• Home
  •  > 
  • Education and science
  •  > 
  • Plugin sberbank ast. Error when logging in from digital signature to electronic platforms

Plugin sberbank ast. Error when logging in from digital signature to electronic platforms

The most common mistake when working with a trading system. To resolve this error, the user needs to install the CryptoPro Browser plug-in and make the correct settings.

How to install the CryptoPro plugin.

  • Download the plugin from the manufacturer's website Download
  • Install the program by clicking on the downloaded file (you can find it in the “Downloads” section).
  • At the beginning of installation, answer “Yes” in the window with the question “Install CryptoPro EDS Browser-plugin”.
  • The program will begin installation, and upon completion you will receive a notification that the plugin has been installed successfully.
  • For the plugin to work correctly, the browser must be restarted.
  • In the future, when you go to the electronic signature verification form (section “Registration - Receiving and verifying an electronic signature http://utp.sberbank-ast.ru/Main/Util/TestDS”) and when entering the user’s personal account, the browser will request access to the certificate store. When such a request appears, you must click “OK”

IMPORTANT! For the CryptPro Browser plug-in to work correctly, you must have the root certificate of the Certification Authority installed on your PC. If, when working with USP, the system displays the following message:

“Error signing data. An internal error occurred in the certificate chain."

It is necessary to install the root certificate of the Certification Authority.

The plugin is not available in Internet Explorer


To eliminate the error, the same manipulations are required as in the previous error. In addition, you must disable all non-standard add-ons:

  • launch IE.
  • enter “Tools”, then “Configure add-ons”, “On”. and off superstructures."
  • Select add-ons related to Skype, QIP, Mail, Yandex, Rambler, Google, Yahoo, etc. and turn them off.
  • restart IE.

Error when opening the vault: error Sberbank-AST

This error occurs when the personal certificate storage system fails. This happens if the browser in the Sberbank-AST system is configured incorrectly. First, you need to check the ES website using Activex, then update this component. But the main reason for the failure is the inaccurate operation of the Capicom library. To install it you need to do the following:

  • download and unpack the archive with the software;
  • go to the folder and run the file from the “Administrator” function;
  • The installation wizard window will open, click Next;
  • agree to the Microsoft licensing rules, then Next;
  • click Browse to install the application,
    select the System 32 system folder, click OK, then Next;
  • to start the installation process you need to click Install;
  • When the process is completed, you need to click Finish.

If an application is duplicated because it may have been installed earlier, an error message will appear. Then it is possible to download a file with the msi extension from the official Microsoft website according to the previously described scheme. After this, Capicom needs to be registered. To do this, enter the following on the command line:

c:\windows\system32\regsvr32.exe capicom.dll

and press the “ENTER” key on your keyboard.

The registration process is complete.

Cryptoprovider error in Sberbank-AST ETP

This error occurs if the user has not been accredited for this ETP. You need to fill in the details and copies of the necessary documents in a special form and send this information. A response will be received within 1-5 days.

To successfully pass accreditation you must:

  • Install CryptoPro (see section “Sberbank-AST: plugin not available”);
  • Set up CryptoPro. Run the utility as administrator. In the “Equipment” tab, open “Configure readers”, then “Add”, select the one you need from the list;
  • Here, click “Configure media types”, then “Add”, select Jakarta or Etoken.

Install a personal certificate.

  • Go to CryptoPro;
  • In the “Service” option, click “View certificates in the container”, then “Browse”;
  • Select the appropriate certificate, option “Certificate to view”, “Properties”, “Install certificate”

If he doesn’t see the certificate

If, when logging in using an electronic digital signature certificate, the system displays the message: “This certificate is not associated with the system user. To associate this certificate,

  • On this page, enter your login and enter the user’s personal account on the site.
  • If, when you re-enter your personal account, the system no longer displays the message shown in the figure above, it means that the certificate association was successful.
  • If, when entering your personal account using an EDS certificate through the “Single Login Page” or re-entering through the “Former Login Page,” the system still displays a message stating that “the certificate is not associated with the user,” therefore, the certificate association did not occur automatically and You must fill out an application to register a new user.

Registration procedure:

  • on the Sberbank-AST website, enter “Participants”, then “Registration”, click “Submit an application” in the field “Registration of a participant user (new electronic signature certificate)”;
  • In the selected certificate, some fields will be filled in automatically, the rest must be filled in manually.

