51
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 60/69
The issuer of the certificate. The “Certificate Issuer” corresponds to the common name (CN) of the issuer. In the
Windows’ certificate store this corresponds to“Issued by”. This property can be used to select the signer certificate
for signing (see description ofCryptographic Provider
).
7.5.11
-cn
Certificate Name (Subject)
Certificate Name (Subject):
-cn ‹name›
Set the name of the certificate used to sign the document (see description ofCryptographic Provider
). The name
corresponds to the common name (CN) of the subject. In the Windows’ certificate store this corresponds to "Issued
to".
Consult chapterDigital Signatures
to learn more about digital signatures in general and how to sign documents
with the 3-Heights™ PDF to PDF/A Converter Service.
Example: Sign the document
-cn "Philip Renggli"
The signature is added on the last page of the signed document.
7.5.12
-cno
Certificate Serial Number
Certificate Serial Number:
-cno ‹serialno›
Set the serial number of the certificate. Specify a hex string as displayed by the“Serial number”field in the Microsoft
Management Console (MMC), e.g.
"49 cf 7d d1 6c a9"
. This property can be used to select the signer cer
tificate for signing (see description ofCryptographic Provider
).
7.5.13
-co
Do not Embed Revocation Information
Do not Embed Revocation Information:
-co
This switch inhibits the embedding of revocation information such as online certificate status response (OCSP - RFC
2560) and certificate revocation lists (CRL - RFC 3280). Revocation information is either an OCSP response or a CRL,
which is provided by a validation service at the time of signing and acts as proof that at the time of signing the
certificate is valid. This is useful because even when the certificates expires or is revoked at a later time, the signature
in the signed document remains valid.
Embedding revocation information is optional but suggested when applying advanced or qualified electronic sig
natures. If the embedding is enabled, then the information of the signer certificate and the issuer certificates other
than the root certificate is embedded as well. This implies that both OCSP responses and CRLs can be present in the
same message.
The downsides of embedding revocation information are the increase of the file size (normally by around 20k) and
that it requires a connection to a validation service, which delays the process of signing (normally by around 2
seconds). For mass signing it is suggested to use the caching mechanism, see chapterCaching of CRLs, OCSP and
TSP Reponses
.
41
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 61/69
Embedding revocation information requires an online connection to the CA that issues them. The firewall must be
configured accordingly. In case a web proxy is used, it must be ensured the following MIME types are supported
when using OCSP (not required for CRL):
application/ocsp-request
application/ocsp-request
7.5.14
-cp
Cryptographic Provider
Cryptographic Provider:
-cp ‹prov›
This property specifies the cryptographic provider used to create and verify signatures.
For more information on the different providers available, see the description in the respective subsection of the
sectionCryptographic Provider
.
When using theWindows Cryptographic Provider
, the value of this property is to be set to a string with the
following syntax:
"[ProviderType:]Provider[;PIN]"
If the name of the provider is omitted, the default provider is used.
Examples:
"123456"
being the pin code
Provider = "Microsoft Base Cryptographic Provider v1.0;123456"
Provider = ;123456"
When using thePKCS#11 Provider
, the value of this property is to be set to a string with the following syntax:
"PathToDll;SlotId;Pin"
Example:
Provider = "\WINDOWS\system32\siecap11.dll;4;123456"
When using any of the service providers, such as the Swisscom All-in signing service, the value of this property
is essentially the url of the service endpoint:
"http[s]://server.servicedomain.com:8080/url"
7.5.15
-cpf
Cryptographic session property (file)
Cryptographic session property (file):
-cpf ‹name› ‹file›
File data property for configuring cryptographic session. The supported names and values are specific to the cryp
tographic provider.
46
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 62/69
7.5.16
-cps
Cryptographic session property (string)
Cryptographic session property (string):
-cps ‹name› ‹str›
String property for configuring cryptographic session. The supported names and values are specific to the crypto
graphic provider.
