Menu
homeBreakdowns

License for cryptopro 3.6 7777 license key. If the certificate does not have a built-in license (you purchased a serial number for your workstation). How to set up key information readers in CryptoPRO CSP

If you purchased a License for the right to use the CryptoPro CSP software, then you were given a license agreement in paper form (A4 format). Please prepare it - you will need it soon.

Step 1.

Before you begin installing the program, we recommend checking whether you have an old version of CryptoPro CSP installed. You can do this in the following way:

1. Go to “Start” - “Control Panel” (or “Start” - “Settings” - “Control Panel”);
2. In the window that opens, find the “CryptoPro CSP” snap-in.

If you not found“CryptoPro CSP” snap-in, then proceed to Step 2.

If this snap-in is available, then run it and check the version of the installed program (the inscription “Product version”). If the program version is higher 4.0.9944 , then you can proceed to install the following programs.
Attention! For normal operation with a qualified electronic signature, the minimum required version of the program is - 4.0.9944. Therefore, if the version of the program installed on you below4.0.9944 , follow the next step of the instructions.

Step 2.
To install the CryptoPro CSP program version 4.0.9944 download its distribution from the official website of the developer - the Crypto-Pro Company. Go to the "Downloads" section in the top menu and select "CryptoPro CSP" from the list. To download the program distribution, you must register on the site (developer requirement).

Download the distribution file CSPsetup.exe. This file is an installation program for a new version of the program and an update tool for the old version.

Step 3.
Run CSPsetup.exe and follow the installation wizard prompts.
At one of the installation steps, enter the program serial number (from the paper license form).

Step 4.
Wait until the installation of the program is completed, and then restart your computer.

If you have already installed the program in demo mode, or the annual license for the CryptoPro CSP program has expired, then to activate a new serial number you must perform the following steps:

1. Launch the program "CryptoPro CSP": to do this you need to go to “Start” - “Programs” (or “All programs”) - “CRYPTO PRO” - “CryptoPro CSP”.

2. In the window that opens, select the “General” tab and click on the “Enter license” button

3. Enter the requested data (user, organization and serial number) and click on "OK"


Activation of the program is completed.

In order to view the CryptoPro CSP serial number entered earlier, you must:

1. Open the registry: Start - Run - regedit
2. Find the required directory: HKEY_LOCAL_MACHINE - SOFTWARE - Microsoft - Windows - CurrentVersion - Installer - UserData - S-1-5-18 - Products - 05480A45343B0B0429E4860F13549069 - InstallProperties
3. Find the ProductID line - this is the serial number

In connection with the transition to the new national standard for the formation and verification of electronic signatures GOST R 34.10-2012, we recommend that you update your CryptoPro CSP Licenses versions 3.6 and 3.9 in advance. to current ones, since these versions do not support the new national standard GOST R 34.10-2012, which is mandatory from January 1, 2019.

To check the need to update the CryptoPro CSP License, run the CryptoPro CSP program. To do this, go to “Start” -> “Programs” (or “All Programs”) -> “CRYPTO-PRO” -> “CryptoPro CSP”.

In the window that opens, select the “General” tab, pay attention to the product version and license expiration date:

If the version of the CryptoPro CSP program installed on your computer is 4.0, and the license validity period is “Permanent”, then everything is in order, you are ready to switch to a new cryptographic standard.

If the “Validity period” line indicates date or word "Expired", then you need to purchase a license and enter the serial number.

If in the “Validity period” line you see “Permanent”, but the version of CryptoPro CSP starts at 3.6... or 3.9..., then you need to purchase a License to update the version of CryptoPro CSP, update the program on your computer to the current version and enter serial number.

To check the validity period of your CryptoPro license, do the following:

    Open the CryptoPro PKI program: Start - Programs - Crypto-Pro - CryptoPro PKI.

    In the window that appears, on the left side, select “License Management”, then select “CryptoPro CSP”.

