New version of the public services portal working with digital signature. (EDS) electronic signature for government services, creation and receipt

All tips

Make friends with modern technologies For inexperienced users- task with an asterisk. However, in the realities of the world this is catastrophically important, which means everyone has to figure it out. In this article we will talk about solving a common error on the State Services website - “You don’t have valid certificates" You will find out what this failure is and how to fix it.

Solution at the start stage

One of the reasons for this unpleasant turn may be a registration error. It’s worth briefly reviewing the sequence of actions to get started correctly:

We go to the State Services website and find the item "Registration".
Enter your details and mobile number.
While the SMS arrives, you can start filling out the form.

It is worth noting that it is difficult to make a mistake here - the system detects an insufficient number of numbers or letters in a particular column, indicating possible error. But it’s still worth double-checking several times. You can confirm your account in several ways (they sometimes change) - check on the website in the appropriate tab. Any problems with the data? Go ahead.

The error appears after installing special programs (UEC)

Download the first program “Plugin for working with electronic signatures”. Unfortunately, it works smoothly only in Google Chrome— the popular Firefox does not respond to installation at all.
Restart the browser and allow the plugin to work.

It is at this moment that the majority are faced with the error in question “You do not have valid certificates” in State Services - the solution turns out to be idiotically simple:

We find the “Crypto-Pro” website (or another crypto provider, token) in a search engine and go to the resource.
Don’t forget to connect your own card reader to your PC (it’s better to do this before registering).
We are going through the registration procedure for "Crypto-Pro", then download the utility "CryptoPro UEC CSP".
After successful installation of the above-mentioned program, you will be prompted to install the plugin included in the kit - we agree.

In principle, all problems should end there, but for some they still remain - then we resort to extreme measures.

A separate point is the operating system. It also happens that on outdated operating systems (Windows XP, Vista, MAC OS) the EPC may malfunction and not work as expected. Try applying Latest updates and check the program itself for compliance with your OS version.

There are no valid certificates in the State Services - “severe” cases.

If all the above manipulations did not lead to a “happy ending”, there are only two options left - expired certificate or minor bugs in the browser. First, let's deal with the first one - this seems like an obvious mistake, but not everyone thinks of it when problems arise.

We remember or find out which company received the EPC.
We call the relevant organization to clarify the issue.

Is it simple? It is true - people are just used to looking for a catch in everything. Most likely, your certificate has simply expired or the company that provided it is experiencing temporary difficulties.

With the second option, everything is not much more complicated - you just need to clearly and correctly follow simple instructions:

Go to the browser settings (three dots on the right top corner, select from the list).
Scroll the window that opens to the end and open the item "Additional settings".
Looking for a section "Personal data", where we go to the “Content Settings” item.
Opening « Cookies» and enter the link to the site in the appropriate window.
Agree to all saves by clicking "Ready".

Important - make sure that the “Allow” checkbox appears opposite the entered link. Also make sure that the site is included in the trusted list.

In rare cases, you have to completely reinstall the corresponding programs on your PC and re-enter all the paths to the folders with certificates. We hope this article was useful to you - enjoy modern solutions business with pleasure!

Before starting work on the public services portal, configure workplace. The article describes step-by-step instruction to set up your workplace.

Step 1. Installation of CIPF

CIPF (means cryptographic protection information) is a program for encrypting information. Without cryptographic information protection electronic signature won't work.

Download the distribution kit on the CryptoPro website in the “Support” -> “Download Center” section. The section is available after registration. Which distribution to download depends on the version and bitness of the operating system.

CryptoPro is divided by operating system versions (Windows XP, Windows 7, etc.) and their bit depth (x64/x86).

Determine your operating system version to download the appropriate version " CryptoPro CSP».

IN latest versions The CryptoPro distribution automatically detects the bit depth and installs the necessary packages.

This manual covers the most popular OS, Windows 8.

How to determine the version and bitness of the OS?

Right-click on the “Computer” icon (on different operating systems - “My Computer” or “This Computer”) and select context menu"Properties".

A window with information about the operating system appeared on the screen.

Please note that the operating system installed on the computer is Windows system 8 Professional. The CryptoPro CSP 3.9 distribution is suitable.

