Cryptopro license serial number 3.6. Setting keys in the registry

Cryptopro license serial number 3.6.  Setting keys in the registry
Cryptopro license serial number 3.6. Setting keys in the registry

To check the validity period of your CryptoPro license, do the following:

    Open the CryptoPro PKI program: Start - Programs - Crypto-Pro - CryptoPro PKI.

    In the window that appears, on the left side, select “License Management”, then select “CryptoPro CSP”.

    On the right side of the window there will be information about the license validity period (unlimited or until specific date) and the CryptoPro version (for use of the IPC "GARANT Electronic Express" and the distribution kit " Electronic trading"requires version 3.6).

How to check the validity period of a CryptoPro CSP license?

CIPF CryptoPro CSP

CIPF- facilities cryptographic protection information. In the context of our company’s work, this is called software"CryptoPro CSP" from the company "Crypto-Pro" LLC, which is used to carry out secure legally significant document flow.

CIPF distribution kit "CryptoPro CSP", according to regulatory documentation, for commercial use must be transmitted only to electronic media, excluding transmission via public networks.
The installation kit "Electronic trading" and the IPK "GARANT Electronic Express" includes the distribution kit of the CIPF "CryptoPro CSP", version 3.6. If the Client has a version of CryptoPro installed that is different from 3.6.1, it is recommended to install the version from the installation kit, because IPC has not been tested with versions lower than 3.6. In addition, there are a number of reasons why it is recommended to use CryptoPro and the license for this software product from the installation kit:

Clients can often find a CryptoPro license with a narrow scope of application “for reporting in the Kontur/Tensor/etc system...”;

There may be restrictions on the period of use of a license previously sold to the client;

According to the CIPF developer, cases of pirated distribution of CryptoPro by some operators have become more frequent.

Compatibility

The CryptoPro distribution kit, which is part of the "GARANT Electronic Express" and "GARANT Electronic Express Trading" distribution kits, is compatible with the following operating systems:

    Windows 2000 (with SP4),

    Windows XP (with SP2),

    Windows Vista(with SP1 + Microsoft patch 6.0-KB983557).

To work with Windows 7, you need the CryptoPro CSP v.3.6 R2 distribution, you can download it

The distribution is also compatible with the following software:

How does signing using MS Office differ from signing using a third-party utility?

Many trading platforms They use MS Office for secure document management, and in this regard it is necessary to bring some clarity. Office Microsoft applications sign documents differently than a third-party encryption program (for example CryptoARM) does. When signing documents using office tools, the digital signature is added directly to the file attributes, and after that it can only be decrypted in a similar way. Third party programs To encrypt, simply add a digital signature to the file. Therefore, these formats are not interchangeable.

How to determine the version of CryptoPro?Description

The CIPF distribution kit "CryptoPro CSP" is provided in version no lower than 3.6, since this version is compatible with information readers such as Rutoken. To check the version of CryptoPro CSP on the Client’s computer, use the example below.

License Definition

This can be done in the following way:

    Click "Start\Control Panel\CryptoPro CSP". The CryptoPro version will be indicated at the top on the “General” tab.

    Click "Start\All Programs\CryptoPro\CryptoPro PKI". Select "Manage Licenses". The program version will be indicated opposite the CryptoPro icon.


You can determine the version of CryptoPro to install by the serial number (license number):

    If serial number contains 10 characters and there is a separate license activation key, then this is CryptoPro CSP v.2

    If the serial number consists of 25 characters (5 groups of 5 characters), then this is CryptoPro CSP v.3

Serial number difference for version 3:

    The serial number for version 3.0 starts with CP300

    Serial number for version 3.6 starts with 36

There are exceptions for these two versions. In particular, some serial numbers issued to Kontur subscribers may not begin with either CP300 or 36.

Note

The need to determine the CIPF version may arise when the Client transfers the CIPF to another workplace (new computer). What version of CryptoPro was on the old one? Unknown. And the serial number from one version does not match another.

Entering the serial number of the CIPF CryptoPro CSP

Description

We remind you that you must enter the serial number - without entering a license, CryptoPro CSP will only work for 90 days! Depending on the version of the CryptoPro CSP distribution kit, the product serial number can be entered both during the installation process (one of the software installation steps) and after installation. If you skipped the registration step during the installation process, return to it immediately after installation is complete and your computer has restarted. detailed information information about the necessary actions is indicated in the user manual.

Solution

The product serial number is entered through the CryptoPro PKI MMC snap-in.

To enter a license, go to the "Start" menu -> "All Programs" -> "CryptoPro" -> "CryptoPro PKI"

On the left side of the table, expand the "License Management" directory, then click right click mouse on "CryptoPro CSP" -> "All tasks" -> "Enter serial number"

Provide user information and enter the serial number that you received when connecting to GARANT Electronic Express.

