11 Secure Reports
This topic describes how to secure pixel-perfect reporting.
Encrypt PDF Documents
You can encrypt PDF documents to prevent unauthorized access to the file content.
The security level you set in the Encryption level PDF output property specifies the encryption algorithm used for the PDF document encryption. Define encryption for PDF documents at the server level or at the report level. See PDF Output Properties.
Publisher supports AES-256 encryption for:
- PDF documents generated from RTF and XPT templates using the FOProcessor or PDFGenerator utilities.
- PDF documents generated from PDF templates (PDF forms) using the FormProcessor utility. Publisher doesn’t support encrypted form input.
- PDF documents without password protection that are printed using either PDF to PostScript or PDF to PCL print filter. You can’t send an encrypted PDF document to a CUPS printer or an IPP printer without a filter.
Publisher uses the AES implementation of JCE (Java Cryptography Extension) for encrypting and decrypting documents. If you want to use the AES 256-bit encryption for PDF documents, you need the JCE Unlimited Strength Jurisdiction Policy installed on the JVM that runs the container that has the Publisher installation, but this policy isn't required for the AES 128-bit encryption.
Publisher doesn't support encrypted input.
PDF Document Encryption Algorithms
Publisher uses an encryption algorithm based on the PDF document security setting.
| Security Level | Encryption Scheme | PDF Version | Acrobat Version |
|---|---|---|---|
| Low | RC4 (40bit) | 1.1 | 3.0 |
| Medium | RC4 (128bit) | 1.4 | 5.0 |
| High | AES (128bit) | 1.5 | 7.0 |
| Highest | AES (256bit) | 1.7 (extension level 5) | X |