Rutoken how to open. Rutoken light off - Outline.Extern

    Sergey Gress

    I downloaded Rutoken, decided not to spend extra money on drivers and to fix everything on my own. The driver itself downloaded, the icon appeared on the desktop, well, as usually happens when downloading. Now you need to configure the program for the correct transfer of reporting to the Unified State Automated Information System, and this is where the burden begins. I don’t understand at all, I go to the administration section of the rutoken, click on the information, they give ACTIVATE. I click on activation, and in response it gives NOT SUPPORTED. What are my next steps, what to do, why the status is NOT SUPPORTED has surfaced and how to get rid of it?

    • Site

      Sergei, you need to check Rutoken. If the status "Not supported" is displayed in the media information window during configuration, this means that Rutoken is not designed to work with EGAIS. Most likely, you have Rutoken Lite or Rutoken S. Only Rutoken EDS 2.0 (GOST R 34.10-2012 standard) is suitable for working with EGAIS.

      Arthur L

      Sergey, if you write "not supported", then you either download from the wrong site and you come across a fake version, or you have programs without the support of EGAIS. Better to really pay extra and install the extended version together with the wizard, it costs a penny, at least look at the future how to do it. This is a question of your own safety, you then sign the documents.

    Dmitriy

    I set up Rutokol in EGAIS, until a certain moment everything went smoothly. But starting from the generation of the key, I realized that the matter is complicated. I was tormented with this key all day, and I could not do anything. According to the schemes, everything is so simple, everyone can handle it. But in fact, it's just some kind of nightmare. As a result, he called in the specialists, did everything without any problems, without any schemes and algorithms.

    • Anna V.

      Dmitry, I initially did not try to set up anything myself. I know that this is a bad thing, not everything is as simple as they say in the instructions. Our specialist spent three hours, I can imagine how I would have suffered. I did not set up the cash register myself, although it is much easier there.

    Vladimir

    Alena, there are differences. JaCarta and eToken USB tokens perform similar functions, but the main difference between them is that the software components for Rutoken EDS 2.0 will have to be downloaded and installed separately. At the same time, its counterparts have the software required for operation already included in a single program module PKI Client. Another difference is the price. For Rutoken, it is on average 300-500 rubles. below. Otherwise, the difference is insignificant. All media have two-factor authentication to protect account access. They support encryption using hardware cryptography - during use, the key does not leave the carrier, so the data is inaccessible to unauthorized persons. Suitable for Windows, Mac, Linux.

    Alyona

    Why is Rutoken better than other drivers in general? I used to have JaCarta, it seems normal too. Now everyone without exception is running to this rutoken, I don't understand what is wrong with it. What features does this driver have in general? Is it no different in price or more expensive? How is it different from my old JaCarta at all? Maybe someone already uses it, tell me. I would not want to throw money down the drain, so that in fact nothing new will be received.

In order to check the readiness of the Rutoken key identifier to be configured to work with EGAIS, open the "Rutoken Control Panel" - the "Administration" tab - the "Information" button - and check the status opposite the "Microsoft Base Smart Card Crypto Provider" field:

  • Supported

This status means that the Rutoken email identifier is already ready for configuring the default encryption provider. Go to the second paragraph of this manual - "Changing the default encryption provider"

If the status is Supported, go to

If next to the field "Microsoft Base Smart Card Crypto Provider" there is a status Activate or Not supported, go to step 2.

2. Enabling support for the encryption provider for Rutoken EDS

To check the readiness of the Rutoken key identifier for setting up for working with EGAIS, open the "Rutoken Control Panel" - the "Administration" tab - the "Information" button - and check the status opposite the "Microsoft Base Smart Card Crypto Provider" field:

  • Activate

If a non-default PIN is set for the User or Administrator, it will need to be entered during activation.

Please note that if both PIN-codes do not correspond to the default values, for activation it will be necessary to enter successively the PIN-code of the Administrator, then the User.

If you do not know one or both of the PINs, you must contact the company that provided you with the key ID to obtain the PINs.

If it is not possible to find out the current values ​​of the PIN codes, there is only the option of formatting the Rutoken identifier to set new values ​​for the PIN codes. Please note that while formatting the key identifier, all content is permanently deleted.

After the activation procedure, the status in the "Microsoft Base Smart Card Crypto Provider" field should change to "Supported"

to continue configuring the Rutoken key identifier, go to Step 2.

