If you have purchased a License for the right to use the CryptoPro CSP software, then you have seen the license agreement in paper form (A4 format). Please have it ready - you will need it soon.

Step 1.

Before proceeding with the installation of the program, we recommend that you check whether you have installed old version CryptoPro CSP. This can be done in the following way:

1. Go to "Start" - "Control Panel" (or "Start" - "Settings" - "Control Panel");
2. In the window that opens, find the CryptoPro CSP snap-in.

If you not found snap-in "CryptoPro CSP", then go to Step 2.

If there is this snap-in, then run it and check the version installed program(the inscription "Product version"). If the version of the program is higher 4.0.9944 , then you can proceed to the installation of the following programs.
Attention! For normal operation with a qualified electronic signature, the minimum required version of the program - 4.0.9944. Therefore, if the version of the program you have installed below4.0.9944 , follow the next step of the instructions.

Step 2.
To install the CryptoPro program CSP versions 4.0.9944 download its distribution kit from the official site of the developer - the "Crypto-Pro" Company. Go to the top menu in the "Downloads" section and select "CryptoPro CSP" from the list. To download the distribution kit of the program, you need to register on the website (developer's requirement).

Download the distribution file CSPsetup.exe. This file is the installer new version programs and an old version updater.

Step 3.
Run CSPsetup.exe and follow the prompts of the installation wizard.
In one of the installation steps, enter serial number software (from a paper license form).

Step 4.
Wait until the installation is complete, then restart your computer.

If you have already installed the program in demo mode, or the one-year license for the CryptoPro CSP program has expired, then to activate a new serial number, you need to do the following:

1. Start the program "CryptoPro CSP": To do this, go to "Start" - "Programs" (or "All Programs") - "CRYPTO PRO" - "CryptoPro CSP".

2. In the window that opens, select the "General" tab and click on the "Enter license" button

3. Enter the requested data (user, organization and serial number) and click on "OK"


Program activation is complete.

In order to view the serial number of CryptoPro CSP, entered earlier, you must:

1. Open the registry: Start - Run - regedit
2. Find the correct directory: HKEY_LOCAL_MACHINE - SOFTWARE - Microsoft - Windows - CurrentVersion - Installer - UserData - S-1-5-18 - Products - 05480A45343B0B0429E4860F13549069 - InstallProperties
3. Find the line ProductID - this is the serial number

In connection with the transition to the new national standard for the formation and verification of electronic signatures GOST R 34.10-2012, we recommend that you update your CryptoPro CSP Licenses of version 3.6 and 3.9 in advance. to the actual ones, since these versions do not support the new national standard GOST R 34.10-2012, which is mandatory from January 1, 2019.

To check the need to update the CryptoPro CSP License, run the CryptoPro CSP program. To do this, go to "Start" -> "Programs" (or "All Programs") -> "CRYPTO-PRO" -> "CryptoPro CSP".

In the window that opens, select the "General" tab, pay attention to the product version and the license validity period:

If the version of the CryptoPro CSP program installed on your computer is 4.0, and the license validity period is "Permanent", then everything is in order, you are ready to switch to the new cryptographic standard.

If the line "Expiration date" contains date or word Expired, then you need to purchase a license and enter the serial number.

If in the line "Expiration date" you see "Permanent", but the CryptoPro CSP version starts with 3.6 ... or 3.9 ..., then you need to purchase a License to upgrade the CryptoPro CSP version, upgrade the program on your computer to current version and enter the serial number.

To check the validity period of the CryptoPro license, do the following:

Open the CryptoPro PKI program: Start - Programs - Crypto-Pro - CryptoPro PKI.

In the window that appears, on the left side, select "License Management", then select "CryptoPro CSP".

In the right part of the window there will be information about the license validity period (unlimited or until a specific date) and the version of CryptoPro (to use the IPK "GARANT Electronic Express" and the distribution kit "Electronic trading", version 3.6 is required).

