Incorrect EDS password. Password for the electronic signature certificate. Forgot your EDS password. How to update the key

When generating requests for a certificate and keys, the program "Workstation for key generation" exits at the end, and this program (more precisely, Crypto Pro) prompts you to enter a password (Fig. 8). Promonizes, but does not spoil. If the fields are left blank, the password is not set. It’s incredibly easy for other people to think differently and, of course, to fill the fields. Everything would be fine, but then they conveniently forget what password they entered during generation, and when they first have to sign it, people fall into a stupor. Then, of course, there’s a call to the Treasury asking for more help.

Today, in this article, I will tell you how you can remove or change your password. There are two options for entering the password. The first - if the user remembers the old password, the other - if he doesn’t remember. Let's finish first. As I already guessed at the beginning of the article, the Crypto Pro program provides the password for the key container. Let's launch it by logging into the computer control panel (Fig. 1):

So that you have the same window as mine, in the upper right corner of the window, select the “Friendly icons” view mode. Launch Crypto Pro, a window opens (Fig. 2):

Click on the "Service" tab to finish it (Fig. 3):

At the bottom of the window there is a button labeled “Change password.” Let's press on it and rub it until the end of the day (Fig. 4):

Here we need to select the key container on the “Look” button. First of all, don’t forget to insert a flash drive into your computer or something else that holds your keys. When you press the button, a window will open (Fig. 5):

We select the key we need and emboss “OK”. The window will now open (Fig. 6):

Let's reconfigure so that we can select the required private key container, and press the "Done" button, after which the password entry window will open (Fig. 7):

Here you need to enter the password that you entered when generating keys and applying for a certificate in the program "Workstation for generating keys." Obviously, you remember a lot :). Enter, stamp “OK”, there is no need to check the “Remember password” checkbox, and it will appear in the window for entering a new password (Fig. 8):

Here you can not only change the password, but also delete it by leaving the fields empty. If you want to change your password, then create one and enter your password.

By the way, if the customer remembers the old password for the container, we’ve got it together. Let's try to remove the password from the container, if you have successfully forgotten it. Here the csptest.exe utility will help us, which can be used to install the Crypto Pro program starting with version 3.6. If you have this program installed, then you have this program installed, then C: Program Files (x86) Crypto Pro CSP (I have a 64-bit OS, if you have a 32-bit OS, then (x86 ) Dorosa will have a day). It must be launched from the command row.

To open the command row in Windows 7, you need to navigate to the required folders through Explorer, press the Shift key on your keyboard, and then right-click on the required folder. Everything is illustrated below (Fig. 9):

In the context menu, you need to select “Open command window” with the left mouse button. In the command window you need to enter the following command right away: without square arms, initially. This command will show us all available containers of private keys in the form: [\\.\I'm carrying\I'm container]. Once we know what our private key container is called, we need to enter another command: . Znovu without square arms. At the bottom you will need to enter the name of your private key container, as you learned earlier. Enter paws OBOV'YAZKOVO. This command will show us the saved password, once you know it, we can quickly use the first method to find and change the password.

All my guesses were revealed by me, so see Figure 10:

I would like to immediately point out that I was not able to “discover” the password using this method (the red row in Fig. 10). But I think what is connected with this is that the container that I ordered from another team was removed by the way of copying from the nose behind the additional menu item of the Crypto Pro program “Copy” (Fig. 3). The generation of private keys was carried out on another site, no longer accessible. Ale method robotnik.

If you are not able to remove the password in this way, you will lose the only way to click on the current certificate and generate new keys and a new application for the certificate. And if you are serious about password protection, then you will not “forget” your passwords. That's all. Good luck!

And finally... Since you were honored with this article and you learned something new from it for yourself, then you can again calculate your contribution in pennies. The sum may be whatever it is. This does not require you to do anything, everything is voluntary. If you still want to support my site, then click on the “Subscribe” button so you can pay less. You will be redirected to the side of my site, where you can exchange even a penny for a piece of money. In this case, a gift is being sent to you. After successfully transferring pennies, you will be able to attract him.