Accept license agreement. Download the distribution.

Please note that the version of the CryptoPro CSP distribution kit matches the Windows OS.

OSWindows	CryptoProCSP
	CryptoPro CSP 3.6
	CryptoPro CSP 3.6
	CryptoPro CSP 3.6
	CryptoPro CSP 3.9
	CryptoPro 3.9 (4.0)

How to install the distribution?

Launch the distribution and click “Install”.

Install all software as a user with administrator rights.

Unboxing required packages and modules will happen automatically. After installing packages and modules, a window indicating successful installation will appear.

IN earlier versions"CryptoPro CSP" installation took place in several successive steps, in which a choice is made additional settings and entering the serial number. Now the installation procedure has been simplified to a minimum of steps.

The crypto protection tool has installed. The trial mode for 3 months was activated automatically. To increase the duration, enter serial number.

Order a cryptographic information protection tool

Step 2. Entering the serial number / Activating the license

To enter the serial number, go to the “Control Panel”, select the “System and Security” category, and then select the “CryptoPro CSP” program.

The “CryptoPro CSP” work area will appear on the screen.

Click the "Enter License..." button in the "License" section.

Enter your full name. user who plans to work on the computer, name of organization, serial number. It is indicated on the form of the purchased license.

Complete the license activation, click on the “OK” button.

On the “General” tab, the license validity period will change to the one specified in the license.

The work with CryptoPro CSP is finished; next time you will need CIPF to set up an electronic signature and install root certificates.

Step 3. Install a personal certificate

Go to the “Services” tab and in the “Certificates in the private key container” section, click the “View certificates in the container...” button.

A window will appear on the screen asking you to select a key container.

Click the "Browse" button to see the electronic signatures that are recorded on the secure media.

A window will appear asking you to select a key container.

If there is only one electronic signature on the medium, there will be no problems with selection.

If there are several entries and you do not know which electronic signature is needed, select the first entry in order and click “OK”. Then click the “Next” button.

Information about the selected electronic signature will open.

Have you determined that a different signature is needed? Click the Back button and choose a different signature.

Continue opening signature information until you find the one you want.

Found the signature you need? Click the "Install" button.

After successful installation of the personal certificate, a notification will appear on the screen. Click OK. Personal certificate installed.

Purchase an electronic signature for the State Services portal

Step 4. Installing the CA root certificate

To install the root certificate of the Certification Authority, click the “Properties” button. The electronic signature certificate will open

"ASP Electronic services» issues qualified electronic signatures from the Kaluga Astral certification center

On the General tab, you will see a message: “This certificate could not be verified by tracing it to a trusted certification authority.” To fix this, go to the Certification Path tab.

In the “Certification path” section, the chain from full name is indicated. manager to the publisher (certification authority).

To install the root certificate of a certification authority, double-click on it with the left mouse button. The electronic signature certificate window will open.

Click the "Install Certificate" button.

The Certificate Import Wizard will open, click Next.

Place the cursor in the “Place all certificates in the following store” item, click the “Browse” button.

A list of stores for installing certificates will open.

Now you are building a chain of trusted certificates, so select the “Trusted Root Certification Authorities” store with the “OK” button. Then click Next.

At the final stage, click the “Finish” button.

The installation of the certificate will begin.

The operating system will warn you about installing the certificate and ask you to confirm that you are the one installing the certificate.

A security warning will appear on the screen.

The security system cannot check the Certification Center of JSC Kaluga Astral, because Microsoft (the creators of the Windows OS line) is not aware of JSC Kaluga Astral. Don't worry and agree with the installation.

After installation root certificate, a window will appear on the screen notifying you that the installation was successful. Close it by clicking "OK".

Step 5: Setupinternet browser

Majority state portals work exclusively in Internet Explorer no lower than version 8.0. This is due to two reasons:

Internet Explorer is built into every Windows operating system.
Not all Internet browsers support working with ActiveX components, which are needed to perform cryptographic tasks on the Internet.

Internet Explorer icon

Step 6: Configure Trusted Hosts

Add addresses electronic platforms trusted so that the Internet browser can run all the necessary “scripts” and modules for working with cryptography.