Note

Save the entered serial number. Remember that it is impossible to “pull” it out of the registered CIPF!

Is it possible to have several CIPFs on a computer at the same time?

Description

CIPF does not “see” its keys. At the same time, they can be successfully viewed on another computer. Other errors/problems arise when working with CIPF.

Cause

Several different CIPFs are installed on the computer at the same time, for example, CryptoPro CSP and Signal-COM CSP. Simultaneous installation of several CIPFs on one PC is incorrect and leads to errors in working with digital signatures.

Solution

    Install only one of the possible ones for which EDS keys are made.

How to set up key information readers in CryptoPRO CSP?

Configuring readers in CIPF is required so that the certificate is read from exactly the container that is configured in CIPF.

Solution

Installation of the Rutoken key information reader

To install a key information reader, you must select the “Install key information readers” menu item in the boot menu of the disk.

The Rutoken reader is used as the main device for reading key information.

To install this reader, run the CryptoPro CSP program. Instructions for launching are in the article How to launch CryptoPRO CSP? . In the window that opens, go to the “Equipment” tab and click on the “Configure readers” button. As a result, the “Manage Readers” window will open with a list of installed readers.

In this window, for the convenience of viewing installed readers, you should delete the “All smart card readers” reader. To do this, select this reader with the cursor, click the “Delete” button and in the next window click the “Yes” button. After that, to install a reader for the Rutoken device, click the “Add” button.

In the next window, select the “Activ Co.” reader from the list of available readers. ruToken 0" and click the "Next" button.

A window will open indicating the reader name “Activ Co.” RuToken 0". It is not recommended to change the reader name.

and in the next window - the “Done” button.

After completing the actions “Activ Co. ruToken 0" will appear in the list of installed readers.

Note

Installation of Rutoken readers begins with Activ Co. RuToken 0”, if the client has 2 Rutoken devices, then “Activ Co.” must be added to the readers. RuToken 0" and "Activ Co. RuToken 1", and so on depending on the number of Rutoken readers.

In some cases, when you have installed on your computer operating system Windows Vista or Windows 7, the "Delete" and "Add" buttons may not be active. In order to make them active, you need to run the CryptoPro CSP program with administrator rights.

If the client personal certificate was written not to the Rutoken roottoken, but to the registry or to a floppy disk, then after clicking on the “Add” button, you must select the medium where the container was recorded private key.

Setting keys in the registry

Description

System Registry, like others key media, can act as a storage and reader of secret information about keys.

pros

    storing keys in the registry eliminates the need to insert the media into the computer every time you send reports and receive response documents;

    The service life of the registry as a carrier of secret information is unlimited.

Minuses

    when you reinstall (or restore) the operating system on this computer, all information about your secret keys will be lost forever. Always take this point into account when installing keys in the Registry, and keep the media with the original keys!

Solution

To work with system registry Administrator rights are required. Make sure you have them.

Before using the Registry:

    Check whether it is installed in CIPF as a reader. In most cases, it is installed automatically during the CIPF installation process.

    If not installed (this is possible if you use CryptoPro CSP versions 3.0 and below), add it to the list of readers.

Note

    In the "Welcome to the Rutoken Driver Installer" window, click the "Next >" button.

    In the "Driver Maintenance" window, select the installation or relocation and click the "Next >" button.

    Confirm the Installation or reinstallation of Rutoken Drivers by clicking the "Install" button.


    After installation is complete, click "Finish"

Note

After installation, you need to restart your computer.

Problems installing Rutoken drivers

When I try to install drivers, a root token appears the following type error (The problem is still valid on Windows XP)


This error caused by a failure in the winscard.dll system library, which is located in the c:\WINDOWS\system32\ folder.

Since the file was changed for some reason, you MUST check your system for viruses!!!

Then try renaming this library - for example call it winscard1.dll. After renaming, you should reboot the system.

If there is an intact copy of the renamed file in the system library cache, it will be restored automatically and the Rutoken drivers can be installed.

If the error still appears, then solve this problem Can reinstall service pack or install service pack 3 (if SP2 is installed).

Key container

Key container- this is an area on removable media (floppy disk or RuToken) or in the computer registry in which your private key is stored. It is generated automatically when you submit a request for a personal certificate and is your unique digital signature. The personal certificate you received without the corresponding private key is invalid. Attention, the key container cannot be restored. We strongly recommend that you make a backup copy.

As key container you can use the computer registry, 3.5-inch floppy disk, USB drive and RuToken.

Copying a Key Container

To carry out the procedure for copying a key container, open the properties of CryptoPro: Start->Settings->Control Panel->CryptoProCSP. Go to tab Service and press the button Copy container.

If you have purchased a License for the right to use software CryptoPro CSP, then you saw license agreement in paper form (A4 format). Please prepare it - you will need it soon.