7.5.17
-cr
Signature Reason
Signature Reason:
-cr ‹reason›
Add a descriptive text about the reason why the document was signed.
Example: Sign the document an add a reason text.
-cn "Philip Renggli" -cr "I reviewed the document"
The signature of the resulting output looks as shown below:
7.5.18
-csl
Certificate Store Location
Certificate Store Location:
-csl ‹location›
For theWindows Cryptographic Provider
this defines the location of the certificate store from where the signing
certificate should be taken. Supported are:
0
Local Machine.
1
Current User (default).
For more information, see the detailed description of theWindows Cryptographic Provider
.
7.5.19
-csn
Certificate Store Name
Certificate Store Name:
-csn ‹store›
For theWindows Cryptographic Provider
this defines the certificate store from where the signing certificate should
be taken. This depends on the OS. The default is
"MY"
. Other supported values are:
"CA"
or
"ROOT"
.
How to C#: Basic SDK Concept of XDoc.PDF for .NET combine, and split PDF file(s), and add, create, insert, delete, re-order, copy, paste, cut You may add PDF document protection functionality into your
add password to pdf reader; create password protected pdf
44
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 63/69
Example: Use the certificate store ROOT from the Local Machine account.
-cn "..." -csn ROOT -csl 0
7.5.20
-nc
Disable cache for CRL and OCSP
Disable cache for CRL and OCSP:
-nc
Get or set whether to disable the cache for CRL and OCSP responses.
Using the cache is safe, since the responses are cached as long as they are valid only. The option affects both signa
ture creation and validation.
See section onCaching of CRLs, OCSP and TSP Reponses
for more information on the caches.
7.5.21
-tsc
Time Stamp Credentials
Time Stamp Credentials:
-tsc ‹cred›
If a Time-stamp server requires authentication, use this switch to provide the credentials.
Example: Credentials commonly have the syntax
username:password.
-cn "..." -tsu http://mytimestamp.com -tsc username:password
7.5.22
-tsu
Time Stamp URL
Time Stamp URL:
-tsu ‹url›
The URL of the trusted Time-stamp server (TSA) from which a Time-stamp shall be acquired. This setting is only
required when applying a Qualified Electronic Signature. Applying a Time-stamp requires an online connection
to a time server; the firewall must be configured accordingly. In case a web proxy is used, it must be ensured the
following MIME types are supported:
application/timestamp-query
application/timestamp-reply
7.5.23
-wpc
Web Proxy Server Credentials
Web Proxy Server Credentials:
-wpc ‹cred›
If a web proxy server is used, and it requires authentication, use this switch and the syntax
user:password
.
Example: Set a web proxy server URL and use authentication.
-wpu "http://proxy.example.org" -wpc user:password
VB.NET PDF: Basic SDK Concept of XDoc.PDF combine, and split PDF file(s), and add, create, insert, delete, re-order, copy, paste, cut You may add PDF document protection functionality into your
crystal report to pdf with password; reader save pdf with password
63
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 64/69
7.5.24
-wpu
Web Proxy Server URL
Web Proxy Server URL:
-wpu ‹url›
In an organization where a web proxy server is in use, it must be ensured this web proxy server is specified. The
URL is something like
"http://proxy.example.org"
or an IP address. For more information, see the chapter
How to Use a Proxy
.
7.6 OCR
In order to make use of OCR, an OCR engine must be installed. The OCR engine is provided as part of a separate
product: The 3-Heights™ OCR Enterprise Add-On.
The recommended options (besides
-ocr
,
-ocl
and
-ocp
) are:
For scanned documents:
-oca
For born-digital documents:
-ocs -oci
7.6.1
-ocb
Convert Images to Bitonal before OCR Recognition
Convert Images to Bitonal before OCR Recognition:
-ocb
Specify whether the images should be converted to bi-tonal (black and white) before OCR recognition.
