17.04.2016
EDS certificate(electronic digital signature) is, in fact, a set of numbers. The generation of these numbers occurs when the document is encrypted, which is based on personal data necessary to identify the user. After receiving a digital signature at the certification center, it must be installed. Only after that, you will be able to use it. We will advise you.
Before installing EDS make sure there is a program CryptoProCSP... The absence of this program excludes the possibility of using digital signature... Download CryptoPro you can by going to official site developers. This is a paid program, however, you will be given a free trial period that will last for 3 months.
Suppose the program CryptoPro you already have it installed on your personal computer. The following steps will tell you how to install a ZCP certificate on a computer:
- Open on your computer “ Control Panel”. In the panel window, select from the list of programs CryptoPro... Run it by double-clicking the mouse (left button);
- In the window of the running program, from the list of different tabs, select the tab “ Service”;
- In the opened tab, click on the column “ View certificates in container”;
- Next, in the window that appears, click on “ Overview”. This window shows the available reader and the name of the container. Review the information received, then click “ OK”;
- The window that opens has the name “ Container certificates private key ”. Click “ Further”Without any changes and input of information;
- A window will open telling you about the user, serial number electronic signature and its validity period. Select the item “ Properties”;
- In the certificate window that appears, you need to install a new one. This can be easily done by clicking on “ Install certificate”;
- “ Certificate Import Wizard”. Check out the information provided and click “ Further”;
- In the new window, select the item called “ Place all certificates ... ”. Click on the button “ Overview”;
- Select a folder named “ Personal", Click on" OK”;
- To complete the installation, click “ Ready”.
Now you know how to install EDS certificate on computer... Enjoy the simplicity and ease of use with a unique electronic digital signature.
Hello dear blog site readers!
Many of my acquaintances often work with EDS (electronic digital signature), but few of them can install the EDS key themselves. Therefore, I decided to write this article so that people with this article feel bolder and quickly learn how to install an EDS on a computer, and save time in the future. Just want to draw your attention to the fact that the name of the topic may be similar, so you can choose what you need. So, let's begin.
Before installing a digital signature (EDS), be sure to make sure that you already have the CryptoPro program installed, and if so, we can safely move on. If you do not know how to check, then go to the control panel of your computer and look for the inscription there CryptoPro CSP, if you didn’t find one, then go to the installation of the program.
Attention: Since 2019, all issued EDS are produced in accordance with GOST 2012. Only Crypto Pro version 4 and higher can work with them. Thus, if you have version 3.6 or 3.9, then it can officially be updated to the 4th version. Previous versions of CryptoPro can only work with EDS keys on a computer with old keys issued before the end of 2018.
Preparing to install EDS on a computer
In I wrote about installing the Crypto pro program, but this is not enough, for complete happiness, the rootken or JaCarta drivers must be installed, and some have both. This depends on what kind of key (EDS) you have. This is necessary in order for your EDS to be visible to CryptoPro, i.e. so that the computer "sees" your key.
After we made sure that we have installed Crypto Pro and the necessary drivers, then we need to install the EDS on the computer.
Installing EDS in CryptoPro
Open the control panel, select the Crypto Pro shortcut and after opening the program, select the section at the top of the window SERVICE.
In this window, click on the button in the middle to VIEW CERTIFICATES IN THE CONTAINER.
If you have two, three or more lines, then several keys are inserted into your computer, do not be alarmed here and choose one of them (you can choose one from top to bottom), then you will read who owns this key and if it is not the one, what you need, you will choose the one you need by sorting.
In the next window that opens from the bottom, click on the INSTALL CERTIFICATE button.
Here we just click NEXT, but I want to note that the certificate is saved in the PERSONAL section, so in principle it should be. But if you install ROOT CERTIFICATES, then you need to select the ROOT CERTIFICATES folder of the CERTIFICATION CENTER for saving.
Then a window appears that informs about the successful writing of the key to your computer, and this completes the installation of the EDS CryptoPro key.
How did you notice install new electronic digital signature on a computer is not that difficult! In addition, now you know how you can independently install an EDS on your computer and you can help your friends and acquaintances in this problem.
Good luck with installing EDS in Cryptopro!
If you could not install the EDS yourself, you can contact Skype Sergo2003 for paid help installing the key (installation cost 500 rubles).
Similar posts
Using Rutoken allows CryptoPro CSP users to secure key information from unauthorized access. Keys and certificates will be stored in the secure Rutoken file system. But before moving on to setting up a rootken, it is very important to understand the digital signature.
About electronic digital signature
An electronic digital signature is special information that is added to an electronic document and makes it possible to verify whether changes were made to electronic document after signing it, and also guaranteed to identify the person who signed this document... It is possible to add an electronic digital signature to an electronic document using a private key and a special software.
What is a private key? A private key is a set of characters in the form of a computer file. In this case, the private key plays a role ballpoint pen when signing a document on paper.
To check the EDS on an electronic document, a different set of symbols is used - public key... After the certificate is generated, the public key becomes part of it and is not used separately.
An enhanced public key certificate (hereinafter referred to as the certificate) is a document that certifies the authenticity and ownership of the public key to the subscriber. Such a document is issued by an accredited key certification center and exists in in electronic format... To check the EDS on a document, you must have a signatory certificate and special software.
The certificate serves to verify the digital signature on the document, is not secret and can be freely distributed via the Internet and other open communication channels. It is impossible to impose an EDS on an electronic document using a certificate or get your personal key from it.
As a result, we get the following. One subject signs a document using a private key and special software, while the other verifies the signature on this document using the signer's certificate and special software. In this case, the person who verifies the signature does not need to have his own private key and certificate.