    On the right side of the window there will be information about the validity period of the license (unlimited or until a specific date) and the version of CryptoPro (to use the GARANT Electronic Express IPK and the Electronic Trading distribution package, version 3.6 is required).

How to check the validity period of a CryptoPro CSP license?

CIPF CryptoPro CSP

CIPF— means of cryptographic information protection. In the context of our company’s work, this is the name given to the software product “CryptoPro CSP” from the company “Crypto-Pro” LLC, which is used to carry out secure, legally significant document flow.

The distribution kit of the CIPF "CryptoPro CSP", according to regulatory documentation, for commercial use must be transmitted only on electronic media, excluding transmission via public networks.
The installation kit "Electronic trading" and the IPK "GARANT Electronic Express" includes the distribution kit of the CIPF "CryptoPro CSP", version 3.6. If the Client has a version of CryptoPro installed that is different from 3.6.1, it is recommended to install the version from the installation kit, because IPC has not been tested with versions below 3.6. In addition, there are a number of reasons why it is recommended to use CryptoPro and the license for this software product from the installation kit:

Clients can often find a CryptoPro license with a narrow scope of application “for reporting in the Kontur/Tensor/etc system...”;

There may be restrictions on the period of use of a license previously sold to the client;

According to the CIPF developer, cases of pirated distribution of CryptoPro by some operators have become more frequent.

Compatibility

The CryptoPro distribution kit, which is part of the "GARANT Electronic Express" and "GARANT Electronic Express Trading" distribution kits, is compatible with the following operating systems:

    Windows 2000 (with SP4),

    Windows XP (with SP2),

    Windows Vista (with SP1 + Microsoft patch 6.0-KB983557).

To work with Windows 7, you need the CryptoPro CSP v.3.6 R2 distribution kit, you can download it

The distribution is also compatible with the following software:

    Internet Explorer 6.0 and higher,

    Microsoft Office 2003, 2007

    Microsoft Office 2010 with plugin

    Open Office, Open Office Writer.

How does signing using MS Office differ from signing using a third-party utility?

Many trading platforms use MS Office for secure document management, and in this regard, some clarity needs to be introduced. Microsoft office applications sign documents differently than third-party encryption software (such as CryptoARM). When signing documents using office tools, the digital signature is added directly to the file attributes, and after that it can only be decrypted in a similar way. Third-party encryption software simply adds a digital signature to the file. Therefore, these formats are not interchangeable.

How to determine the version of CryptoPro?Description

The CIPF distribution kit "CryptoPro CSP" is provided in version no lower than 3.6, since this version is compatible with information readers such as Rutoken. To check the version of CryptoPro CSP on the Client’s computer, use the example below.

License Definition

This can be done in the following way:

    Click "Start\Control Panel\CryptoPro CSP". The CryptoPro version will be indicated at the top on the “General” tab.

    Click "Start\All Programs\CryptoPro\CryptoPro PKI". Select "Manage Licenses". The program version will be indicated opposite the CryptoPro icon.


You can determine the version of CryptoPro to install by the serial number (license number):

    If the serial number contains 10 characters and there is a separate license activation key, then this is CryptoPro CSP v.2

    If the serial number consists of 25 characters (5 groups of 5 characters), then this is CryptoPro CSP v.3

Serial number difference for version 3:

    The serial number for version 3.0 starts with CP300

    Serial number for version 3.6 starts with 36

There are exceptions for these two versions. In particular, some serial numbers issued to Kontur subscribers may not begin with either CP300 or 36.

Note

The need to determine the CIPF version may arise when the Client transfers the CIPF to another workplace (new computer). What version of CryptoPro was on the old one? Unknown. And the serial number from one version does not match another.

Entering the serial number of the CIPF CryptoPro CSP

Description

We remind you that you must enter the serial number - without entering a license, CryptoPro CSP will only work for 90 days! Depending on the version of the CryptoPro CSP distribution kit, the product serial number can be entered both during the installation process (one of the software installation steps) and after installation. If you skipped the registration step during the installation process, return to it immediately after installation is complete and your computer has restarted. Detailed information on performing the necessary actions is provided in the user manual.