The Jacarta PKI/DERZHSTANDARD device is blocked when numerous attempts are made to enter an incorrect PIN code. In this case, connections from the FSRAR server are wasted, and the invoice data does not reach your cloud system. How can you quickly unlock the key and update the robot with ADAIS?

The following passwords are installed on all new devices:

To remove the blocking, the Jacarta Unified Client program must be installed on your computer. Since the adjustment and installation of ADAIS was carried out by our representatives, then this program is already with you.

Launch the program and check when the single client window displays information about the Jacarta PKI/GOST.

GOST blocking

The DERZHSTANDARD section of records has a KEP certificate, in the center, which will certify. Be respectful- it is not possible to delete components from this section. Once done, you will have to go back to the center to release the key.

To unlock the GOST PIN code, in the top menu “Operations with the program” select the first item “Unblock the PIN code of the customer”. A notification will appear on the screen about when the blocking is removed and the milk sample dispenser resets.

Click “OK” and in the window that opens, enter Jacarta administrator PIN code GOST 1234567890. After resetting the dispenser, enter the standard PIN code for the customer GOST 0987654321.

Important: this procedure will help you reset your password, but not change your forgotten password to a new one. If you have changed the GOST password, installed it behind the scenes, or forgotten it, you will have to carry out initialization and re-write the key in the center for confirmation.

PKI blocking

The PKI container has an RSA key recorded, which is generated in a special account on the website egais.ru. If you lose your PIN code, this partition may be initialized (cleansed), so you can re-record the key independently and cost-free, without transferring to the center, which will be the result.

Option 1:

Vikorists use standard settings, the PIN code of the token is memorized by the system. The safest option. To do this, the first time you enter your PIN code, you need to check the “Remember PIN code” checkbox:

In this case, on this computer, the PIN code will no longer be required; to sign, you will simply need to select the certificate with which you are signing once. The PIN code will be remembered for all actions with the EP until it is set up in Crypto Pro-Service - Passwords of private keys - Delete forgotten passwords... they will not be deleted.

Option 2:

The mode for caching containers of private keys is supported.

When setting up Crypto, it is necessary to disable the key storage and caching services. Changing Crypto settings Make sure you log in as an administrator with administrator rights.

If it is enabled, the PIN code must be entered when entering the Maidan, otherwise the PIN code will not be entered until the browser is restarted. If you press the “Exit” button on the Maidan, and then go to it again under the same password, without closing the browser, then the PIN code will not be required. If you close the browser and open it again, or go to the Maidan in another browser, the PIN code will be asked (verified in Google Chrome, Internet Explorer).
Zhidno "ZhТЯІ.00087-01 92 01. Instructions from the vikoristan. Windows.pdf" - Installation of parameters without protection.43:"When saving keys from the key saving service, the caching of containers of private keys may become cached. Caching occurs due to the fact that the keys are lost in the service's memory. The cached key is available and after obtaining a key from the reader, as well as after completing the work , having stored this key with programs: every key from the cache is available, any program that works under the same cloud record, and in addition, placing this key in the cache All keys from the cache are available until the completion of the key saving service. v. early key, contained in the cache.
Container caching allows you to increase the productivity of add-ons for increased access to the private key, because The key must be read only once.
The size of the cache determines the number of keys that can be stored in memory at a time.
To reduce cashing, you need to place an ensign in the Remove cashing field. You also need to set the cache size in the appropriate input field."

In order for these modes to be enabled, it is necessary to install the “Key Saving Service” component when installing Crypto Pro on your computer; this service is not installed after installation.

Option 3: (This option is not recommended during the hour of work on the UTP, since within an hour of signing an electronic agreement you can sign up to 100 files)

Vikoristovyvayutsya standard adjustment, the highest level of safety. In this window, at the time of signing the contractual documents, a window will be displayed to enter the CIN code for signing the document (agreement, supplements, specifications, etc.).

On this side, the power supply is located, which comes on during the operation of the EDS. Select the food you want, open it and carefully follow the instructions.