How to check the validity period of the CryptoPro CSP license?

CIPF CryptoPro CSP

CIPF- means of cryptographic information protection. In the context of the work of our company, this is the name of the software product "CryptoPro CSP" from the company "Crypto-Pro" LLC, which is used to implement secure legally significant document flow.

The CryptoPro CSP CIPF distribution kit, according to the regulatory documents, for commercial use must be transmitted only on electronic media, excluding transmission through public networks.
The installation kit "Electronic trading" and the IPK "GARANT Electronic Express" include the distribution kit of the cryptographic information protection system "CryptoPro CSP", version 3.6. If the Client has a version of CryptoPro that is different from 3.6.1, it is recommended to install the version from the installation kit, because with versions below 3.6 the IPC has not been tested. In addition, there are a number of reasons why it is recommended to use CryptoPro and a license for this software product from the installation kit:

Clients often have a CryptoPro license with a narrow scope "for reporting in the Kontur / Tensor / etc ... system";

There may be restrictions on the terms of use of the license previously sold to the client;

According to the CIPF developer, cases of pirate distribution of CryptoPro by some operators have become more frequent.

Compatibility

The CryptoPro distribution kit, which is part of the GARANT Electronic Express and GARANT Electronic Express Trades distributions, is compatible with the following operating systems:

Windows 2000 (with SP4),

Windows XP (with SP2),

Windows Vista (with SP1 + Microsoft patch 6.0-KB983557).

To work with Windows 7, you need the CryptoPro CSP v.3.6 R2 distribution kit, you can download it

Also the distribution is compatible with the following software:

Internet Explorer 6.0 and up,

Microsoft Office 2003, 2007

Microsoft Office 2010 with plugin

Open Office, Open Office Writer.

How does a signature using MS Office differ from a signature using a third-party utility?

Many trading platforms use MS Office for secure workflow, in this regard, some clarity needs to be made. Office Applications Microsoft signs documents differently than a third-party encryption program (such as CryptoARM) does. When signing documents by means of the office, the digital signature is added directly to the attributes of the file, and after that it can be decrypted only in the same way. Third party programs for encryption, simply add a digital signature to the file. Therefore, these formats are not interchangeable.

How to determine the version of CryptoPro? Description

The distribution kit for CryptoPro CSP is provided in version 3.6 or higher, as this version is compatible with Rutoken-type information readers. To check the version of CryptoPro CSP on the Client's computer, use the example below.

Definition of license

This can be done in the following way:

Click "Start \ Control Panel \ CryptoPro CSP". The CryptoPro version will be listed at the top on the "General" tab.

Click "Start \ All Programs \ CryptoPro \ CryptoPro PKI". Select "License Management". The version of the program will be indicated opposite the CryptoPro icon.

You can determine the version of CryptoPro for installation by the serial number (license number):

If the serial number contains 10 characters and there is a separate license activation key, then this is CryptoPro CSP v.2

If the serial number consists of 25 characters (5 groups of 5 characters), then this is CryptoPro CSP v.3

Serial Numbers Difference for Version 3:

Serial number for version 3.0 starts with CP300

Serial number for version 3.6 starts with 36

There are exceptions for these two versions. In particular, some serial numbers issued to Kontur subscribers may not start with either CP300 or 36.

Note

The need to determine the CIPF version may arise when the Client transfers the CIPF to another workplace (new computer). What version of CryptoPro was on the old one? Unknown. And the serial number from one version does not match the other.

Entering the serial number of CryptoPro CSP

Description

We remind you that you must enter the serial number - without entering a license, CryptoPro CSP will work for only 90 days! Depending on the version of the CryptoPro CSP distribution kit, the product serial number can be entered both during installation (one of the software installation steps) and after installation. If you skipped the registration step during the installation process, return to it immediately after the installation is complete and the computer restarts. detailed information on the performance of the necessary actions is indicated in the user manual.

Solution

The product serial number is entered through the CryptoPro PKI MMC snap-in.

