Electronic security in modern world is of particular importance, as there are securities in the network, intellectual property and other values. To protect your information, confirm the right to own data or check the electronic signature (ES) in Yandex browser there is an extension CryptoPro EDS Browser plug-in. It simplifies the use of low-level signatures, with the plugin creating and viewing ES is simple and safe. Without fail, the add-on is used on the websites of financial structures, for example, when entering the foreign economic activity office on the website of the Customs Service.

The CryptoPro plugin is supported in Yandex browser and any other web browser (only from modern ones) that support dynamic JavaScript code. Available for most popular platforms:

• Linux - LSB 3.1 or later
• Windows 2000 (provided that SP4 and IE0 are installed) and higher;
• iOS 6 and Mac OSX 10/7 and newer;
• Solaris - from version 10;
• AIX 5-7;
• FreeBSD from 7.

Almost every computer meets the listed requirements, rarely there are any problems with system components.

Why use the CryptoPro extension in Yandex browser

The main task is to work with signatures. Installing CryptoPro Extension for CAdES Browser helps you achieve the following goals:

• User identification;
• Creation of a certificate with public keys;
• Formation of the ES register;
• EDS management with public keys;
• Certificate owners can generate and manage keys.

What are signatures installed in CryptoPro EDS Browser Plugin for Yandex browser:

• Any electronic documents;
• Information entered into the submission forms;
• Files that the user uploaded to the server from a PC;
• Messages in text form.

The CryptoPro plugin is mainly used in secure systems, such as Internet banking or similar resources responsible for processing money or important documents. After installing the signature, there will be no doubt that the owner performed the necessary operations with his own hands. Less often, you need to use the CryptoPro add-on for Yandex browser on client portals or while accessing the Internet from a corporate network.

From the side of the CryptoPro center, a number of useful actions will be performed:

• Generation of own identifiers, both private and open type. Supports encryption function;
• Creates a request to issue a new certificate on the local network;
• Performs registration of requests in in electronic format at the Registration Center.
• Filling in the EDS using public keys according to the X.509 standard of the third version and RFC 3280. Centralized certification of certificates helps to record the key and attribute to it for each user;
• All registered users are sent information about revoked certificates.

How to install the CryptoPro add-on

Installing the CryptoPro module is relatively simple, but the method is slightly different from the standard algorithm of actions. After installing the extension, you must separately install the program of this developer.

How to install:

If CryptoPro CSP was installed before, then when installing the extension, the plugin icon will be without a red cross and an inscription will appear that the extension has been successfully installed and working.

The above actions are enough to start using the module, but some users complain that the plugin does not start or it is not possible to open a page that requires the extension.

Why the CryptoPro plugin does not work in Yandex browser

If the Yandex web browser does not respond to the EDS in any way after installing the plug-in, some of the functions of banking systems will not be available.

Causes of failures and ways to restore work:

• The CryptoPro CSP program is not installed - the most common cause of failure. You can download the file from the link;
  
• The PC has not been restarted. Despite the notification after installation, it is often forgotten to restart the computer;
• Install the plugin on a clean browser. Before installing the add-on, it is worth deleting the cache from the web browser. Click Ctrl+Shift+Del, in the line "Delete entries" select "For all time" and be sure to check the box next to "Files saved in the cache";
  
• Inactive extension. If by chance the plugin was deactivated, it becomes clear why nothing happens. It is easy to check the situation by clicking on "Yandex Browser Settings" and selecting "Add-ons". The CryptoPro plugin is located in the "From other sources" column;
  
• The resource is not in the list of trusted sites. To add the site to the exceptions, you need to find the installed program "Crypto-Pro" in the system (preferably through the search) and select "Settings CryptoPro EDS Browser Plug-in". In the column "List trusted nodes»Enter domains and subdomains of the site.
  

If opening the file from the last paragraph does not work, you should right-click on the program and select "Open with ...", where we select Internet Explorer.

Most likely the reason why the plugin does not work is user carelessness, but this is easy to fix. After completing the above steps, the CryptoPro EDS Browser Plug-in extension will start working properly in Yandex browser and any browser based on Chromium.

With the transition of office work to digital format, the possibilities of using electronic digital signature. The latter allows not only to identify the person who signed the electronic document, but also to protect the signed document from changes (forgery). Among the cryptographic utilities operating on the market with the use of EDS, an important place belongs to the products of the company "CryptoPro". This developer's cryptographic utilities provide electronic protection for various civil transactions, public and private services. To ensure the use of the signature, the installation of the "CryptoPro EDS Browser plug-in" is required. Below we will analyze the essence of this plugin, how to download and install it on your system.