Launch Internet Explorer and press the Alt button on your keyboard.

An action bar will appear at the top of the browser. Click the “Tools” -> “Browser Options” button on the panel.

The Internet Options window will open. Go to the "Security" tab.

Select the Trusted Sites zone and click the Sites button.

In the “Trusted Sites” window (at the bottom of it), uncheck the “Server verification (https:) is required for all sites in the zone.”

In the line “Add the following node to the zone:” enter the portal address https://*.gosuslugi.ru. Click Add.

Step 6: Configuring ActiveX Components

After adding nodes, enable ActiveX components.

In Internet Options, on the Security tab, select the Trusted Sites zone.

At the bottom of the window, in the “Security level for this zone” section, click on the “Other” button. A window will open with security settings for trusted sites.

In the "Access to data sources outside the domain" option in the "Miscellaneous" section, place the cursor in the "Enable" item.

In the "Block pop-up windows" option in the "Miscellaneous" section, move the cursor to the "Enable" option.

At the bottom of the parameters table there is a section “ ActiveX controls and connection modules." Place the cursors in the “Enable” items for all parameters in this section. Click OK and close everything open windows. Browser setup is complete.

Try logging into the government services portal. You will receive an error notification.

How to install the plugin?

To download the plugin distribution kit, follow the link: https://ds-plugin.gosuslugi.ru/plugin/upload/Index.spr plugin.

Download and install the plugin following the installation wizard.

Restart your Internet browser. Your workplace is ready, proceed to registration and/or work on the State Services portal.

But all this time the author never found a chance to test the newfangled electronic document in real conditions. Perhaps, as a medical insurance policy, the plastic card was shown at the clinic’s reception desk a couple of times, but that doesn’t count. And so, the opportunity presented itself.

Vacation is approaching, and I suddenly discovered that my passport will expire in just a couple of months. Instead of jostling in the queues of the Federal Migration Service and copying applications by hand, I decided to apply for it through the government services portal.

Registration

Of course, you won’t be able to submit any application right away; although the services are modern and electronic, they are still state-owned. Therefore, you first need to register on the portal. This can be done in several ways, but we are interested in the one that appears with the receipt of the UEC.

Click the registration button, enter your last name, first name and phone number. We are waiting for confirmation in the form of SMS to specified number and slowly begin to fill out the form.

The system tells us where and how many numbers and letters there should be. The information is immediately checked in the online databases of various departments. When all the data has already been filled out, you are informed that you only have to wait for verification in several departments, which usually takes a couple of minutes, but can take five days. Fortunately, SMS confirmation comes in five minutes. In general, informatization in all its greatness.

This is where the moment of realization comes - register something You can do it in a couple of minutes, but how do you confirm your account?

The government services portal offers three options to choose from: wait for the confirmation code that will come to you by mail (“Russian Post”, to be very precise) in a week, receive it in person at Rostelecom on the street. Republic (across the road from the drama theater) or use the electronic digital signature UEC.

"Hooray!" - we think, take out a card and face the first problem. Where should I put it?

Buying a smart card reader

Not all card readers are suitable for UEC; you were probably already warned about this when you received the card. There is a certain list of devices that are guaranteed to work with the government services portal, and there is a list of stores where you can buy them.

I couldn’t immediately remember where exactly the reader I needed was sold, how much it cost, and the name of the company that produced it. For luck I went to the store DNS networks, where the required device has never been heard of. You were lucky in Arsenal+; they found a Ginzzu reader there for almost 400 rubles.

Judging by the inscriptions on the reader box, no software no need to install, the device will automatically determine your operating system. This is true, but only partly - surprises await you the moment you go to the government services website and try to log in using the UEC.

Installing plugins and programs

The wonderful message “Error: plugin not installed” is unlikely to mean anything to pensioners who have just completed advanced courses computer literacy"Expanding horizons." Advanced users will immediately realize that we are talking about some kind of plugin.

Questions:

Which certificate is right for the job?
How to buy / Under what tariff can I purchase a certificate?
How to set up a workplace.
Features of the resource.
Technical support contacts. Questions and errors while working.

