Copying with CryptoPro CSP. How to copy an electronic signature from the registry to a media? How to copy the digital signature to another medium

Copying using Windows

If a floppy disk or a flash drive is used for work, you can copy the container with the certificate using Windows tools (this method is suitable for CryptoPro CSP versions not lower than 3.0). Place the folder with the private key (and, if available, the certificate file - the public key) in the root of the floppy disk / flash drive (if it is not placed in the root, then working with the certificate will be impossible). It is recommended not to change the name of the folder when copying.

There should be 6 files with the .key extension in the folder with the private key. As a rule, the private key contains the public key (the header.key file in this case will weigh more than 1 KB). In this case, copying the public key is optional. An example of a private key is a folder with six files and a public key is a file with the .cer extension.

Private key Public key

Copy on Diagnostics Profile

1. Go to the "Copy" Diagnostics profile at the link .

2. Insert the media to which you want to copy the certificate.

3. On the required certificate, click the "Copy" button.

If a password has been set for the container, the message “Enter the password for the device from which the certificate will be copied” will appear.

4. Select the media where you want to copy the certificate and click "Next".

5. Specify a name for the new container and click the "Next" button.

6. A message should appear indicating that the certificate was copied successfully.

Bulk Copy

Download and run the utility. Wait for the entire list of containers/certificates to be downloaded and tick the ones you need.
Select the Bulk Actions menu and click on the Copy Containers button.

3. Select the media to store the copy of the container and click OK. When copying to the registry, you can check the box "Copy to the computer's key container", then after copying the container will be available to all users of this computer.

4. After copying, click on the "Update" button at the bottom left.
If you want to work with copied containers, you need .

Copying with CryptoPro CSP

Select "Start" > "Control Panel" > "CryptoPro CSP". Go to the Tools tab and click on the Copy button.

In the Copy Private Key Container window, click on the Browse button .

Select the container you want to copy and click OK, then Next. If you are copying from a root token, an input window will appear in which you must specify a pin code. If you have not changed the pin on the media, the default pin is 12345678.

Come up with and manually specify a name for the new container. Russian layout and spaces are allowed in the container name. Then click Done.

In the Insert Blank Key Media window, select the media on which the new container will be placed.

You will be prompted to set a password for the new container. We recommend that you set a password that is easy for you to remember, but that outsiders cannot guess or guess. If you don't want to set a password, you can leave the field blank and click OK.

Do not store your password/pin code in places that are accessible to others. If the password/pin-code is lost, the use of the container will become impossible.

If you copy the container to a ruToken smart card, the message will sound different. In the input window, enter the pin code. If you have not changed the pin on the media, the default pin is 12345678.

After copying, the system will return to the Tools tab of the CryptoPro CSP. Copying completed. If you plan to use a new key container for working in Extern, .

Often, people who use electronic digital signatures for their needs need to copy the CryptoPro certificate to a USB flash drive. In this lesson, we will look at various options for performing this procedure.

By and large, the procedure for copying a certificate to a USB drive can be organized in two groups of ways: using the internal tools of the operating system and using the functions of the CryptoPro CSP program. Next, we will look at both options in detail.

Method 1: CryptoPro CSP

First of all, let's consider the method of copying using the CryptoPro CSP application itself. All actions will be described using the example of the Windows 7 operating system, but in general, the presented algorithm can also be used for other operating systems of the Windows family.

The main condition under which it is possible to copy a container with a key is the need for it to be marked as exportable when it is created on the CryptoPro website. Otherwise, the transfer will fail.

Before starting manipulations, connect the USB flash drive to the computer and go to "Control Panel" systems.

Open section "System and safety".

In the specified directory, find the item "CryptoPro CSP" and click on it.

A small window will open where you need to move to the section "Service".

Next click the button "Copy...".

A window for copying the container will be displayed, where you need to click on the button "Review…".

The container selection window will open. Select from the list the name of the certificate from which you want to copy to a USB drive, and click OK.

