Setting up an electronic budget workstation takes place in several stages, they are not complicated, but require care. We do everything according to the instructions for setting up an electronic budget. Briefly and to the point ...
Electronic budget workplace setup
Root certificate e-budget
Create a key folder in My Documents to store downloaded certificates in this folder:
On the site http://roskazna.ru/gis/udostoveryayushhij-centr/kornevye-sertifikaty/ in the GIS menu -> Certification center -> Root certificates, you need to download " Root certificate (qualified) "(see figure), or if you received a USB flash drive with certificates, copy them from the Certificates folder.
Continent TLS VPN Certificate
The second certificate that you need to download is the Continent TLS VPN certificate, but I could not find it on the new roskazna site, so I put a link from my site. Download the Continent TLS VPN certificate to the key folder, it will be useful to us later when we configure the Continent TLS client program.
Install the downloaded Root Certificate (qualified) to work with an electronic budget.
In the START menu -> All programs -> CRYPTO-PRO -> run the Certificates program.
Go to the Certificates item as shown in the picture below:
Go to the Action menu - All tasks - Import, the Certificate Import Wizard window will appear - Next - Browse - Find the downloaded Root certificate (qualified) in our case, it is located in My Documents in the key folder
If everything is done correctly, then the root certificate of the Federal Treasury CA will appear in the certificates folder.
Installation "Continent TLS Client" for working with electronic budget
Continent_tls_client_1.0.920.0 can be found on the internet.
Unpack the downloaded archive, go to the CD folder and run ContinentTLSSetup.exe
From the point click on the Continent TLS Client KC2 and start the installation.
We accept the terms
In the destination folder, we leave it by default
In the Configurator Launch window, put a check mark on Launch Configurator after installation is complete.
During installation, the Service settings window will appear:
Address - indicate lk.budget.gov.ru
Certificate - select the second certificate downloaded earlier in the key folder.
Click OK and complete the installation, Done.
When asked to restart the operating system, we answer No.
Installation of the electronic signature tool "Jinn-Client"
You can download the Jinn-Client program on the Internet.
Go to the Jinn-client - CD folder, run setup.exe
Click from the Jinn-Client list, the installation of the program starts
Ignore the error, click Continue, Next, accept the agreement and click Next.
Enter the issued license key
Install the program by default, click Next
We complete the installation, we answer the question about restarting the operating system No
Installation of the module for working with electronic signature "Cubesign"
If you need an archive with the program, write in the comments.
Run the cubesign.msi installation file
Configuring the Mozilla Firefox browser to work with the Electronic budget.
1. Open the "Tools" menu and select "Options".
2. Go to the "Additional" section on the "Network" tab
3. In the "Connection" section of settings, click the "Configure ..." button.
4. In the opened connection parameters window, set the value
"Manual configuration of the proxy service".
5. Set the values of the HTTP-proxy fields: 127.0.0.1; Port: 8080.
6. Press the "OK" button.
7. In the "Settings" window, click the "OK" button.
Login to the personal account of the Electronic budget
A window will open with a choice of a certificate for entering the personal account of the Electronic Budget.
We select a certificate to enter the Personal Account of the Electronic Budget, if there is a password for the closed part of the certificate, write and click OK, after that the Personal Account of the Electronic Budget will open.
One of the most common errors of the "Electronic Budget" AWS program is an error that occurs when connecting to the server, which has the index number 434. It is quite simple to solve it, in most cases only 2 actions help:
1. TLS Continent build update to the current version. For example, version number 920 was unstable and often the connection ended with 434 with the "Destination server unavailable" error. The current version can be downloaded from the site securitycode.ru.
2. Checking if the address is entered correctly personal account of the user of the "Electronic Budget" program in the TLS Continent, as well as the port number (8080). The line should not contain spaces or any other characters, neither at the beginning of the line, nor at the end. The correct address would be: lk.budget.gov.ru(as pictured). If you configure a proxy server through a browser, it must be configured accordingly. If you do not work through a proxy server, there should be no tick in the TLS settings. More on this below.
Error 434 "The destination server is unavailable." How to remove?
If the above two solutions to the problems did not help you (updating the assembly and the correct spelling of the address of the personal account), then the problem most likely lies in the incorrect installation of the root certificates of the certification authority or the proxy settings in the browser, and it can also be solved.- With regards to certificates- some users, if the program is installed incorrectly, put the root certificates of the CA and TLS in the Registry, while according to the instructions correctly - in the Local computer. In this case, moving the certificates will help.