What is CryptoPro EDS Browser plug in?

"CryptoPro EDS Browser plug-in" is designed to create and verify the use of electronic digital signature on Internet pages using CIPF "CryptoPro CSP". Most often, the plug-in is used on various digital portals (including state ones), in Internet banking, and on various online trading platforms.

The plugin's capabilities can also be used to add or remove digital certificates, encrypt and decrypt data in a web browser. The plugin allows you to check both a standard electronic signature and its improved version, which has a number of additional functions.

Using the CryptoPro EDS plugin, the following types of data are signed:

• Electronic documents;
• Data from various web forms;
• Files downloaded from the user's PC;
• Text messages.

This plugin is suitable for installation on all popular web browser models.. In particular, nice results showed the work of the CryptoPro EDS plugin with browsers IE, Mozilla (up to version 52), Chrome, Yandex.Browser, Safari. Operation with obscure web browsers and EDGE browser is not guaranteed.

The plugin is free. Operating systems for its work - OS Windows, Linux, Apple iOS, Apple Mac iOS.

CryptoPro EDS plugin works with popular browsers and operating systems

How to download and install the browser plugin

To install the CryptoPro EDS Browser plug in plugin, make sure that your system meets the requirements listed above. In particular, a fresh CryptoPro CSP system of version 3.6 R2 or higher must be installed in it.

If there are no inconsistencies, do the following:

Additional activation

Some browsers may require additional activation to activate the plugin. Let's take a look at its features.

Browser:	Extension:
Mozilla	In Mozilla, from version 52, the plugin is not supported. To work with the plugin, you will need to install an earlier version of the browser (for example, Mozilla 51). Then, while in the browser, press Ctrl+Shift+A. After opening the page with extensions, find "CryptoPro CAdES NPAPI Browser Plug-in" there, and set its status to "Always enable". Restart your browser.
Google Chrome	If you are using the Google Chrome browser, you need to install an additional extension from the Chrome store.
Yandex and Opera	For Yandex and Opera, the corresponding extension must be installed from the Opera extension store.
Internet Explorer	Add the site on which you use the EDS to reliable sites. To do this, go to the browser properties, then select the "Security" tab. In the specified tab, click on "Reliable Sites" at the top, then on the "Sites" button. Enter the site address in a special field, and click on "Add".

Regardless of the browser, go to the plugin settings by going to Start - All Programs - Crypto Pro - EDS Settings Browser Plug-in.

Here, add the following sites to the list of trusted sites.

Add the specified sites to the trusted list. Also check if the desired site is added to the trusted sites of this plugin. To do this, click on " Start", Select there " All programs", Find " Crypto-Pro", Click on" CryptoPro settings EDS Browser plug-in». After opening the browser window, you will need to allow access and unblock the content of the page.

You can check if your plugin works correctly by going to the test page of the site cryptopro.ru. A loaded and active plugin is displayed in green status.

What to do if CryptoPro EDS Browser plug in does not work

After we have analyzed how to download the CryptoPro EDS Browser plugin, we will also consider what problems may arise during its operation. The system may not see the plug-in, the electronic signature will not work, the list for selecting an EDS will not open. The procedure for dealing with such problems differs for each individual browser selected.

Chrome browser

Go to settings, select " Additional Tools» - «Extensions». In the list of extensions, find "CryptoPro extension ..." and set its status to "Enabled".

List of trusted nodes for CryptoPro

Then go to your browser settings, then to "Advanced", and find the "Content settings" option. Here, find the option "Pop-ups", and check that the status is "Allowed". Restart your browser.

Set popup status to "Allowed"

Mozilla

If, after installing the plugin, the system still asks to install it, click on "Cancel" to close the notification. And then click on "Allow" (Allow) at the top to run the plugin.

Select "Allow"

Internet Explorer

Go to your browser properties and select the "Privacy" tab. Uncheck the "Enable pop-up blocker" option.

Conclusion

Above we discussed how to download and configure the CryptoPro EDS Browser plug in. Please note that for the plugin to work, you need to install the CryptoPro CSP system, as well as additional installation of a number of extensions. In case of problems, check if pop-up windows are allowed in your web browser. Blocking them can cause errors in the operation of the CryptoPro EDS Browser plug in.

) in the section "Products" -> "CryptoPro EDS Browser plug-in"

When you run the downloaded file, the system will prompt you to elevate the rights to the system administrator. Installation without administrator rights is not possible.