When re-registering, you must come up with a new username and enter it in Latin letters.

If the selected certificate has an administrator function, the data will be transferred automatically. Otherwise, this is done through your personal account by another person in the company with administrator functions. If the company does not have such a person, then an application must be submitted electronically to confirm updates: [email protected]

Capicom

Capicom is a built-in utility for checking electronic signatures, viewing and decrypting certificate data, adding and deleting certificates. The procedure for installing this function is described in the “Sberbank-AST” section.

How to update the digital signature on Sberbank-AST?

An electronic signature or electronic digital signature is required to sign documents electronically. This is important to guarantee the authenticity of the information and the owner’s signature itself. If the digital signature is outdated, it needs to be updated.

The procedure for updating the digital signature:

  • re-accreditation is not required;
  • within 5 days, the organization sends all changed information and documents (if any), notifying them of the expiration of the old digital signature;
  • when replacing the digital signature, a new user is registered, with information about this being entered into the register. The authorized person of the company is informed through his personal account.

Here are the most common errors encountered by Sberbank-AST users. We hope that these recommendations will help you avoid them in your trading system.

Select section Configure for work on electronic trading platforms.

Possible errors

If, when working on the ETP, one of the error windows appears:

"Error! The CAPICOM library could not be loaded, possibly due to low permissions on the local machine."

"CAPICOM object is not installed"

“On your computer, the tools for working with digital signatures are missing or incorrectly configured. Contact the supplier of your certificate and CIPF."

"Unable to create object by Object Programming Server."

"Your browser does not have permission to use ActiveX objects."

then you need to follow the steps described below.

How to configure Internet Explorer

1. Make sure you are using Internet Explorer. If your version of Internet Explorer is lower than 10, then you need to run the 32-bit version (to do this, open the folder C:\Program Files (x86)\Internet Explorer and run the iexplore.exe file).

If you're using Windows 10, make sure you're not opening the Microsoft Edge browser, which has an icon very similar to Internet Explorer.

2. It is necessary to add ETP addresses to Trusted nodes.

  • In Internet Explorer, “Tools” - “Internet Options” (“Browser Options”); go to the “Security” tab;
  • select “Trusted Sites” (“Trusted Sites”); click the “Nodes” button (“Sites”);
  • uncheck the box below “For all nodes in this zone, server verification (https:) is required” (not all ETPs work over a secure https:// connection);
  • In the line “Add the next node to the zone” enter the ETP address (via http and https);
  • insert the website address, after the double slash // put *. and website address. The entered address should look like “http://*.kontur.ru/”;
  • Click the "Add" and "OK" buttons.

3. For the “Trusted Sites” zone, allow the use of Active-X controls.

  • in Internet Explorer “Tools” - “Internet Options”; go to the “Security” tab; select “Trusted nodes”; click the “Other...” button;
  • In the “Active-X controls and connection modules” section, check “Enable” for all parameters.

4. Download and install CAPICOM-KB931906-v2102.

5. In IE 9 and higher, errors may occur that can be resolved by using the compatibility view (Go to Browser Options - Tools / compatibility view settings / add site address).

Note: these are general settings for all ETPs. On some sites, it is necessary to install additional components (for example, the KriptoPro EP browser Plug-in) necessary for the site to function correctly.

To fully work with the Sberbank AST electronic trading platform, you need to install a special plug-in for creating and verifying an electronic signature - Crypto Pro EDS Browser plug-in. It is integrated into the browser and is used when working with sites that support authorization or verification through an electronic signature. But sometimes, when entering the site of an electronic trading platform, an error like “Sberbank AST plugin is not available” appears; you will not be able to log in. Why does this happen and how can I fix the problem?

Possible causes of failure

If the plugin is not available when logging into the Sberbank AST electronic platform, there are several possible reasons for this:

  • an incompatible or outdated browser is used;
  • plugin not installed;
  • the operating system does not have the root certificate of the certification authority that issued the electronic signature installed;
  • incorrect browser settings.

Even when logging into Sberbank AST, the plugin may not be available due to the use of unsupported operating systems, in particular Windows XP and Windows Vista.

You are using an incompatible or outdated browser

  1. Internet Explorer version 11 or higher;
  2. Google Chrome version 42 and higher;
  3. Opera (Chromium based);
  4. Firefox (latest version required);
  5. Safari (MacOS only).

