represents the master password.

Add the password.

Encrypt the PDF document by invoking the EncryptionServiceClient object’s encryptPDFUsingPassword method and passing the following values:

• The com.adobe.idp.Document object that contains the PDF document to encrypt with the password.
• The PasswordEncryptionOptionSpec object that contains encryption run-time options.

The encryptPDFUsingPassword method returns a com.adobe.idp.Document object that contains a password-encrypted PDF document.

Save the encrypted PDF document as a PDF file.

• Create a java.io.File object and ensure that the file extension is .pdf.
• Invoke the com.adobe.idp.Document object’s copyToFile method to copy the contents of the com.adobe.idp.Document object to the file. Ensure that you use the com.adobe.idp.Document object that was returned by the encryptPDFUsingPassword method.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create an Encryption Client API object.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get a PDF document to encrypt.

• Create a BLOB object by using its constructor. The BLOB object is used to store a PDF document that is encrypted with a password.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the PDF document to encrypt and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.

Set encryption run-time options.

• Create a PasswordEncryptionOptionSpec object by using its constructor.
• Specify the PDF document resources to encrypt by assigning a PasswordEncryptionOption enumeration value to the PasswordEncryptionOptionSpec object’s encryptOption data member. To encrypt the entire PDF, including its metadata and its attachments, assign PasswordEncryptionOption.ALL to this data member.
• Specify the Acrobat compatibility option by assigning a PasswordEncryptionCompatability enumeration value to the PasswordEncryptionOptionSpec object’s compatability data member. For example, assign PasswordEncryptionCompatability.ACRO_7 to this data member.
• Specify the password value that lets a user open the encrypted PDF document by assigning a string value that represents the open password to the PasswordEncryptionOptionSpec object’s documentOpenPassword data member.
• Specify the password value that lets a user remove encryption from the PDF document by assigning a string value that represents the master password to the PasswordEncryptionOptionSpec object’s permissionPassword data member.

Add the password.

Encrypt the PDF document by invoking the EncryptionServiceClient object’s encryptPDFUsingPassword method and passing the following values:

• The BLOB object that contains the PDF document to encrypt with the password.
• The PasswordEncryptionOptionSpec object that contains encryption run-time options.

The encryptPDFUsingPassword method returns a BLOB object that contains a password-encrypted PDF document.

Save the encrypted PDF document as a PDF file.

• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the secured PDF document.
• Create a byte array that stores the data content of the BLOB object that was returned by the encryptPDFUsingPassword method. Populate the byte array by getting the value of the BLOB object’s MTOM data member.
• Create a System.IO.BinaryWriter object by invoking its constructor and passing the System.IO.FileStream object.
• Write the contents of the byte array to a PDF file by invoking the System.IO.BinaryWriter object’s Write method and passing the byte array.

Include project files.

Include client JAR files, such as adobe-encryption-client.jar, in your Java project’s class path.

Create an Encryption Client API object.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get a PDF document to encrypt.

• Create a java.io.FileInputStream object that represents the PDF document to encrypt by using its constructor and passing a string value that specifies the location of the PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Reference the certificate.

• Create a java.util.List object that stores permission information by using its constructor.
• Specify the permission associated with the encrypted document by invoking the java.util.List object’s add method and passing a CertificateEncryptionPermissions enumeration value that represents the permissions that are granted to the user who opens the secured PDF document. For example, to specify all permissions, pass CertificateEncryptionPermissions.PKI_ALL_PERM.
• Create a Recipient object by using its constructor.
• Create a java.io.FileInputStream object that represents the certificate that is used to encrypt the PDF document by using its constructor and passing a string value that specifies the location of the certificate.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object that represents the certificate.
• Invoke the Recipient object’s setX509Cert method and pass the com.adobe.idp.Document object that contains the certificate. (In addition, the Recipientobject can have a Truststore certificate alias or LDAP URL as a certificate source.)
• Create a CertificateEncryptionIdentity object that stores permission and certificate information by using its constructor.
• Invoke the CertificateEncryptionIdentity object’s setPerms method and pass the java.util.List object that stores permission information.
• Invoke the CertificateEncryptionIdentity object’s setRecipient method and pass the Recipient object that stores certificate information.
• Create a java.util.List object that stores certificate information by using its constructor.
• Invoke the java.util.List object’s add method and pass the CertificateEncryptionIdentity object. (This java.util.List object is passed as a parameter to the encryptPDFUsingCertificates method.)

Set encryption run-time options.