Instruction. Setting up a rootken. How to install an EDS certificate
Rutoken is a small USB box designed for safe storage electronic information, as well as storage of EDS. In order to properly configure Rutoken, you need to download the necessary drivers. You can download them from the official website www.rutoken.ru. After running the file downloaded from the site, follow the sequential steps in the installation wizard by clicking "Next". After completing the installation actions, the "Close" button is used to configure Rutoken, carrying out a number of operations.
Setting up Rutoken
Step 1
We insert the USB block into the computer
Step 2
We activate the control panel
Step 3
through the "Administration" tab we find the "Information" button
Step 4
in the window that opens, you can see the status of Microsoft Base Smart Card Crypto Provider
If the opposite is “Supported”, then just continue with “Ok”. In the case when the status is "Activate", activate the carrier. "Not supported" means that the carrier does not support work with EGAIS (Unified State Automated Information System).
Step 5
We select "Settings" in the tab with the same name.
Step 6
For "Rutoken EDS Smart Card" and "Rutoken EDS (2.0)" you need to select the same value - "Microsoft Base Smart Card Crypto Provider".
Step 7
Rutoken setup completed
Another important point required when setting up is the Rutoken PIN. By default, a PIN code 12345678 is generated, which must be entered. This makes it possible not to get confused in PIN codes and passwords, since it must be entered with each installation.
Before you learn how to install an EDS certificate on a computer, you need to download and install a special program. It is called Crypto Pro CSP and should only be downloaded from the official site. The program has paid content, but the possibility of free free use is provided for 3 months. Then you can start installing the EDS certificate itself.
EDS installation is carried out in two ways:
through the subsection "View certificates in the container"
through the subsection "Install personal certificate»
First, find the previously downloaded Crypto Pro. Opening it, you will see a window with the sections: "Algorithms", "Security", Winlogon, "General", "Hardware", "Service". You need the "Service" tab.
We find further "Install personal certificate", and the certificate installation wizard will open in front of you. When setting up, click "Next" almost everywhere. It is possible to select a certificate through the "Browse" button and pave the way to it. Also to the place of storage.
The second option is sequential actions through "look at the certificates in the container". Through the "Browse" select the certificate, click "Next", "Properties", "Install the certificate", "Next", "Finish". Installation completed successfully.
How to copy EDS from Rutoken to a USB flash drive
It is sometimes required to write an EDS to a USB flash drive to ensure the security of an electronic signature or to transfer it to another person. You can also do this with:
the EDS carrier itself -
Rutoken
We open Crypto Pro, while both the flash drive and the Rutoken must already be inserted in the computer in advance. In the "Service" tab, click "Copy" and in the window that opens through the "Browse" select the certificate you need to copy, confirming the action with the "OK" button. You may need to enter a password and copy name EDS key by clicking Next until the Finish button appears. A window will open in which you need to select a USB flash drive, generate a new password and type it, copying is complete. Check that a folder with a copy of your certificate appears on the USB flash drive. In order to copy an EDS from a rutoken to a rutoken, similar actions are taken. Only after the "Finish" button, select not the USB flash drive, but the second Rutoken media. At the end, also check if the copy folder has appeared.
To obtain an electronic signature, please contact our managers by phone or using the feedback form.
Often people contact us with a question, how to install a certificate via CryptoPo CSP... Situations are different: the director or chief accountant has changed, received new certificate at the certification center, etc. It used to work, but now it doesn't. Here's what you need to do to install a personal digital certificate on your computer.
You can install a personal certificate in two ways:
1. Through the CryptoPro CSP menu "View certificates in the container"
2. Through the CryptoPro CSP menu "Install personal certificate"
If an operating theater is used at the workplace Windows system 7 without SP1, then the certificate should be installed according to the recommendations of option No. 2.
Option number 1. Install through the menu "View certificates in the container"
To install a certificate:
1. Select Start -> Control Panel -> CryptoPro CSP -> Service tab and click the "View certificates in container" button.
2. In the window that opens, click the "Browse" button. Select a container and confirm your choice with the OK button.
If the message “There is no public encryption key in the private key container”, proceed to the installation digital certificate according to option number 2.
4. If “CryptoPro CSP” version 3.6 R2 (product version 3.6.6497) or higher is installed on your computer, then in the window that opens, click on the “Install” button. Then agree to the proposal to replace the certificate.
If there is no Install button, in the Certificate for Viewing window, click the Properties button.
5. In the “Certificate” window -> “General” tab, click on the “Install certificate” button.
6. In the Certificate Import Wizard window, select Next.
7. If you have installed “CryptoPro CSP” version 3.6, then in the next window it is enough to leave the switch on the item “Automatically select storage based on the type of certificate” and click “Next”. The certificate will be automatically installed in the Personal store.
Option 2. Install through the "Install personal certificate" menu
To install, you will need, in fact, the certificate file itself (with the .cer extension). It can be located, for example, on a floppy disk, on a token, or on a computer's hard drive.
To install a certificate:
1. Select Start -> Control Panel -> CryptoPro CSP -> Tools tab and click the "Install Personal Certificate" button.
2. In the “Personal Certificate Installation Wizard” window, click the “Next” button. In the next window, click “Browse” to select the certificate file.
3. Specify the path to the certificate and click on the "Open" button, then "Next".
4. In the next window, you can view information about the certificate. Click Next.
5. In the next step, enter or specify the private key container that corresponds to the selected certificate. To do this, use the “Browse” button.
If you have installed CryptoPro CSP version 3.6 R2 (product version 3.6.6497) or higher, check the “Install certificate to container” checkbox.
8. Select the "Personal" vault and click OK.
9. The repository you have selected. Now click “Next”, then “Finish”. After that, a message may appear:
In this case, click “Yes”.
10. Wait for the message that the personal certificate was successfully installed on the computer.
That's it, you can sign documents using a new certificate.