  • Not supported

The "Not supported" status is displayed if an attempt is made to configure a Rutoken model that is not intended to work with EGAIS, for example or. Only the model is suitable for working with EGAIS

3. Changing the default encryption provider

Open "Start" - ("Settings") - "Control Panel" - "Rutoken Control Panel" - "Settings" tab - in the "Cryptographic Provider Settings" item, click the "Settings ..."

In the "Cryptographic provider settings" window, select "Microsoft Base Smart Card Provider" for the Rutoken EDS 2.0 electronic identifier.

If the RSA key pair will be generated on the computer, set the Microsoft Enhanced RSA and AES Cryptographic Provider in the lower field

To save the changes, click the "OK" button.

4. Setting up a workplace for working with the EGAIS portal.

Detailed instructions for generating a transport key in your EGAIS personal account and installing a universal transport module can be viewed.

Using Rutoken allows CryptoPro CSP users to secure key information from unauthorized access. Keys and certificates will be stored in the secure Rutoken file system. But before moving on to setting up a rootken, it is very important to understand the digital signature.

About electronic digital signature

An electronic digital signature is special information that is added to an electronic document and makes it possible to verify whether changes were made to an electronic document after it was signed, as well as to ensure that the person who signed this document was identified. It is possible to add an electronic digital signature to an electronic document using a private key and special software.

What is a private key? A private key is a set of characters in the form of a computer file. In this case, the private key plays the role of a ballpoint pen when signing a document on paper.
To check the EDS on an electronic document, a different set of symbols is used - a public key. After the certificate is generated, the public key becomes part of it and is not used separately.

An enhanced public key certificate (hereinafter referred to as the certificate) is a document that certifies the authenticity and ownership of the public key to the subscriber. Such a document is issued by an accredited key certification center and exists in electronic form. To check the EDS on a document, you must have a signatory certificate and special software.

The certificate serves to verify the digital signature on the document, is not secret and can be freely distributed via the Internet and other open communication channels. It is impossible to impose an EDS on an electronic document using a certificate or get your personal key from it.
As a result, we get the following. One subject signs a document using a private key and special software, while the other verifies the signature on this document using the signer's certificate and special software. In this case, the person who verifies the signature does not need to have his own private key and certificate.

Instruction. Setting up a rootken. How to install an EDS certificate

Rutoken is a small USB-block designed for secure storage of electronic information, as well as storage of EDS. In order to properly configure Rutoken, you need to download the necessary drivers. You can download them from the official website www.rutoken.ru. After running the file downloaded from the site, follow the sequential steps in the installation wizard by clicking "Next". After completing the installation actions, the "Close" button is used to configure Rutoken, carrying out a number of operations.

Setting up Rutoken

Step 1

We insert the USB block into the computer


Step 2

We activate the control panel


Step 3

through the "Administration" tab we find the "Information" button


Step 4

in the window that opens, you can see the status of Microsoft Base Smart Card Crypto Provider


If the opposite is “Supported”, then just continue with “Ok”. In the case when the status is "Activate", activate the carrier. "Not supported" means that the carrier does not support work with EGAIS (Unified State Automated Information System).

Step 5

We select "Settings" in the tab with the same name.


Step 6

For "Rutoken EDS Smart Card" and "Rutoken EDS (2.0)" you need to select the same value - "Microsoft Base Smart Card Crypto Provider".


Step 7

Rutoken setup completed

Another important point required when setting up is the Rutoken PIN. By default, a PIN code 12345678 is generated, which must be entered. This makes it possible not to get confused in PIN codes and passwords, since it must be entered with each installation.


Before you learn how to install an EDS certificate on a computer, you need to download and install a special program. It is called Crypto Pro CSP and should only be downloaded from the official site. The program has paid content, but there is an opportunity to use it for free for 3 months. Then you can start installing the EDS certificate itself.

EDS installation is carried out in two ways:

through the subsection "View certificates in the container"


through the subsection "Install personal certificate"


First, find the previously downloaded Crypto Pro. Opening it, you will see a window with the sections: "Algorithms", "Security", Winlogon, "General", "Hardware", "Service". You need the "Service" tab.

We find further "Install personal certificate", and the certificate installation wizard will open in front of you. When setting up, click "Next" almost everywhere. It is possible to select a certificate through the "Browse" button and pave the way to it. Also to the place of storage.

The second option is sequential actions through "look at the certificates in the container". Through the "Browse" select the certificate, click "Next", "Properties", "Install the certificate", "Next", "Finish". Installation completed successfully.