After installation, be sure to restart your browser! Sometimes (in the case of using Chrome) a system restart is required, because. closing all chrome windows does not unload the browser from RAM in all cases.

Additional settings for FireFox version 52.0 and later

Don't forget to install the plugin

For the plug-in to work in FireFox starting from version 52, you need to install the latest version of the plug-in (at least 2.0.12888) (see ) and a special extension for FireFox.

To install the extension, go from your FireFox to the link . After the transition, you will be prompted to install the extension for FireFox - you must confirm the installation by clicking Install (Install).

Additional settings for FireFox versions prior to 52.0, FireFox ESR (Error: Plugin loaded but no objects created)

After the add-on is installed, its launch is allowed only after confirmation by the user. You can allow the add-on to run either only for the current site or permanently for all sites

Option 1: setting permission to use the add-on only for the current site (https://www.site)

When the error occurred: Plugin is loaded but objects are not created pay attention to the address bar - the add-on icon has appeared in it:

Click on this icon - you will be prompted to run the add-on and remember the permission to run the add-on for this site forever.

Option 2: setting permission to use the add-on for all sites

Open the page with installed FireFox add-ons

Find the CryptoPro CAdES NPAPI Browser Plug-in in the add-on list and change its startup mode to "Always On"

Additional settings for Opera

Open the page with the search for an add-on to install:

Enter "CryptoPro" in the search bar - the extension "CryptoPro Extension for CAdES Browser Plug-in" will be found. Click "Add to Opera" to install.

Additional settings for Yandex browser

For Yandex browser, you need to follow the procedure similar to the case with Opera.

Additional settings for Google Chrome: permission installed add-on

If the add-on is successfully installed, the next time you start Chrome, a message will be displayed asking you to confirm the launch of the add-on

In this dialog, you must enable the use of the extension

To verify CAdES-X Long Type 1 signature https://www.cryptopro.ru/sites/default/files/products/cades/demopage/cades_xlong_sample.html

Agree with all pop-ups, if any.

You should see a page that looks like this:

If you see such a window, then go to step 2, if not, then read on.

If you see such a window, it means that CryptoPro CSP is not installed or available, see How to check the installation or install CryptoPro CSP.

If you see such a window, then CAdESBrowserPlug-in is not installed or not available, see How to check if the plugin is installed, How to make sure that the browser is configured correctly.

Step 2

In the Certificate field, select the desired certificate and click Sign.

Note: The Certificate field displays all certificates installed in the current user's Personal store and certificates stored in key containers. If there are no certificates in the list or the required one is missing, then you need to insert a key carrier with a private key and .

If after clicking the Sign button you see such a result, it means that you have successfully completed the signature and the CryptoPro EDS Browser plug-in is working normally.

If you get an error, see the Error Information section.

How to check if CryptoPro is installedCSP

You can check if CryptoPro CSP is installed by going to the Control Panel Programs and Features (Add or Remove Programs). You can also see the version of the installed product there:

If CryptoPro CSP has not been installed, then a trial version (for 3 months) can be downloaded from our website (to download the file, you need a valid Account on our portal): https://www.cryptopro.ru/sites/default/files/private/csp/40/9944/CSPSetup.exe

After downloading the .exe file, run it and select "Install (recommended)". The installation will take place automatically.

How to check if CryptoPro EDS Browser plug-in is installed

You can check if the CryptoPro EDS Browser plug-in is installed by going to the Programs and Features control panel (Add or Remove Programs). You can also see the version of the installed product there.

If the CryptoPro EDS Browser plug-in is not installed, then the distribution kit can be downloaded from our website: https://www.cryptopro.ru/products/cades/plugin/get_2_0

Plugin installation instructions: https://cpdn.cryptopro.ru/content/cades/plugin-installation-windows.html

How to make sure browser extension is enabled

If you are usingGoogleChrome, then you must enable the extension. To do this, in the upper right corner of the browser, click on the icon Customize and manage Google Chrome (three dots) - More tools - Extensions.

Make sure the CryptoPro Extension for CAdES Browser Plug-in is present and enabled. If the extension is missing, reinstall the CryptoPro EDS Browser plug-in or download the extension from the Chrome Web Store: https://chrome.google.com/webstore/detail/cryptopro-extension-for-c/iifchhfnnmpdbibifmljnfjhpiffofog?hl=ru

If you are usingMozillaFirefox version 52 and above, then you need to additionally install a browser extension.