Step 1.

Before you begin installing the program, we recommend checking whether you have installed old version CryptoPro CSP. You can do this in the following way:

1. Go to “Start” - “Control Panel” (or “Start” - “Settings” - “Control Panel”);
2. In the window that opens, find the “CryptoPro CSP” snap-in.

If you not found“CryptoPro CSP” snap-in, then proceed to Step 2.

If this equipment is, then run it and check the version of the installed program (the inscription “Product Version”). If the program version is higher 4.0.9963 , then you can proceed to install the following programs.
Attention! For normal operation with a qualified electronic signature, the minimum required version of the program is - 4.0.9963. Therefore, if the version of the program installed on you below4.0.9963 , follow the next step of the instructions.

Step 2.
To install the CryptoPro CSP program version 4.0.9963 download its distribution from the official website of the developer - the Crypto-Pro Company. Go to top menu to the "Downloads" section and select "CryptoPro CSP" from the list. To download the program distribution, you must register on the site (developer requirement).

Download the distribution file CSPsetup.exe. This file is an installer new version program and an update tool for the old version.

Step 3.

Run CSPsetup.exe and follow the installation wizard prompts.
At one of the installation steps, enter the program serial number (from the paper license form).

Step 4.
Wait until the installation of the program is completed, and then restart your computer.

If you have already installed the program in demo mode, or the annual license for the CryptoPro CSP program has expired, then to activate a new serial number you must perform the following steps:

1. Launch the program "CryptoPro CSP": to do this you need to go to “Start” - “Programs” (or “All programs”) - “CRYPTO PRO” - “CryptoPro CSP”.

2. In the window that opens, select the “General” tab and click on the “Enter license” button

3. Enter the requested data (user, organization and serial number) and click on "OK"


Activation of the program is completed.

In order to view the CryptoPro CSP serial number entered earlier, you must:

1. Open the registry: Start - Run - regedit
2. Find the required directory: HKEY_LOCAL_MACHINE - SOFTWARE - Microsoft - Windows - CurrentVersion - Installer - UserData - S-1-5-18 - Products - 05480A45343B0B0429E4860F13549069 - InstallProperties.
for Windows 8 and higher: HKEY_LOCAL_MACHINE - SOFTWARE - Microsoft - Windows - CurrentVersion - Installer - UserData - S-1-5-18 - Products - 7AB5E7046046FB044ACD63458B5F481C - InstallProperties.
3. Find the ProductID line - this is the serial number

In connection with the transition to a new national standard for the formation and verification electronic signature GOST R 34.10-2012 recommends updating your CryptoPro CSP Licenses versions 3.6 and 3.9 in advance. to current ones, since these versions do not support the new national standard GOST R 34.10-2012, which is mandatory from January 1, 2019.

To check the need to update the CryptoPro CSP License, run the CryptoPro CSP program. To do this, go to “Start” -> “Programs” (or “All Programs”) -> “CRYPTO-PRO” -> “CryptoPro CSP”.

In the window that opens, select the “General” tab, pay attention to the product version and license expiration date:

If the version of the CryptoPro CSP program installed on your computer is 4.0 or 5.0, and the license validity period is “Permanent”, then everything is in order, you are ready to switch to a new cryptographic standard.

If the “Validity period” line indicates date or word "Expired", then you need to purchase a license and enter the serial number.

If in the “Validity Period” line you see “Permanent”, but the version of CryptoPro CSP begins with 3.6... or 3.9..., then you need to purchase a License to update the version of CryptoPro CSP, update the program on your computer to current version and enter the serial number.

Good afternoon, dear readers and guests of the blog, today we continue to administer the crypto protection program cryptopro csp 4.0, last time we solved the problem "installer service could not be accessed" and blue screen with error 800B0001. Today we are faced with the task of how to know license key in the installed Cryptopro csp 4.0, for example, on Windows 10. Previously, everything was simple, I went to the special “License Management” snap-in and that’s it, I saw it right away, in the fourth version, the developers complicated everything, but we already advanced users computers, and we can easily bypass this.

The most effective method to determine the cryptopro csp 4.0 license key code in Windows is through the Windows registry. It contains absolutely all information about everyone installed programs, the registry can be compared to a catalyzed library, where everything is on the shelves. Open regedit and find the section there

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\

In this section there will be many folders with unclear names in the form of numbers and letters in a chaotic sequence. Below you need to find the following values:

  • 05480A45343B0B0429E4860F13549069\InstallProperties - this is cryptopro 3.9
  • 7AB5E7046046FB044ACD63458B5F481C\InstallProperties - this is cryptopro 4

On the right side, you need to find the ProductID line, its value is the cryptopro license key, you can copy it and give it to another employee or reinstall the program on another computer using it.

I hope the article was useful to you and you have an even better understanding of how the Windows operating system functions and works.