Internet Explorer versions 8 – 10 are also supported, but the plugin may occasionally crash. And, theoretically, working with such software is unsafe - user data can literally be stolen due to the lack of add-ons that provide protection for the exchange of crypto data (and this is exactly how CryptoPro CSP with electronic signatures works).

Plugin not installed

If, when entering Sberbank AST, the browser says that the plugin is not available, then you should also check whether it is installed at all. The list of installed ones can be viewed in browser add-ons.

Expert opinion

Vladimir Anatolyevich Sorokin

Accredited site specialist

How to install a missing plugin?

Download the utility itself for installation from the official CryptoPro website https://www.cryptopro.ru/products/cades/plugin and install it like any other program on your PC. Before installation, it is recommended to close all Internet browsers; if a service message appears during the installation process, allow the integration of plugins. Afterwards, be sure to restart the PC.

In some Internet browsers, after launch, a message will appear stating that CryptoPro EDS Browser plug-in is installed and needs to be activated. Here you just need to follow the prompts on the screen. In Google Chrome, by default, all third-party plugins that are not installed from the application store are blocked and must be enabled manually.

Incorrect browser settings

What should I do if it says that the Sberbank AST plugin is not available, but it is installed and a compatible browser of the current version is used? This most often happens when using Internet Explorer or Google Chrome, since in them you need to change some settings to fully work with the plugin.

So, you need to enable NPAPI in Google Chrome(support for Netscape modules). This option is disabled by default starting from version 42 of the browser. To enable it you need:

  • In the address bar, enter chrome://flags and press Enter;
  • The additional settings menu will open, where you need to find and check the #enable-npapi item;
  • Be sure to restart your browser for the new settings to take effect.

In Internet Explorer, you need to disable all minor add-ons, with the exception of CryptoPro EDS Browser plug-in. To do this you need:

  • select “Service” in the main menu of Internet Explorer;
  • go to “Configure add-ons”;
  • select each item one by one and click on “Disable” at the bottom of the window;
  • be sure to restart your browser.

As practice shows, failures in Internet Explorer most often occur due to add-ons Skype, Yahoo mail, Yahoo search, MailRu search. It is not necessary to remove them from the system.

Root certificate not installed

One of the reasons why the plugin is not available in Sberbank AST when using Internet Explorer 11 may be that the root certificate is not installed in the system. You can obtain it from a representative of the certification center that issued the electronic signature. As a rule, it is given along with a root token, on which the digital signature is recorded. Installing a certificate is performed by simply double-clicking on the certificate file, after which the system will prompt you to allow or deny its installation.

After adding the root certificate to the OS, you must restart the PC. By the way, when working with Sberbank AST, the browser may display a message that the validity of that same certificate has expired. Most often, this occurs when the date is incorrectly set on the PC.

In total, if, when entering the Sberbank AST electronic trading platform, the browser displays a message that the plugin is unavailable, then there may be several reasons for this; all the most common ones are discussed above. If none of the above solutions help, then you should contact Sberbank AST technical support. In this case, it is advisable to indicate the OS used, the browser and its version, where and when the electronic signature was issued.

If you experience the following errors when logging into trading platforms using your digital signature, then you have a browser installed Internet Explorer 11, which does not work correctly with digital signatures and other components necessary for working with electronic platforms. To restore operation on electronic trading platforms, you must perform the following steps: 1. Install “CryptoPro EDS Browserplug-in”. a) Download CryptoPro EDS Browserplug-in and save it on your computer. b) Install the plugin following the instructions in the installation wizard. c) Restart Internet Explorer (if you had it running). 2. Open the menu Tools - Compatibility View Options and enter the address http://etp.roseltorg.ru in the add this website line and click Add:

The address roseltorg.ru will appear in the list of websites for which you have chosen to view in compatibility mode.

3. We go to the personal account of the site using the digital signature. This procedure can be repeated for all sites that have problems with logging in via digital signature. If the above methods do not produce results, then in order to restore work on electronic trading platforms it is necessary roll back Internet Explorer browser version up to 10 or 9 (this solution is not suitable for Windows 8.1). To remove the Internet Explorer 11 update, we recommend that you follow these steps: 1. Click the Start button, type Programs and Features in the search box,

and then click the View installed updates link in the left pane. 2. In the Uninstall update section, navigate to Microsoft Windows.