Allow it to install:

Click Add:

Go to Tools-Add-ons-Extensions and make sure the extension is enabled:

If you are usingInternet Explorer, then when you go to a page in which CAdESBrowserPlug-in is embedded, you will see the following message at the bottom of the page:

Click Allow.

In the Access Confirmation window, click Yes:

If you are usingopera, then you need to install the extension from the Opera add-ons directory:

And in the pop-up window, click - Install extension:

In the next window, click - Install:

Or go Menu-Extensions-Extensions:

Click Add extensions and in the search bar type CryptoPro, select our plugin and click Add to Opera. After that, restart your browser.

You can check if the plugin is enabled in Menu-Extensions-Extensions:

If you are using Yandex browser, then you need to go to Options-Settings-Add-ons and make sure that CryptoPro EDS is available and enabled. If the extension is missing, then you can download it from the Directory of extensions for Yandex Browser using the search for the word CryptoPro.

Error Information

1) CryptoPro window appearsCSP Insert Key Media

The appearance of this window means that you have not inserted the media with the private key for the certificate you selected.

You need to insert a key carrier. Make sure the OS "sees" it and try again.

If the previous steps did not help, you need to reinstall the certificate in the current user's Personal store with a binding to the private key. .

2) Failed to generate signature due to error: Unable to build certificate chain for trusted root authority. (0x800B010A)

This error occurs when the status of the certificate cannot be verified (no private key binding, no access to revocation lists or OCSP service), or root certificates are not installed.

Bind the certificate to the private key:

Check if the chain of trust is being built: open the certificate file (you can open it through Start-All Programs-CryptoPro-Certificates-Current User-Personal-Certificates), go to the Certification Path tab. If there are red crosses on this tab, or nothing at all except the current certificate (except if the certificate is self-signed)

Screenshots with examples of certificates that do not have a chain of trust.

To build a chain of trust, you need to download and install root and intermediate certificates. You can download them from the website of the CA that issued the certificate.

If you use a qualified certificate, then try to install these 2 certificates in the trusted root (these are the certificates of the Head CA of the Ministry of Telecom and Mass Communications and from them, if the Internet is available, a chain of trust should be built for any qualified certificate), if it does not help, then contact the CA that issued you the certificate .

To install the downloaded certificate to Trusted Root Certification Authorities, right-click on it - Select - Install Certificate - Current User - Place all certificates in the following store - Browse - Trusted Root Certification Authorities - Ok - Next - Finish - when the security warning appears about installing the certificate - click Yes-Ok. if you are installing an intermediate CA certificate, then select the repository - intermediate CAs.

Important: If you create CAdES-T or CAdES-XLongType 1, an error may occur if the TSP service operator certificate is not trusted, in which case you must install the root certificate of the CA that issued it in Trusted Root Certification Authorities.

3) If the signature is created but the certificate chain verification error is on, it means that there is no access to the lists of revoked certificates.

Lists of revoked certificates can be downloaded from the website of the CA that issued the certificate, after receiving the list it must be installed, the procedure is identical to the procedure for installing an intermediate CA certificate.

4) Error: 0x8007064A

The reason for the error is that the licenses for CryptoPro CSP and/or CryptoPro TSP Client 2.0 and/or Cryptopro OCSP Client 2.0.

To create a CAdES-BES signature, there must be a valid license for CryptoPro CSP

To create an XLT1, there must be valid licenses for the following software products: CryptoPro CSP, CryptoPro TSP Client 2.0, CryptoPro OCSP Client 2.0

You can view the status of licenses through: Start - All Programs - CRYPTO-PRO - Manage CryptoPro PKI licenses.

Solution: Purchase a license for the desired software product and activate it:

Start - All Programs - CRYPTO-PRO - CryptoPro PKI license management - select the desired software product - open the context menu (right-click) - select the item All tasks select the item Enter serial number... - enter the serial number of the license - click the OK button

5) Keyset does not exist (0x80090016)

Error reason: The browser does not have enough rights to perform the operation - add our site to trusted

6) Access denied (0x80090010)

Error Cause: The private key has expired. Check the validity period Go to Start->All Programs(all applications)->CryptoPro->CryptoPro CSP. Go to the Service tab. Select the Test item, select a container with a private key, and in the test results you will be able to see its validity period. It is recommended to get a new key.

7) Error: Invalid algorithm specified. (0x80090008)

This error occurs if you are using a certificate whose algorithm is not supported by your crypto provider.

Example: You have CryptoPro CSP 3.9 installed and the certificate issued according to GOST 2012.

Or if a hash algorithm is used that does not match the certificate.

Also check the relevance of the CryptoPro CSP version.