If you choose the proxy server setting in the browser, it must be enabled in the correct way. You must specify the type of proxy - HTTP and check the box that the proxy server will be used for all protocols. An example of configuring the Firefox browser is below.
Often when using a software product to work with the Federal Treasury Continent AP users encounter the error " Root certificate not found". There may be several reasons for the appearance of this error, in this article we will list the main ones and learn what to do in such cases and how to remove the error. Please note that the information is relevant at the time of this writing, if the listed methods do not help you cope on your own with a problem - you can always contact the technical support department of the Treasury or the developers of the Continent AP program.
Causes of the "Root certificate not found" error in the AP Continent
1. Root certificates not installed certification center (CA) of the Federal Treasury. Typically, UFC employees write them to a flash drive along with the user's personal certificate. Here you need to check their presence in trusted root certification authorities. To do this, you need to enter along the path: Start - Control Panel - Internet Options- Tab " Content" - Paragraph " Certificates" - Paragraph " Trusted Root Certification Authorities", lower the slider to them and see which root certificates are installed with the Russian designation. If everything is done correctly, you should see something like this:
If you do not have these certificates in the list, you need to download and install them, the procedure is described below. You can also check for the installed certificates in the system by pressing the Win keys (the key in the bottom row of the keyboard with the Windows icon) + R and in the window that appears, type certmgr.msc, press Enter.
2. Root CA certificates were mistakenly or intentionally removed... Again - download and install certificates.
3. Root certificates have expired... It is a very rare mistake, KS are issued for a long period of time - from 5 to 10 years, but sometimes other versions are released. The elimination of the error in this case is the same - download and install fresh root certificates.
4. Crypto Pro problem... Frequently updated versions of the Crypto Pro program do not quite work correctly with Treasury programs and certificates. We have already written about this, for example,. The solution is to reinstall Crypto Pro to a newer or, conversely, an older version.
5. Limited user rights... The Continent AP error "Root certificate not found" was seen in version 10 of Windows. The solution is to give the user full rights.
6. Incorrect operation of the Continent AP program... The solution is to completely remove and install the current version of the Continent AP program according to the Manual available on the official website.
Link to download Treasury root certificates
You can download the current root certificates of the Treasury certification center from the official website at the link: roskazna.ru/gis/udostoveryayushhij-centr/kornevye-sertifikaty/For correct operation, you need to download and install both offered certificate files:
1. Certificate of the Head Certification Center of the Ministry of Telecom and Mass Communications,
2. Certificate of the Certification Center of the Federal Treasury.
The dates of their release may change, as a rule, they are released for several years.
How to install
Before installing the CA root certificate, you must make sure that the Crypto-Pro program is installed and its license is active. Right-click on the downloaded certificate and select Install Certificate from the menu. Next, select the storage location - User or Local computer. We recommend choosing the second option. Click the Next button. Select Place certificates in the following store, click Browse, click on Trusted Root Certification Authorities, click OK, Next and Finish. A warning sign will appear:
If you did everything correctly, a message will appear stating that the import was successful. The same procedure must be done with the installation of the second root certificate. You can download the archive with the current Root Certificates for
New version of HandyCache released.
The changes made in this version are mainly related to fixing problems and errors.
In the archive of the previous version, I put the updated dll-libraries libeay32.dll and ssleay32.dll compiled by me. These libraries work when the SSL Handling option is enabled. As I found out, one of them, when loading, required the presence of the msvcp120.dll library. The absence of this library on the computer resulted in the message Port xxxx already in use when starting HandyCache with the SSL processing option enabled. This time I have compiled the specified dlls in such a way that additional dlls are no longer needed.
I am sometimes asked: which version of Windows does HandyCache require? If you do not use the SSL Handling option, you can use Windows 7 or 10. If SSL Handling is used, then it is better to use Windows 10. In the case of Windows 7 HandyCache, when accessing some sites, the SSL Handling option cannot work. There are far fewer such sites when using Windows 10. If HandyCache cannot process SSL when working with a specific site, then it automatically disables this option for this site and the message Stop SSL decryption for this host + useragent is displayed in the Rules column in the Monitor.
A complete list of changes can be found below.
To install version RC4 1.0.0.885, unpack the archive over the existing version and replace the existing files. New lists of rules will be created automatically when HandyCache starts only if there are no current lists (files * .lst, * .lso and * .lsb).
If HandyCache has not yet been installed on your computer, then just copy the contents of the archive into an empty folder and run the exe-file.