...
go to https://stache.utexas.edu/ and download your mail encryption key (download P12). It will be named encryption and mail signing cert. Use your EID and EID password to log in in. You will also need to do the second factor Duo authentication.
The page with your encryption key has a password. you will need that password to import it into your keychain.
...
Double click the downloaded key file named something like YourEmailAddress.P12
for MAC:
It should automatically try to import into your keychain and will ask for the password for that file which was the password on the page where you downloaded the encryption key in the box that says "Encrypted File Password". enter that password. It may also need your EID password just to allow the importation into the keychain when it asks for your "login" password.
if you imported it successfully, there will be a Keychain list on the left, and also a Category list. click My Certificates in the Category pane and locate your certificate. Click the triangle beside your certificate so it shows your private key beside your email address. Double Click the Key icon with your email address.
if you get this far, click the Access Control tab. in the box underneath where it says "Always allow access by these applications:" click the + sign underneath and navigate your way to your Applications folder and add Adobe Acrobat Pro.app, or whichever version of Adobe Acrobat you're using. I usually add Mail.app so I don't have to go back at a later date to set them up for email signing and encryption. Don't bother with Mail.app if you use Outlook for email.
Save Changes. it should ask for your "login" (EID password) password again.
FOR Windows:
Double clicking the p12 file will open Certificate Import Wizard.
Go through. You shouldn't have to tick off anything. Do not check the box to force strong protection or it will make you enter your password every time you want to use the key.
Finish the wizard.
in Acrobat Pro:
Then open Acrobat Pro/Acrobat Reader and go to the Acrobat menu (Edit menu on Windows) and choose Preferences. scroll down to Signatures.
...
click Trusted Certificates. Scroll til you see The University of TExas at Austin at Austin RCA and click it.
- At this step for Acrobat Pro XI running on Windows 7 the following had to be done to add the University's signing certificate to the list of trusted certificates. If you don't do this step then Acrobat reader will always says UT signing certificates are invalid because the certifying certificate is not trusted.
- In the same window where you did the previous step, double-click on the user's listed certificate in the right pane
- In the window that appears you will see a tree of signing certificates in the left pane. Just above the botton branch where the user's certificate is listed, a parent certificate named "The University of Texas at Austin" is listed. Click that certificate to bring up its options in the right pane.
- Click the "Trust" tab and then click the button labeled "Add to Trusted Certificates..."
- Accept the default trust options of just trusting it for signing and certifying documents
- Click OK to accept all changes
...
*If you do not see a certificate for The University of Texas at Austin RCA, find it in the Certificates section of the Keychain app and drag it to the desktop, then you can import it into Adobe ProfessionalAcrobat.
This wiki page has an attachment for how to place a signature in Acrobat
...