• Create a CertificateEncryptionOptionSpec object by invoking its constructor.
• Specify the PDF document resources to encrypt by invoking the CertificateEncryptionOptionSpec object’s setOption method and passing a CertificateEncryptionOption enumeration value that specifies the document resources to encrypt. For example, to encrypt the entire PDF document, including its metadata and its attachments, specify CertificateEncryptionOption.ALL.
• Specify the Acrobat compatibility option by invoking the CertificateEncryptionOptionSpec object’s setCompat method and passing a CertificateEncryptionCompatibility enumeration value that specifies the Acrobat compatibility level. For example, you can specify CertificateEncryptionCompatibility.ACRO_7.

Create a certificate-encrypted PDF document.

Encrypt the PDF document with a certificate by invoking the EncryptionServiceClient object’s encryptPDFUsingCertificates method and passing the following values:

• The com.adobe.idp.Document object that contains the PDF document to encrypt.
• The java.util.List object that stores certificate information.
• The CertificateEncryptionOptionSpec object that contains encryption run-time options.

The encryptPDFUsingCertificates method returns a com.adobe.idp.Document object that contains a certificate-encrypted PDF document.

Save the encrypted PDF document as a PDF file.

• Create a java.io.File object and ensure that the file name extension is .pdf.
• Invoke the com.adobe.idp.Document object’s copyToFile method to copy the contents of the com.adobe.idp.Document object to the file. Ensure that you use the com.adobe.idp.Document object that was returned by the encryptPDFUsingCertificates method.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create an Encryption Client API object.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get a PDF document to encrypt.

• Create a BLOB object by using its constructor. The BLOB object is used to store a PDF document that is encrypted with a certificate.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the PDF document to encrypt and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning its MTOM property with the contents of the byte array.

Reference the certificate.

• Create a Recipient object by using its constructor. This object will store certificate information.
• Create a BLOB object by using its constructor. This BLOB object will store the certificate that encrypts the PDF document.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the certificate and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.
• Assign the BLOB object that stores the certificate to the Recipient object’s x509Cert data member.
• Create a CertificateEncryptionIdentity object that stores certificate information by using its constructor.
• Assign the Recipient object that stores the certificate to the CertificateEncryptionIdentityobject’s recipient data member.
• Create an Object array and assign the CertificateEncryptionIdentity object to the first element of the Object array. This Object array is passed as a parameter to the encryptPDFUsingCertificates method.

Set encryption run-time options.

• Create a CertificateEncryptionOptionSpec object by using its constructor.
• Specify the PDF document resources to encrypt by assigning a CertificateEncryptionOption enumeration value to the CertificateEncryptionOptionSpec object’s option data member. To encrypt the entire PDF document, including its metadata and its attachments, assign CertificateEncryptionOption.ALL to this data member.
• Specify the Acrobat compatibility option by assigning a CertificateEncryptionCompatibility enumeration value to the CertificateEncryptionOptionSpec object’s compat data member. For example, assign CertificateEncryptionCompatibility.ACRO_7 to this data member.

Create a certificate-encrypted PDF document.

Encrypt the PDF document with a certificate by invoking the EncryptionServiceService object’s encryptPDFUsingCertificates method and passing the following values:

• The BLOB object that contains the PDF document to encrypt.
• The Object array that stores certificate information.
• The CertificateEncryptionOptionSpec object that contains encryption run-time options.

The encryptPDFUsingCertificates method returns a BLOB object that contains a certificate-encrypted PDF document.

Save the encrypted PDF document as a PDF file.

• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the secured PDF document.
• Create a byte array that stores the data content of the BLOB object that was returned by the encryptPDFUsingCertificates method. Populate the byte array by getting the value of the BLOB object’s binaryData data member.
• Create a System.IO.BinaryWriter object by invoking its constructor and passing the System.IO.FileStream object.
• Write the contents of the byte array to a PDF file by invoking the System.IO.BinaryWriter object’s Write method and passing the byte array.

Include project files.

Include client JAR files, such as adobe-encryption-client.jar, in your Java project’s class path.

Create an encryption service client.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get the encrypted PDF document.

• Create a java.io.FileInputStream object that represents the encrypted PDF document by using its constructor and passing a string value that specifies the location of the encrypted PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Remove encryption.

Remove certificate-based encryption from the PDF document by invoking the EncryptionServiceClient object’s removePDFCertificateSecurity method and passing the following values:

• The com.adobe.idp.Document object that contains the encrypted PDF document.
• A string value that specifies the alias name of the private key that corresponds to the key used to encrypt the PDf document.

The removePDFCertificateSecurity method returns a com.adobe.idp.Document object that contains an unsecured PDF document.

Save the PDF document.

• Create a java.io.File object and ensure that the file extension is .pdf.
• Invoke the com.adobe.idp.Document object’s copyToFile method to copy the contents of the Document object to the file. Ensure that you use the com.adobe.idp.Document object that was returned by the removePDFCredentialSecurity method.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create an encryption service client.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get the encrypted PDF document.

