How to install a certificate in cryptopro from a flash drive

Electron-digital signatures (EDS) have long and firmly entered the use of both government agencies and private firms. The technology is implemented through security certificates, both common to the organization and personal. The latter is most often stored on flash drives, which imposes some restrictions. Today we will tell you how to install such certificates from flash media to a computer.

Why do you need to install certificates for a PC and how to do it

Despite its reliability, flash drives can also fail. In addition, it is not always convenient to insert and remove the drive for work, especially for a short time. Certificate from the carrier-key can be installed on the work machine to avoid these problems.

The procedure depends on the CSP cryptopro version, which is used on your machine: For the latest versions, method 1 is suitable for older - Method 2. The last, by the way, more versatile.

This method is the most common, but in some variants of certificates to use it impossible.

Method 2: Manual installation method

Outdated cryptopro versions support only the manual installation of a personal certificate. In addition, in some cases, the latest versions of software can take such a file to work through the import utility built into the Cryptopro.

1. First of all, make sure that the flash drive that is used as a key is present a certificate file in CER format.



2. Open the CPSP cryptopro by described in the method 1, but this time choosing the installation of certificates ..



3. The "Personal Certificate Installation Wizard" opens. Go to the selection of the CER file location.

   

   Select your USB flash drive and a certificate folder (as a rule, such documents are located in the directory with the generated encryption keys).

   

   Making sure that the file is recognized, click "Next".



4. At the next stage, browse the properties of the certificate to make sure that the choice is correct. Checking, press "Next".



5. Further actions - Specify the container of the key of your CER file. Click on the appropriate button.

   

   In the pop-up window, select the location you need.

   

   Returning to the import utility, press the "Next" again.



6. Next, you need to select the repository of the EDS imported file. Click "Review".

   

   Since the certificate is personal, then you need to mark the appropriate folder.

   

   ATTENTION: If you use this method on the newest Cryptopro, do not forget to celebrate item "Set the certificate (certificate chain) to the container"!

   Click "Next".

7. Complete work with the import utility.



8. We are going to replace the key to a new one, so feel free to press "Yes" in the next window.

   

   The procedure is over, you can sign documents.

This method is somewhat more complicated, however, in some cases, you can only install certificates.

As a summary of the results, we will remind: Install certificates only on proven computers!