WOscripts.com - JavaScript - Contractible Headers Script

1. Retrieving the EDS

To obtain a digital digital signature, you can fill out your registration card on our website (under the section “Retrieving a digital digital signature”), or on that site where you found out about us, or go to the nearest CA.

When transferring to the CA, the following documents are required:

documents to identify the person (standard – a copy of the passport);

documents that confirm the establishment of a legal entity (certificate of IPN, IDRL, etc.);

instructions to the Federal District regarding the assignment of his duties to carry out important activities within the organization;

when the Unified Digital Signature is withdrawn from the kerivnik, there is an order about the recognition of the posad (a decision about the murder).

Additional information required by the CA in accordance with its regulations is not regulated by law. In practice, the CA maintains its own list of documents for obtaining a digital signature.

2. Does not process EDS

1. The private key on the specified container does not match the private key in the certificate. We check all closed containers; it is possible that the wrong one was selected. If you do not know the required container, you need to go to the CA to re-issue the EDS

2. The certificate is not valid. Install the digital digital signature following the instructions of the CA.

3. There is no trust in this certificate. You need to install the root certificate of your CA following the instructions. For this purpose, you can visit the AETP website or find out on digital media what has been received from the EDS.

4. The CryptoPro action line has ended. It is necessary to enter the license key of the CryptoPro program from the documents that come with your CA's digital digital signature.

5. Capicom is not installed Download Capicom and install it when the browser is closed and set up the browser following the instructions of the TP you plan to use.

6. No valid valid certificate was found (or the certificate selection is not displayed)

Install the digital digital signature following the instructions of the CA

Clarify the terms of the certificate (it may have ended)

Install the root certificate of your CA

Install CAPICOM when the browser is closed

3. Why is the credibility of the evil based on the details of the EDS?

In the opinion of most fakhivts, it is impossible to refine (split) the EDS - for which a large amount of calculation is required, which cannot be implemented at the current level of computational technology and mathematics in a pleasant hour, then for now The information contained in the signed document remains relevant.

Additional security in this detail is ensured by certification of the private key signature center.

4. Exit the EDS user with administrator rights. Yak buti?

5. Forgot your EDS password. How do I renew the key?

Standard passwords: Rutoken 12345678, Etoken 1234567890

If you have forgotten your Rutoken password, you need to quickly access the Rutoken console, which is installed simultaneously with the driver and is available from the Server Panel (Windows). It is necessary to unlock the token (reset the number of incorrectly entered passwords to 0).

If you are carrying a token, go to the CA.

6. How to digitally sign a word file

The document, created by Microsoft Office Word, is signed by the UDS, the private key of which is generated by the UDS no earlier than version Crypto-Pro 3.0. First you sign, you need to check the Crypto-Pro kernel (Start / Control Panel / Crypto-Pro / Backstage. The Crypto-Pro version will be indicated on the tab and then there will be “build” - this is the kernel). It is necessary to install the remaining folded product.

Now we sign the document itself

The document will immediately result in savings. From the menu, select Service/Options/Security/Digital signatures/certificate, click “Ok” and sign the document. If the certificate is not registered in the Particulars, the document cannot be signed. Save the document. Select Office button / Prepare / Add a digital signature / Write down the document signature (for example, accreditation) / Select signature / Sign. The message “This document will contain a digital signature” will appear. A red emblem will appear on the panel.

7. Should we cancel the EDS without costs?

The EDS can be costlessly removed from the holdings. organizations of the Federal Treasury

8. How can a person cancel an electronic signature?

A physical person can also remove the EDS. At this time, this service is most needed for the participation of individuals in trading on electronic trading platforms for bankruptcy (resales of the bankrupt market). To obtain a digital digital signature, individuals need to go to the CA, carrying with them:

Passport of a citizen of the Russian Federation;

Certificate of IPN assignment.

9. What is the universal digital digital signature for foreign banking?

A universal digital signature, which would be used for electronic trading (both national and commercial) and for which additional information could be submitted, is not currently available.

10. Where to go through robotic training using the EDS?

You can get started at the main center of the Association of Electronic Trading Maidanchiki. Seminars are held regularly in most subjects of the Russian Federation.