Solution

The product serial number is entered through the CryptoPro PKI MMC snap-in.

To enter a license, go to the "Start" menu -> "All Programs" -> "CryptoPro" -> "CryptoPro PKI"

In the left part of the table, expand the "License Management" directory, then right-click on "CryptoPro CSP" -> "All tasks" -> "Enter serial number"

Provide user information and enter the serial number that you received when connecting to GARANT Electronic Express.

Note

Save the entered serial number. Remember that it is impossible to “pull” it out of the registered CIPF!

Is it possible to have several CIPFs on a computer at the same time?

Description

CIPF does not “see” its keys. At the same time, they can be successfully viewed on another computer. Other errors/problems arise when working with CIPF.

Cause

Several different CIPFs are installed on the computer at the same time, for example, CryptoPro CSP and Signal-COM CSP. Simultaneous installation of several CIPFs on one PC is incorrect and leads to errors in working with digital signatures.

Solution

    Install only one of the possible ones for which EDS keys are made.

How to set up key information readers in CryptoPRO CSP?

Configuring readers in CIPF is required so that the certificate is read from exactly the container that is configured in CIPF.

Solution

Installation of the Rutoken key information reader

To install a key information reader, you must select the “Install key information readers” menu item in the boot menu of the disk.

The Rutoken reader is used as the main device for reading key information.

To install this reader, run the CryptoPro CSP program. Instructions for launching are in the article How to launch CryptoPRO CSP? . In the window that opens, go to the “Equipment” tab and click on the “Configure readers” button. As a result, the “Manage Readers” window will open with a list of installed readers.

In this window, for the convenience of viewing installed readers, you should delete the “All smart card readers” reader. To do this, select this reader with the cursor, click the “Delete” button and in the next window click the “Yes” button. After that, to install a reader for the Rutoken device, click the “Add” button.

In the next window, select the “Activ Co.” reader from the list of available readers. ruToken 0" and click the "Next" button.

A window will open indicating the reader name “Activ Co.” RuToken 0". It is not recommended to change the reader name.

and in the next window - the “Done” button.

After completing the actions “Activ Co. ruToken 0" will appear in the list of installed readers.

Note

Installation of Rutoken readers begins with Activ Co. RuToken 0”, if the client has 2 Rutoken devices, then “Activ Co.” must be added to the readers. RuToken 0" and "Activ Co. RuToken 1", and so on depending on the number of Rutoken readers.

In some cases, when you have the Windows Vista or Windows 7 operating system installed on your computer, the “Delete” and “Add” buttons may not be active. In order to make them active, you need to run the CryptoPro CSP program with administrator rights.

If the client’s personal certificate was written not to the Rutoken root token, but to the registry or to a floppy disk, then after clicking on the “Add” button, you must select the medium where the private key container was written.

Setting keys in the registry

Description

The System Registry, like other key media, can serve as a storage and reader of secret information about keys.

pros

    storing keys in the registry eliminates the need to insert the media into the computer every time you send reports and receive response documents;

    The service life of the registry as a carrier of secret information is unlimited.

Minuses

    When you reinstall (or restore) the operating system on this computer, all information about your secret keys will be lost forever. Always take this point into account when installing keys in the Registry, and keep the media with the original keys!

Solution

To work with the system registry, you need administrator rights. Make sure you have them.

Before using the Registry:

    Check whether it is installed in CIPF as a reader. In most cases, it is installed automatically during the CIPF installation process.

    If not installed (this is possible if you are using CryptoPro CSP version 3.0 and lower), add it to the list of readers.

Note

    In the "Welcome to the Rutoken Driver Installer" window, click the "Next >" button.

    In the "Driver Maintenance" window, select the installation or relocation and click the "Next >" button.

    Confirm the Installation or reinstallation of Rutoken Drivers by clicking the "Install" button.


    After installation is complete, click "Finish"

Note

After installation, you need to restart your computer.