• Create a BLOB object by using its constructor. The BLOB object is used to store the encrypted PDF document.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the encrypted PDF document and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.

Remove encryption.

Invoke the EncryptionServiceClient object’s removePDFCertificateSecurity method and pass the following values:

• The BLOB object that contains file stream data that represents an encrypted PDF document.
• A string value that specifies the alias name of the public key that corresponds to the private key used to encrypt the PDf document.

The removePDFCredentialSecurity method returns a BLOB object that contains an unsecured PDF document.

Save the PDF document.

• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the unsecured PDF document.
• Create a byte array that stores the content of the BLOB object that was returned by the removePDFPasswordSecurity method. Populate the byte array by getting the value of the BLOB object’s MTOM data member.
• Create a System.IO.BinaryWriter object by invoking its constructor and passing the System.IO.FileStream object.
• Write the contents of the byte array to a PDF file by invoking the System.IO.BinaryWriter object’s Write method and passing the byte array.

Include project files.

Include client JAR files, such as the adobe-encryption-client.jar, in your Java project’s class path.

Create an encryption service client.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get the encrypted PDF document.

• Create a java.io.FileInputStream object that represents the encrypted PDF document by using its constructor and passing a string value that specifies the location of the PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Remove the password.

Remove password-based encryption from the PDF document by invoking the EncryptionServiceClient object’s removePDFPasswordSecurity method and passing the following values:

• A com.adobe.idp.Document object that contains the encrypted PDF document.
• A string value that specifies the master password value that is used to remove encryption from the PDF document.

The removePDFPasswordSecurity method returns a com.adobe.idp.Document object that contains an unsecured PDF document.

Save the PDF document.

• Create a java.io.File object and ensure that the file name extension is .pdf.
• Invoke the com.adobe.idp.Document object’s copyToFile method to copy the contents of the Document object to the file. Ensure that you use the Document object that was returned by the removePDFPasswordSecurity method.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create an encryption service client.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get the encrypted PDF document.

• Create a BLOB object by using its constructor. The BLOB object is used to store a password-encrypted PDF document.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the encrypted PDF document and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.

Remove the password.

Invoke the EncryptionServiceService object’s removePDFPasswordSecurity method and pass the following values:

• The BLOB object that contains file stream data that represents an encrypted PDF document.
• A string value that specifies the password value that is used to remove encryption from the PDF document. This value is specified when encrypting the PDF document with a password.

The removePDFPasswordSecurity method returns a BLOB object that contains an unsecured PDF document.

Save the PDF document.

• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the unsecured PDF document.
• Create a byte array that stores the content of the BLOB object that was returned by the removePDFPasswordSecurity method. Populate the byte array by getting the value of the BLOB object’s MTOM data member.
• Create a System.IO.BinaryWriter object by invoking its constructor and passing the System.IO.FileStream object.
• Write the contents of the byte array to a PDF file by invoking the System.IO.BinaryWriter object’s Write method and passing the byte array.

Include project files.

Include client JAR files, such as adobe-encryption-client.jar, in your Java project’s class path.

Create an encryption service client.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get the encrypted PDF document.

• Create a java.io.FileInputStream object that represents the encrypted PDF document by using its constructor and passing a string value that specifies the location of the encrypted PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Unlock the document.

Unlock an encrypted PDF document by invoking the EncryptionServiceClient object’s unlockPDFUsingPassword or unlockPDFUsingCredential method.

To unlock a PDF document that is encrypted with a password, invoke the unlockPDFUsingPassword method and pass the following values:

• A com.adobe.idp.Document object that contains the password-encrypted PDF document.
• A string value that specifies the password value that is used to open a password-encrypted PDF document. This value is specified when encrypting the PDF document with a password.

To unlock a PDF document that is encrypted with a certificate, invoke the unlockPDFUsingCredential method and pass the following values:

• A com.adobe.idp.Document object that contains the certificate-encrypted PDF document.
• A string value that specifies the alias name of the public key that corresponds to the private key used to encrypt the PDF document.

The unlockPDFUsingPassword and unlockPDFUsingCredential methods both return a com.adobe.idp.Document object that you pass to another AEM Forms Java method to perform an operation.

Perform a AEM Forms operation.

Perform a AEM Forms operation on the unlocked PDF document to meet your business requirements. For example, assuming that you want to apply usage rights to an unlocked PDF document, pass the com.adobe.idp.Document object that was returned by either the unlockPDFUsingPassword or unlockPDFUsingCredential methods to the ReaderExtensionsServiceClient object’s applyUsageRights method.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create an encryption service client.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get an encrypted PDF document.

• Create a BLOB object by using its constructor.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the encrypted PDF document and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.

