Enable AEM to search document security protected PDF documents

Last update: May 2, 2024

CREATED FOR:

  • Admin
  • User
  • Developer

AEM search is capable of searching and locating AEM assets and performing text search on various commonly used document formats such as plain-text files, Microsoft Office documents, and PDF documents. You can also extend the native search to perform full-text search on PDF Documents protected with AEM Document security. To enable AEM to perform full-text search on such documents, perform the following steps:

  1. Establish a secure connection
  2. Index a sample policy-protected PDF document

Prerequisites

  • If you are using AEM Forms on OSGi:

    • Install AEM Forms Document Security Indexer package on the AEM Forms server.

    • Ensure an AEM Forms on JEE server is up and running and document security is installed on corresponding AEM Forms on JEE server. The AEM Form on JEE server is required to index the protected document.

  • If you are using only AEM Forms on JEE server, the indexer package is already installed.

  • Ensure that all the bundles are up and running. If all the bundles are not active, wait until all the bundles are up and running.

    • For AEM Forms on OSGi, the bundles are listed at https://‘[server]:[port]’/system/console/bundles.
    • For AEM Forms on JEE, the bundles are listed at https://‘[server]:[port]’/[context-path]/system/console/bundles. For example, https://localhost:8080/lc/system/console/bundles.

  • Add the sun.util.calendar package to the allowlist. To add the package to the allowlist, perform the following steps:

    1. Open AEM Web Console. The URL is https://‘[server]:[port]’/system/console/configMgr.

    2. Locate and open Deserialization Firewall Configuration.

    3. Add the sun.util.calendar package to the Allowlisted classes or package prefixes field and click Save.

Establish a secure connection between AEM Forms JEE and OSGi stacks

You can use one of the following methods to establish the secure connection:

  • Configure Adobe LiveCycle Client SDK Bundle with AEM Forms on JEE admin credentials
  • Configure Adobe LiveCycle Client SDK Bundle using mutual authentication

Configure Adobe LiveCycle Client SDK Bundle with AEM Forms on JEE admin credentials

  1. Open AEM Web Console. The URL is https://‘[server]:[port]’/system/console/configMgr.

  2. Locate and open the Adobe LiveCycle Client SDK Bundle. Specify value for the following fields:

    • Server URL: Specify HTTPS URL of AEM Forms on JEE server. To enable communication over https, restart the server with the -Djavax.net.ssl.trustStore=<path of AEM Forms on JEE keystore file> parameter.
    • Service Name: Add the RightsManagementService to the list of specified services.
    • Username: Specify user name of the AEM Forms on JEE account to use to initiate calls from AEM server. The account specified must have permissions to start document services on the AEM Forms on JEE server.
    • Password: Specify password of the AEM Forms on JEE account mentioned in the Username field.

    Click Save. AEM is enabled to search document security protected PDF documents.

Configure Adobe LiveCycle Client SDK Bundle using mutual authentication

  1. Enable mutual authentication for AEM Forms on JEE. For detailed information, see CAC and Mutual Authentication.

  2. Open AEM Web Console. The URL is https://‘[server]:[port]’/system/console/configMgr.

  3. Locate and open the Adobe LiveCycle Client SDK Bundle. Specify value for the following properties:

    • Server URL: Specify HTTPS URL of AEM Forms on JEE server. To enable communication over https, restart the AEM server with the -Djavax.net.ssl.trustStore=<path of AEM Forms on JEE keystore file> parameter.
    • Enable 2-way SSL: Enable the Enable 2-way SSL option.
    • KeyStore File URL: Specify the URL of the keystore file.
    • TrustStore FIle URL: Specify the URL of the truststore file.
    • KeyStore Password: Specify the password for the keystore file.
    • TrustStorePassword: Specify the password for the truststore file.
    • Service Name: Add the RightsManagementService to the list of specified services.

    Click Save. AEM is enabled to search document security protected PDF documents

Index a sample policy-protected PDF document

  1. Log in to AEM Assets as an administrator.

  2. Create a folder in AEM Digital Asset Manager and upload the policy-protected PDF documents to the newly created folder.

    Now, you can search the policy-protected documents using AEM search.

    NOTE
    It is recommended to use the ‘Ctrl + C’ command to restart the SDK. Restarting the AEM SDK using alternative methods, for example, stopping Java processes, may lead to inconsistencies in the AEM development environment.

Experience Manager


Espressos & Experience Manager: AEM Forms

Espressos & Experience Manager

Thursday, Mar 6, 7:00 PM UTC

Join Adobe's AEM product team as they highlight AEM Forms' latest innovations, including: the new Gen AI Assistant, Unified Composition with AEM Sites, and new ways to deploy forms through conversations.

Register

Connect with Experience League at Summit!

Get front-row access to top sessions, hands-on activities, and networking—wherever you are!

Learn more

Register now