Solution:

To work on the portal, you need a qualified electronic signature (CES), with the exception of the CES for SMEV EP-OV.

CloudCEP for working on the State Services portal NOT suitable because cloud certificates only work in Contour services.
If there is a certificate for Kontur.Extern or another Kontur product issued to the manager (i.e. a CEP issued to a legal entity) - from a technical point of view it will be suitable, but we do not guarantee the operation of the KEP for CE and other Kontur products anywhere - or, except for Contour services, therefore we recommend using the CEP UC Portal to work.
The portal has the ability to work with certificates recorded on JaCarta (that is, CEP for EGAIS)
Registration of legal entities in Unified system identification and authentication (USIA) is not possible if the organization does not have a OGRN. Since, when registering with the Unified Identification and Logistics Agency, the data posted in the Unified State Register of Legal Entities is checked. That is, non-resident organizations (representatives of foreign organizations) will not be able to work on the portal due to the presence of a “zero” OGRN in the certificate.
Registration account A legal entity/individual with a certificate indicating a “zero” SNILS is not possible.

2. If there is no certificate and you need to purchase it.

A suitable certificate is issued within the tariffs:

Qualified Classic
Electronic signature 2.0
Qualified Rosreestr
Qualified FCS
Qualified Rosaccrediatsiya
Qualified SMEV (EP-SP (indicating the individual))
Qualified GIS GMP (EP-SP (indicating the individual))
Qualified electronic signature for EGAIS

3. To set up a workplace, you can use the sertum.ru web disk, the profile “Set up for work on the portals of State Procurement and State Services” or https://install.kontur.ru/zakupki or the CA profile diagnostics https://help.kontur. ru/uc . During the diagnostics, in addition to the recommended fixes, you must select the “Plugin for the Public Services Portal” component.

Components and settings required to work on the portal:

Plugin for the State Services Portal (can be downloaded from the government services website)
Cryptoprovider CryptoPRO CSP (this item is not needed if you are working with JaCarta SE for EGAIS)
Add the address https://esia.gosuslugi.ru to the list of Trusted sites (only for Internet Explorer browser)
You may need to Enable/allow access to the plugin according to the recommendations in the document.

The Portal plugin (2.0.6 and below) only works in browsers that support ActiveX and NPAPI, i.e. it will not work in EDGE, Google Chrome 45+, or Opera38+, Yandex Browser 16.7+.

The public services portal itself Not works in Internet Explorer 8.

Plugin 3.0.0.0 works in browsers: Internet Explorer; Google Chrome version 29.0 and higher; Mozilla Firefox versions 50.0 and higher; Safari; Satellite.

For the plugin to work in Google Chrome, you will need the .

If errors occur with the plugin, you can use the instructions from the portal: https://www.gosuslugi.ru/help/faq/yuridicheskim_licam/2744

The new plugin started asking for a PIN code. When you enter the standard one, a message appears that the PIN code is incorrect. Solution:

Enter any set of letters/numbers and click "Continue"

The CryptoPro CSP window will appear with a message that the password is incorrect

Enter the correct PIN code/password (if not used, leave the window blank) and click “OK”.

4. Features of the Portal and common situations related to obtaining a certificate and registration:

If you need to register as entity and, accordingly, to receive services for a legal entity - you need to obtain a CEP for CA services for a legal entity for the head of the organization indicated in the Unified State Register of Legal Entities as a person who has the right to act without a power of attorney on behalf of the legal entity.

Note! If an organization is registered for the first time on the State Services Portal, the EPC must be issued to the head of the organization indicated in the Unified State Register of Legal Entities as a person who has the right to act without a power of attorney on behalf of the legal entity.

If the organization has a branch structure, the initial registration with its own CEP at the State Services must be carried out by the head of the parent organization.
If a management company acts on behalf of the subscriber’s organization as the sole executive body, then it is necessary to obtain a certificate indicating the following data:
an individual - the head of the Management Company, a legal entity - a managed company

If you need to register as an individual/individual entrepreneur and receive services for an individual/individual entrepreneur, then he needs to obtain a CEP for CA services for an individual/individual entrepreneur, respectively.