Then the authentication window will be displayed, where in the field "Enter password" it is required to enter a key expression with which the selected container is password-protected. After filling in the specified field, click OK.

After that, you return to the main window for copying the private key container. Please note that in the field of the name of the key container, the expression will be automatically added to the original name "-Copy". But if you wish, you can change the name to any other, although this is not necessary. Then click on the button "Ready".

Next, a window for selecting a new key carrier will open. In the presented list, select the drive with the letter that corresponds to the desired flash drive. After that press OK.

In the authentication window that appears, you will need to enter the same arbitrary password to the container twice. It can either match the key expression of the source, or be completely new. There are no restrictions on this. After entering, press OK.

After that, an information window will be displayed with a message that the container with the key was successfully copied to the selected media, that is, in this case, to a USB flash drive.

Method 2: Windows Tools

You can also transfer the CryptoPro certificate to a USB flash drive exclusively using the Windows operating system by simply copying it through "Conductor". This method is only suitable when the header.key file contains a public certificate. In this case, as a rule, its weight is at least 1 Kb.

As in the previous method, descriptions will be given using the example of actions in the Windows 7 operating system, but in general they are also suitable for other operating systems of this line.

At first glance, transferring a CryptoPro certificate to a USB flash drive using the operating system tools is much easier and more intuitive than actions through the CryptoPro CSP. But it should be noted that this method is only suitable when copying a public certificate. Otherwise, you will have to use the program for this purpose.

A copy of the EPC will be useful for:

guarantee of the safety of the signature
usability

Some certification centers provide a backup service.

Copying an electronic signature from a secure medium is performed using the CryptoPRO CSP program.

A copy of the EDS is made on a secure medium, such as Rutoken / Etoken. A regular USB flash drive will not work.

Copying from CryptoPro CSP

First of all, download and install the CryptoPRO CSP program from the licensed site. Insert the EDS media into the computer. Launch the previously installed program. Open the section - Tools → "Copy".

In the window that appears, select the item - Browse. Select the media you plan to copy → “OK” → “Next”. In the line for entering the pin code, insert - the pin code from your ES carrier

Give a name to the new container using the Russian layout and spaces. Tap → “Done”.

In the line - "Insert a blank key medium", specify an empty medium. The program will prompt you to set a password. This action is optional. Press → “OK”. It should be noted that if the PIN code is lost, it will not be possible to use the container. When writing an ES to Rutoken, use the pin code issued by the certification center.

Upon completion of the operation, the window will close. A new container will appear on the media, which will be a copy of the EDS.

If you encounter problems when creating a duplicate yourself, you can contact our CA. Our managers will be happy to answer your questions. Contact us!

As a rule, the digital signature is written to a USB-drive. However, if you need to install an EDS from a USB flash drive to a computer, that is, copy an EDS to a computer, find out in this article how to do it quickly and easily.

Copy digital signature to computer

Of course, it is not always convenient to carry a flash drive with you all the time. It can either become unusable, or it simply may not be at hand at the right time. In this case, a method will come to the rescue in which we copy the EDS certificate to the computer itself, which will subsequently make it possible to do without a USB drive.

In order to copy EDS to computer please follow the further instructions:

Insert the USB-drive with the digital signature into the computer and run the program CryptoPro CSP, go to tab Service and press Copy….

In the window that opens, select the key container by clicking the button Review.

In the list of key user containers that opens, select a container and click OK.

After selecting a container, its name will appear in the line Key container name. In the next window just click Further.

In the next step, you need to specify information about the new container, for which enter Certificate Name (think of any name for the key certificate). After that press the button Ready.

For a newly created container, it is possible to set a new password. If you wish to set a password, enter it twice in the corresponding fields. If you do not plan to use a password, leave the fields blank and click OK.

So, we have selected an object for copying, indicated the location for storing the certificate. Now you need to install this certificate.

In the tab Service click View certificates in container...

Clicking on the button Review, in the window that opens, if you noticed, another key container has appeared. Select the newly created container and click OK.