Enabling this feature can improve the memory consumption of the OCR process.
Enabling this feature automatically re-embeds the original images in the output document; the setting of
-ocs
is
ignored.
7.6.2
-oci
Do not deskew image
Do not deskew image:
-oci
Do not de-skew original image (with
-ocs
only). This option specifies whether the image and text are de-skewed
according to the recognized skew angle.
With option
-oci:
Do not change skew of images (i.e. do not change appearance of the page). This setting is
recommended for born-digital documents.
Without option
-oci:
Rotate image, such that lines of text are made horizontal. This might change the appear
ance of the page. This setting is recommended for scanned documents.
7.6.3
-ocs
Do Not Re-embed De-skewed Image
Do Not Re-embed De-skewed Image:
-ocs
The OCR engine de-skews and de-noises the input image before recognizing the characters. This option controls
whether the 3-Heights™ PDF to PDF/A Converter Service should use the de-skewed image or keep the original
image.
How to C#: Quick to Start Using XDoc.PDF for .NET content redaction, PDF document annotation, PDF document protection and more Use namespace "RasterEdge.XDoc.PDF"; Copy of the following C# sample code to your
password on pdf file; pdf protected mode
54
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 65/69
With option
-ocs:
Embed the original image (also see option
-oci
). This setting is recommended for born-
digital documents.
Without option
-ocs:
Embed the de-skewed and de-noised image from the OCR engine. This might change
the appearance of the page. This setting is recommended for scanned documents.
7.6.4
-ocbc
Embed barcodes
Embed barcodes:
-ocbc
Embed the recognized barcodes in the XMP metadata.
7.6.5
-ocr
Load OCR Engine
Load OCR Engine:
-ocr ‹name›
If a PDF document has to be made fully text searchable even if the text is part of a raster image then the images
which are contained in the PDF document must be run through an OCR engine. With this switch the user can select
an OCR engine, e.g.
Abbyy11
, and instruct the tool to embed the recognized text as a hidden layer on top of the
image. If the add-in is not found or the engine cannot be initialized (because it is not installed or the license key is
not valid) then an error message is issued.
If the switch
-ocr
is not used, no OCR is applied.
Example: The following switch sets the OCR engine to Abbyy
-ocr service
See also documentation for the 3-Heights™ OCR Add-On.
7.6.6
-ocm
OCR mode
OCR mode:
-ocm ‹n›
Specify behavior of the converter for files with existing OCR text. Available OCR modes are the following:
1
Only perform OCR for images without existing OCR text (default).
2
If OCR engine is active, remove old OCR text and perform OCR for all images. Hence, existing OCR text is not
removed if OCR engine is not active.
3
Always remove old OCR text and, if OCR engine is active, perform OCR for all images. This can be used to strip
existing, without adding new OCR text.
4
Only perform OCR if input file contains no text.
Example: Set OCR mode 2
-ocm 2
44
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 66/69
7.6.7
-ocd
Resolution for OCR Recognition
Resolution for OCR Recognition:
-ocd ‹n›
Resample images to target resolution before they are sent to the OCR engine. If no value is set, images are re-
sampled to 300 dpi for OCR, which is the preferred resolution for most OCR engines.
7.6.8
-oca
Rotate the image to the detected angle
Rotate the image to the detected angle:
-oca
The OCR engine may detect that an image needs to be rotated in order to have the text in an up-right position. If
this is the case and this switch is used then the original image is replaced by the rotated image.
7.6.9
-ocl
Set OCR Language
Set OCR Language:
-ocl ‹languages›
In order to optimize the performance of the OCR engine, it can be given hints what languages are used. The default
language of the Abbyy FineReader 11 OCR Engine is English. This switch can only be used if the switch
-ocr
is set.
This setting depends on the OCR engine.
The following switch set the languages to English and German:
-ocr service -ocl "English, German"
See also documentation for the 3-Heights™ OCR Add-On.