To enter a license, go to the "Start" -> "All Programs" -> "CryptoPro" -> "CryptoPro PKI"

On the left side of the table, expand the "License Management" directory, and then click right click mouse click on "CryptoPro CSP" -> "All tasks" -> "Enter serial number"

Specify user information and enter the serial number that you received when you connected to GARANT Electronic Express.

Note

Save the entered serial number. Remember that it is impossible to "pull" it out of the registered CIPF!

Is it possible for several cryptographic information protection tools to be present on a computer at the same time?

Description

CIPF does not "see" its keys. At the same time, they can be successfully viewed on another computer. Other errors / problems occur when working with the cryptographic information system.

Cause

Several different cryptographic information protection tools are installed on the computer simultaneously, for example, CryptoPro CSP and Signal-СOM CSP. Simultaneous installation of several cryptographic information protection tools on one PC is incorrect and leads to errors in working with EDS.

Solution

Install only one of the possible ones for which the EDS keys were made.

How to set up key information readers in CryptoPRO CSP?

Configuring readers in the CIPF is required in order for the certificate to be read exactly from the container that is configured in the CIPF.

Solution

Installing Rutoken Key Information Reader

To install the key information reader, select the "Install key information readers" menu item in the disk boot menu.

The Rutoken reader is used as the main device for reading key information.

To install this reader, run the "CryptoPro CSP" program. The instructions for launching are in the article How to launch CryptoPRO CSP? ... In the window that opens, go to the "Equipment" tab and click on the "Configure readers" button. This will open the "Manage Readers" window with a list of installed readers.

In this window, for the convenience of viewing installed readers, remove the "All smart card readers" reader. To do this, select this reader with the cursor, click the "Delete" button and in the next window, click the "Yes" button. After that, to install the reader for the Rutoken device, click the "Add" button.

In the next window, select the Activ Co. reader from the list of available readers. ruToken 0 ”and click the“ Next ”button.

A window will open in which the name of the reader “Activ Co.” will be indicated. RuToken 0 ". It is not recommended to change the name of the reader.

and in the next window - the "Finish" button.

After the actions taken, "Activ Co. ruToken 0 ”will be displayed in the list of installed readers.

Note

Installation of Rutoken readers starts with Activ Co. RuToken 0 ", if the client has 2 Rutoken devices, then Activ Co. must be added to the readers. RuToken 0 "and" Activ Co. RuToken 1 ”, and so on depending on the number of Rutoken readers.

In some cases, when you have an operating system installed on your computer Windows system Vista or Windows 7, the "Remove" and "Add" buttons may not be active. In order to make them active, you need to run the CryptoPro CSP program with administrator rights.

If the client's personal certificate was written not to the Rutoken rootken, but to the registry or to a floppy disk, then after clicking on the "Add" button, select the medium where the container is written private key.

Installing keys in the registry

Description

The System Registry, like other key media, can act as a repository and reader of secret information about keys.

pros

storing keys in the registry eliminates the need to insert the media into the computer every time you send reports and receive response documents;

the term of operation of the register as a carrier of classified information is unlimited.

Minuses

when reinstalling (or restoring) operating system on this computer, all information about your private keys will be lost forever. Always consider this moment when you install keys in the Registry, and keep the media with the original keys!

Solution

To work with system registry you need administrator rights. Make sure you have them.

Before using the Registry:

Check if it is installed in the CIPF as a reader. In most cases, it is installed automatically during the installation of the CIPF.

If it is not installed (this is possible in case of using CryptoPro CSP version 3.0 and below), add it to the list of readers.

Note

In the Welcome to the Rutoken Drivers Installer window, click the Next> button.

In the "Driver Maintenance" window, select the installation or reinstallation and click the "Next>" button.

Confirm Installation or Reinstallation of Rutoken Drivers by clicking the "Install" button.

After the installation is complete, click "Finish"

Note

After installation, you need to restart your computer.