How to copy EDS from Rutoken to a USB flash drive

It is sometimes required to write an EDS to a USB flash drive to ensure the security of an electronic signature or to transfer it to another person. You can also do this with:

the EDS carrier itself -
Rutoken


We open Crypto Pro, while in the computer both the flash drive and the Rutoken must already be inserted in advance. In the "Service" tab, click "Copy" and in the window that opens through the "Browse" select the certificate you need to copy, confirming the action with the "OK" button. You may need to enter the password and the name of the copy of the EDS key by clicking "Next" until the "Finish" button appears. A window will open in which you need to select a USB flash drive, generate a new password and type it, copying is complete. Check that a folder with a copy of your certificate appears on the USB flash drive. In order to copy an EDS from a rutoken to a rutoken, similar actions are taken. Only after the "Finish" button, select not the USB flash drive, but the second Rutoken media. Finally, also check if the copy folder has appeared.
To obtain an electronic signature, please contact our managers by phone or using the feedback form.

1. The LED (light bulb) on the token may have burned out. To check, you should:

  • Open "Start"> "Control Panel"> "Rutoken Control Panel" (if this item is missing, then you should update the Rutoken driver).
  • In the "Rutoken Control Panel" window that opens, check whether the token is displayed in the "Readers" item, as well as whether the "Enter PIN" (or "Login") and "Information" buttons are active. If the buttons are active, then the light bulb is simply burned out (this will not affect the operation of Rutoken). If the buttons are inactive, then go to step 2.

2. Connect Rutoken to a different USB port.

3. Start / restart the "Smart Card" service. For this:

  • Select Start menu> Control Panel> Administrative Tools> Services. Find the Smart Card service in the list and check the value in the Status column.
  • If the service is running, you should restart it. You need to right-click on the line with the name of the service and select "Restart".
  • If the service is stopped, you need to start it. To do this, right-click on the line with the name of the service and select "Start".

4. Reinstall the Rutoken driver after disconnecting the media from the computer.
To do this, open the menu "Start"> "Control Panel"> "Add or Remove Programs" (for Windows Vista \ Windows Seven, menu "Start"> "Control Panel"> "Programs and Features"). In the list, find the item "Rutoken Drivers ”and select“ Uninstall. ”After uninstalling, you must restart your computer and reinstall the Rutoken driver.

5. If reinstalling the driver did not help to solve the error, you must install the driver using the "Device Manager" menu. The installation procedure depends on the operating system you are using. Below are the settings for:

Driver Installation for Windows Vista \ Windows Seven

2. In the menu that opens, select "Device Manager".

3. In the window that opens, check if the list contains the item "Other devices", indicated by a yellow icon.

4. It is necessary to highlight the "ruToken" line and select "Update drivers".

6. Click on the "Browse" button, specify the directory C: \ Windows \ System32 \ Aktiv Co and click on the "Next" button. The specified directory can be hidden. In this case, you need to select the menu "Tools"> "Folder options"> "View", set the switch "Show hidden files, folders and drives" and re-select the directory.

7. Wait until the end of the installation and click on the "Close" button.

8. After installing the driver, the device will be displayed in the "USB Controllers" section. The diode should also light up on the token.

Driver Installation for Windows XP

1. Click on the icon "My Computer" with the right mouse button and select the item "Properties".

2. In the "System Properties" window, go to the "Hardware" tab and click on the "Device Manager" button.

3. In the window that opens, check if there is an element “ruToken” (or “Unknown device”) marked with a yellow icon in the list by right-clicking on it and selecting “Update driver”.

4. In the "Hardware Update Wizard" window, select the "Install from a list or specific location" radio button.

5. In the window that opens, click on the "Browse" button, specify the path to the C: \ Windows \ system32 \ Aktiv Co \ rt USB directory and click on the "Next" button. The specified directory can be hidden. In this case, select the menu "Tools"> "Folder options"> "View", set the switch "Show hidden files, folders and drives" and reselect the directory

6. Wait until the end of the installation and click on the "Finish" button.

7. When the driver installation is complete, the device will be listed under Universal Serial Bus Controllers. The diode should also light up on the token.

6. If following the instructions did not help to correct the error, the token is most likely faulty. To verify this, you should connect Rutoken to a computer on which the driver has never been installed. If the media is working correctly, the Add New Hardware Wizard should start. If nothing happens when the rutoken is attached, then the carrier is most likely defective and needs to be replaced.

If you have saved a copy of the certificate, you should use it to work in the Kontur.Extern system, having previously installed the certificate. If no copies have survived, you need to contact the service center for an unplanned replacement of the key.