Unlock the document.

Unlock an encrypted PDF document by invoking the EncryptionServiceClient object’s unlockPDFUsingPassword or unlockPDFUsingCredential method.

To unlock a PDF document that is encrypted with a password, invoke the unlockPDFUsingPassword method and pass the following values:

• A BLOB object that contains the password-encrypted PDF document.
• A string value that specifies the password value that is used to open a password-encrypted PDF document. This value is specified when encrypting the PDF document with a password.

To unlock a PDF document that is encrypted with a certificate, invoke the unlockPDFUsingCredential method and pass the following values:

• A BLOB object that contains the certificate-encrypted PDF document.
• A string value that specifies the alias name of the public key that corresponds to the private key used to encrypt the PDf document.

The unlockPDFUsingPassword and unlockPDFUsingCredential methods both return a com.adobe.idp.Document object that you pass to another AEM Forms method to perform an operation.

Perform a AEM Forms operation.

Perform a AEM Forms operation on the unlocked PDF document to meet your business requirements. For example, assuming that you want to apply usage rights to the unlocked PDF document, pass the BLOB object that was returned by either the unlockPDFUsingPassword or unlockPDFUsingCredential methods to the ReaderExtensionsServiceClient object’s applyUsageRights method.

Include project files.

Include client JAR files, such as adobe-encryption-client.jar, in your Java project’s class path.

Create a service client.

• Create a ServiceClientFactory object that contains connection properties.
• Create an EncryptionServiceClient object by using its constructor and passing the ServiceClientFactory object.

Get the encrypted PDF document.

• Create a java.io.FileInputStream object that represents the PDF document by using its constructor and passing a string value that specifies the location of the PDF document.
• Create a com.adobe.idp.Document object by using its constructor and passing the java.io.FileInputStream object.

Determine the encryption type.

• Determine the encryption type by invoking the EncryptionServiceClient object’s getPDFEncryption method and passing the com.adobe.idp.Document object that contains the PDF document. This method returns an EncryptionTypeResult object.
• Invoke the EncryptionTypeResult object’s getEncryptionType method. This method returns an EncryptionType enum value that specifies the encryption type. For example, if the PDF document is protected with password-based encryption, this method returns EncryptionType.PASSWORD.

Include project files.

Create a Microsoft .NET project that uses MTOM. Ensure that you use the following WSDL definition: http://localhost:8080/soap/services/EncryptionService?WSDL&lc_version=9.0.1.

Create a service client.

• Create an EncryptionServiceClient object by using its default constructor.

• Create an EncryptionServiceClient.Endpoint.Address object by using the System.ServiceModel.EndpointAddress constructor. Pass a string value that specifies the WSDL to the AEM Forms service (for example, http://localhost:8080/soap/services/EncryptionService?WSDL.) You do not need to use the lc_version attribute. This attribute is used when you create a service reference.)

• Create a System.ServiceModel.BasicHttpBinding object by getting the value of the EncryptionServiceClient.Endpoint.Binding field. Cast the return value to BasicHttpBinding.

• Set the System.ServiceModel.BasicHttpBinding object’s MessageEncoding field to WSMessageEncoding.Mtom. This value ensures that MTOM is used.

• Enable basic HTTP authentication by performing the following tasks:

  • Assign the AEM forms user name to the field EncryptionServiceClient.ClientCredentials.UserName.UserName.
  • Assign the corresponding password value to the field EncryptionServiceClient.ClientCredentials.UserName.Password.
  • Assign the constant value HttpClientCredentialType.Basic to the field BasicHttpBindingSecurity.Transport.ClientCredentialType.
  • Assign the constant value BasicHttpSecurityMode.TransportCredentialOnly to the field BasicHttpBindingSecurity.Security.Mode.

Get the encrypted PDF document.

• Create a BLOB object by using its constructor.
• Create a System.IO.FileStream object by invoking its constructor and passing a string value that represents the file location of the encrypted PDF document and the mode in which to open the file.
• Create a byte array that stores the content of the System.IO.FileStream object. You can determine the size of the byte array by getting the System.IO.FileStream object’s Length property.
• Populate the byte array with stream data by invoking the System.IO.FileStream object’s Read method and passing the byte array, the starting position, and the stream length to read.
• Populate the BLOB object by assigning the contents of the byte array to the BLOB object’s MTOM data member.

Determine the encryption type.

• Invoke the EncryptionServiceClient object’s getPDFEncryption method and pass the BLOB object that contains the PDF document. This method returns an EncryptionTypeResult object.
• Get the value of the EncryptionTypeResult object’s encryptionType data method. For example, if the PDF document is protected with password-based encryption, the value of this data member is EncryptionType.PASSWORD.