Problems installing Rutoken drivers

When you try to install the root token driver, the following error appears (The problem is still relevant on Windows XP)


This error is caused by a failure in the winscard.dll system library, which is located in the c:\WINDOWS\system32\ folder.

Since the file was changed for some reason, you MUST check your system for viruses!!!

Then try renaming this library - for example call it winscard1.dll. After renaming, you should reboot the system.

If there is an intact copy of the renamed file in the system library cache, it will be restored automatically and the Rutoken drivers can be installed.

If the error still appears, then reinstalling the service pack or installing service pack 3 (if SP2 is installed) can solve this problem.

Key container

Key container- this is an area on removable media (floppy disk or RuToken) or in the computer registry in which your private key is stored. It is generated automatically when you submit a request for a personal certificate and is your unique digital signature. The personal certificate you received without the corresponding private key is invalid. Attention, the key container cannot be restored. We strongly recommend that you make a backup copy.

As a key container, you can use a computer registry, a 3.5-inch floppy disk, a USB drive, and RuToken.

Copying a Key Container

To carry out the procedure for copying a key container, open the properties of CryptoPro: Start->Settings->Control Panel->CryptoProCSP. Go to tab Service and press the button Copy container.

Entering the serial number depends on which certificate is used for the job. Since the end of April 2014, Kontur.Extern subscribers can be issued certificates with a built-in license. A sign that the license is built-in is the presence of the line “Limited Crypto-Pro License” on the “Composition” tab in the public key of the certificate (see).

If the certificate has an embedded license

The public key must be set to the private key (see instructions).

The workplace must have a version of Crypto-Pro no lower than 3.6 R2 (3.6.6497) installed. You can check the version of the crypto provider by opening the Start menu > Control Panel >

To work with such certificates, you do not need to have a valid workplace license.

If the certificate does not have a built-in license (you purchased a serial number for your workstation)

First of all, you should find the appendix to the agreement “License to use the CryptoPro CSP software product.” It will contain a serial number, which must be entered using one of the methods described below.

If This application is not available, you need to contact at the connection point. If you cannot find service center contacts, you should contact technical support at[email protected] , indicating the essence of the problem and the tax identification number and checkpoint of the organization.

You can enter the license serial number using the diagnostic portal or manually.

Entering a license through the diagnostic portal

  • Go to the service at https://i.kontur.ru/csp-license.
  • Click the “Next” button.
  • After the verification is completed, select “Install”.
  • After installing the components, enter the license number in the field and click Enter.
  • The license has been entered and the validity period of the new license is indicated.

Manually entering a license

The procedure for manually entering a CryptoPro license depends on the installed version of the crypto provider. You can check the version of the crypto provider by opening the “Start” menu > “Control Panel” > “CryptoPro CSP”. The product version is listed on the General tab.

Below are the settings for the versions:

To enter a license for CryptoPro CSP version 3.6, you must complete the following steps:

1. Select the “Start” menu > “Control Panel” > “CryptoPro CSP” .

2. In the “CryptoPro CSP Properties” window, click on the “CryptoPro PKI” link.

In CryptoPro CSP 3.6 R3, the procedure for entering a license has been significantly simplified. Instead of the “CryptoPro PKI” link, click on the “Enter license” button and enter the serial number from the form in the window that opens. Click “Ok”, license entry is completed.

3. In the PKI console window, select the “License Management” item and expand it by clicking on the icon on the left.

4. You need to right-click on the “CryptoPro CSP” item and select “All tasks” > “Enter serial number”.

5. In the window that opens, you must enter the serial number from the license form and click on the “Ok” button.

To enter a license for CryptoPro CSP version 3.9, you must complete the following steps:

1. Select the “Start” menu > “Control Panel” > “CryptoPro CSP”.

To enter a license for CryptoPro CSP version 4.0, you must complete the following steps:

1. Select the “Start” menu > “Control Panel” > “CryptoPro CSP” .

2. In the “General” window, click on the “Enter license” button.

3. In the window that opens, you need to fill in the fields provided and click on the “Ok” button.