7.6.10
-ocp
Set OCR Parameters
Set OCR Parameters:
-ocp ‹params›
Using this switch, OCR engine specific parameters (key/value pairs) can be set to optimize the performance.
The following switch sets a predefined profile (i.e. a configuration setting) which is optimized for creating electronic
archives with high accuracy:
-ocp "PredefinedProfile = DocumentArchiving_Accuracy"
See also documentation for the 3-Heights™ OCR Add-On.
7.6.11
-oct
Threshold Resolution for OCR
Threshold Resolution for OCR:
-oct ‹n›
39
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 67/69
Only images with a higher resolution than the threshold are re-sampled before OCR. The default is 400 dpi. If set
to -1, no re-sampling is applied.
Example: Resample all images with a resolution of more than 300 dpi to 300 dpi:
-ocd 300 -oct 1
Example: Resample all images with a resolution of 400 dpi or more to 300 dpi (default):
-ocd 300 -oct 400
Example: Do not resample:
-oct -1
Compatibility Note: : Initially this switch was called
-ocD
and then renamed to
-oct
to avoid confusions with the switch
-ocd
.
8Log File
All steps in the diagram from chapterProcess Description
can write to the log file. There are three types of messages
in the log file:
Warnings/Information
,
Errors
and
Reports
.
8.1 Warnings and Information
Describe the current process step. They do not inhibit the conversion. Prefix: -
Example:
- Opening file input.pdf
- Setting font directory to C:\WINNT\Fonts
- Analyzing input.pdf
- Conformance level A has been downgraded to level B
8.2 Errors
Inhibit a successful conversion. Prefix:
*
Example:
* Cannot open file input.pdf.
35
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 68/69
Input file 001.pdf isn't convertible.
8.3 Reports
Reports are only created if the corresponding option (Details or Summary) is selected. In detailed reports, each
violation is listed with a page number (page 0 = document level), error number, a description and a counter of how
many times the error occurs. In a summary report, violations that are detected at least once are reported once.
Prefix: none.
Example: Details
0, 0x80410604, "The key Metadata is required but missing.", 1
2, 0x00418704, "The font Verdana must be embedded." , 1
2, 0x83410614, "The document contains device-specific color spaces
(Annotation C or IC)." , 1
Example: Summary
The document contains fonts without embedded font programs or encoding
information (CMAPs).
The document's meta data is either missing or inconsistent or corrupt.
The document doesn't provide appropriate logical structure information.
8.4 Conversion Errors
A conversion error means the input document contains an element that does not exist in PDF/A, i.e. can only be
converted in a way that the result may have visual differences. However the resulting document is PDF/A compliant.
The following issues result in a conversion error:
Missing output intent of device color space
Optional content removed
FFilter or FDecodeParms removed
Prohibited annotation type converted to text annotation
Prohibited action removed
Embedded files removed
Annotation without appearance stream
Transparency removed
Character from show string removed because glyph missing in font
Some of these conversion errors, such as transparency or optional content may be resolved by creating PDF/A-2
instead of PDF/A-1.
8.5 Post Analysis
The converted file is validated against the selected compliance level.
15
© PDF Tools AG – Premium PDF Technology
3-Heights™ PDF to PDF/A Converter Service, March 24, 2016 | 69/69
If a document raises conversion errors, but the post analysis reports no violations, the output may have visual dif
ferences compared to the input, but it is PDF/A compliant.
If a document raises no conversion errors, and the post analysis reports no violations, the conversion was successful.
9Licensing and Copyright
The 3-Heights™ PDF to PDF/A Converter Service is copyrighted. This user’s manual is also copyright protected; it
may be copied and given away provided that it remains unchanged including the copyright notice.
10 Contact
PDF Tools AG
Kasernenstrasse 1
8184 Bachenbülach
Switzerland
http://www.pdf-tools.com
pdfsales@pdf-tools.com
Documents you may be interested
Documents you may be interested