11. How many days does the EDS vibrate?

12. Is it possible to transfer your digital digital signature to a colleague during the leave hour?

No. The evidence, according to the Federal Law on the Unified Digital Signature, is personally borne by the government.

13. Help! Having downloaded the signature from the flash drive, what should you do?

Return to the CA to update and re-issue the EDS

14. If the agreement will be valid if I sign it today (my EDS term will end tomorrow), and my partner will be valid this day (at the time of signing by my partner, my signature will no longer be valid, unless I sign, are you still working)?

If the document is signed in accordance with all the rules and terms of the EDS at the time of signing, the agreement will not be valid, but it will be impossible to make any further changes after signing.

15. How can you obtain digital signatures, releases for tax information, on trading platforms?

No. EDS for filing purposes is not suitable for electronic trading.

16. How to remove the EDS?

The EDS specifically removes the owner of the certificate

17. How can I transfer a signature from a disk to a flash drive?

Copy of the private key container:

To copy the private key container, go to Start – Programs – CryptoPro – CryptoPro CSP and go to the Tools tab. Click the Copy button.

The system will display the "Copy private key container" window

In which window you need to fill in the entry field: Key container name – enter manually or select from the list by clicking the Look button

Search options:

The entered name indicates the key container - the remixer is installed in the position of the Computer or Computer, depending on which container is being moved;

Select CSP to search for key containers - the required crypto provider (CSP) is selected from the registered list.

You can also select a container that matches the certificate installed in the system. For which, instead of clicking the Look button, you need to click By certificate and select from the list of certificates installed in the account manager’s account, or if you have administrator rights, a local computer, that certificate, or a container of any required type iyuvati;

If a password has been set for access to the private key, the system will ask you to enter it. Enter the password and click OK.

The system will display the “Copy private key container” window, in which you need to enter the name of the new key container and install the relay.

After entering, click Done. The system will display a window in which you need to select the name of the copied container.

Insert your nose into the reader and press the OK button. The system will display a window for setting a password to access the private key. Enter a password, confirm it, and, if necessary, set a password. Remember the password (if this sign is set, the password is saved in a special storage on the local computer and when saved to a private key, the password is automatically read from it wow, this is a monstrous thing, and not introduced by koristuvach) .

If you have received the material, you can post the message on new social networks:

Hello everyone, today I will guess the password for eToken and Rutoken. For the most part, I’m sorry, but sometimes I forget them. Let’s also look at how Rutoken differs from eToken, since we don’t know everything, but what we know is even worse. You can also change this password whenever you need it.

First of all, we need to explain to you that eToken and Rutoken are special flash carriers that securely save a signature certificate or encrypt (private key), which is equivalent to the paper signature of a person and everyone The area on the right is protected by a password. Virologists issue tokens with a standard password:

The identity of etoken and rutoken

And so, we explained why everyone on the right is being victorious, now let’s talk about the validity of etoken versus rutoken. First of all, rutoken has a red color, and etoken has a red color. In other words, they have different memory systems:

• Rutoken's memory capacity varies from 32 kb to 126 kb.
• This token has a maximum volume of 72 KB, but you can only use up to 47 KB.

I would like to immediately point out that in CryptoPRO, offenses are carried out in the same way

A table has been created for the values ​​of etoken and rutoken

Etoken password for registration

I would like to know that if you received a token from any security center, then the password has been changed and you need to clarify it with the technical support that generated it. Please be aware that if you enter the wrong combination more than once, the token may be blocked.

These codes are still called PIN codes, so don’t be surprised if you hear the wording of the Rutoken PIN behind the words, the techies have their own language.

1. for eToken – 1234567890
2. for Rutoken and Rutoken EDS:

• koristuvach: 12345678
• administrator: 87654321

Everyone now knows what the etoken password is, I honestly completely mislead them. I want to keep them simple, but for changing the information is not very important, and the memory reacts in its own way. Change the program and create a new password for Etoken PKI Client or SafeNet Authentication Client.