Problems installing rootken drivers

When you try to install the rootken driver, the following error appears (While the problem is relevant on Windows XP)

This error is caused by a failure in the winscard.dll system library, which is located in the c: \ WINDOWS \ system32 \ folder.

Since the file was changed for some reason, then ALWAYS check the system for viruses !!!

Then try renaming this library - for example, name it winscard1.dll. After renaming, you should reboot the system.

If there is an intact copy of the renamed file in the system library cache, then it will be restored automatically and you can install the Rutoken drivers.

If the error still appears, then solve this problem can reinstall service pack or install service pack 3 (if installed SP2).

Key container

Key container is an area on a removable media (floppy disk or RuToken) or in the computer registry where your private key is stored. It is generated automatically when you send a request for a personal certificate and is your unique digital signature. The personal certificate you received without the corresponding private key is invalid. Attention, the key container cannot be restored... We strongly recommend making a backup.

As a key container, you can use a computer registry, a 3.5-inch floppy disk, a USB-drive and RuToken.

Copying a key container

To copy the key container, open the CryptoPro properties: Start-> Settings-> Control Panel-> CryptoProCSP. Go to tab Service and press the button Copy container.

Entering the serial number depends on which certificate is used for the job. Since the end of April 2014, Kontur.Extern subscribers can be issued certificates with a built-in license. An indication that the license is built-in is the presence of the line "Limited license Crypto-Pro" on the "Composition" tab in the public key of the certificate (see).

If the certificate with an embedded license

The public key must be set to the private key (see instructions).

The workplace must have a version of Crypto-Pro of at least 3.6 R2 (3.6.6497) installed. You can check the version of the encryption provider by opening the Start menu> Control Panel>

You do not need to have a valid workplace license to work with such certificates.

If the certificate is without a built-in license (purchased a serial number for a workplace)

First of all, you should find an appendix to the agreement "License to use software product CryptoPro CSP ". It will contain the serial number, which must be entered in one of the ways described below.

If this application is not available, you need to contact at the place of connection. If you find contacts service center will not work, you should contact technical support by the address[email protected] , indicating the essence of the problem and the TIN and KPP of the organization.

You can enter the serial number of the license using the diagnostic portal or manually.

License Entry via Diagnostic Portal

• Go to the service at https://i.kontur.ru/csp-license.
• Click the "Next" button.
• After completing the check, select "Install".
• After installing the components, enter the license number in the field and click "Enter".

• The license has been entered, the validity period of the new license is indicated.

Manual license entry

The procedure for manually entering a CryptoPro license depends on installed version encryption provider. You can check the version of the cryptographic provider by opening the menu "Start"> "Control Panel"> "CryptoPro CSP". The product version is listed on the General tab.

Below are the settings for the versions:

To enter a license for CryptoPro CSP version 3.6, you must perform the following steps:

1. Select "Start" menu> "Control Panel"> "CryptoPro CSP" .

2. In the "CryptoPro CSP Properties" window, click on the "CryptoPro PKI" link.

In CryptoPro CSP 3.6 R3, the procedure for entering a license is greatly simplified. Instead of the link "CryptoPro PKI", you should click on the "Enter license" button and enter the serial number from the form in the window that opens. Click "OK", the license is entered.

3. In the PKI console window, select the "License Management" item and expand it by clicking on the icon on the left.

4. You need to right-click on the "CryptoPro CSP" item and select "All tasks"> "Enter serial number".

5. In the window that opens, enter the serial number from the license form and click on the "Ok" button.

To enter a license for CryptoPro CSP version 3.9, you must perform the following steps:

1. Select "Start"> "Control Panel"> "CryptoPro CSP".

To enter a license for CryptoPro CSP version 4.0, you must perform the following steps:

1. Select "Start" menu> "Control Panel"> "CryptoPro CSP" .

2. In the "General" window, click on the "Enter license" button.

3. In the window that opens, fill in the proposed fields and click on the "OK" button.