GPB client error while initializing transport core. Working with an electronic signature (ep) - error codes of the VTB client bank. Errors when generating new keys

Despite the constant development of technology, Internet systems cannot fully insure against any overlays. Errors may occur at any time during operation. This article contains answers to frequently asked questions about errors, the solution of which is difficult to find.

Mistakes

As a rule, the matter does not end with one systemic defect. There is a small list of inaccuracies that a VTB client may encounter at any time.

For each of the above points, there is a solution that can be used by all VTB customers who are faced with a specific problem. So, how to fix different kinds of errors?

Private key file not set or password incorrect

This problem occurs:

• When entering a password on the login page. The occurrence of a problem at this stage suggests that an incorrect password may indeed be entered. It can be changed, after this procedure, you must enter a username and a new password.

To solve it, it is recommended to check the correctness of the entered password at the entrance: language (RU / ENG), letter case. It should be remembered that the code for decrypting the key is not recoverable. You can change or change the password for accessing the VTB-Online system.

• After pressing the "Login" button. The error that occurred at this stage indicates that the private key files are corrupted.

If a saved copy of the key is available, then it will be possible to log into the system with its help. Additionally, it is recommended to log in to your personal account using a browser. Internet Explorer versions from 10.0, which should be run in "Administrator" mode.

• If a backup copy is missing or does not work, then the client can request a new certificate and save it additionally to another storage medium: a USB flash drive, a removable disk.

For its operation in the Personal Account, the certificate must be activated at the VTB branch by providing an act of entering the Key Certificate at the place where the accounts were opened. As a result, the error "Secret key file is not set" VTB service disappears.

Error when initializing CIPF

This problem occurs if the directory field of the CIPF key carrier contains the path to the directory that does not contain the "keys" folder and a bunch of files: kek.opq, mk.db3, masks.db3, rand.opq, request.pem. At the same time, an error in accessing an external system also takes place.

How can this problem be dealt with? The main thing is to make another direction in the general directory, where the "keys" folder and all the above files will be located. If all files are stored on removable media, then the client must specify the direction to it.

Error when creating a CIPF key carrier

This error can occur for two reasons:

Reason 1: non-existent path. The occurrence of this error informs that the path leads to a directory that does not exist on the system or media removed from the device. To solve this problem, you need to look at the direction on the line "Key CIPF directory", which should lead to an empty directory.

Reason 2: The path is write-protected. First, the attributes set in the directory properties are checked, to do this, follow the instructions:

1. Click on the desired folder and click select "Tools", "Properties" tab.
2. Go to the "General" tab and select the "Attributes" section.
3. Look at the read-only attribute line and make sure there is no marker next to the line. It can be in the form of a check mark or a green square. If the marker is present, then it must be removed, leaving the square empty.
4. Give consent to all pop-up system messages and confirm the changes by clicking on the "OK" button.
5. Update your personal account by pressing "Ctrl + F5" on the keyboard and specify the direction to the "CIPF Key Carrier Catalog" again.

If it is impossible to remove the "Attribute", that is, the actual lack of access to the administrator's functions, you should request a certificate for a flash drive or request the rights of the system manager.

Internal error, please try again later

The option when the operation being performed is temporarily unavailable also takes place. This problem occurs when accounts are duplicated. The only solution to this is to contact the VTB branch to specialists.

Error decoding private key

The problem usually occurs when the certificate is saved to the keyed media. It is possible that the password for decrypting the key is entered incorrectly. To solve it, you need to check the keyboard language, case, correct input. Alternatively, you can write the password in the Russian layout. If you still forgot it, then you can request a new certificate and save it to a clean storage medium.

Errors may appear when you click on the floppy disk icon. In this case, you need to check the entire structure of the files in the directory where the certificate is saved. It should contain the following names: "masks.db3", "rand.opg", "kek.opg", "mk.db3", "request.pem" and the "keys" folder with the file "00000001.key". If the name of the documents in the folder is written differently, then you should rename it to the correct one and check if the problem has disappeared.

The user is not connected to any client

It is written at the entrance to the Personal Account, if the client's account is blocked in the VTB client bank. To make a decision, you need to go to a convenient VTB office with a passport.

Authentication error

This information appears on the screen when trying to authorize in the Personal Account of a VTB client. If such a problem is present, then with a passport it is necessary to contact banking specialists at the VTB office.

The account is blocked

The user can act in different ways, depending on the information on the screen. If an unlock time is specified, then you should wait for this particular time. If you are advised to contact VTB technical support, then you should do just that.

If the client bank has been blocked and nothing else is indicated, then in this case the client must personally contact the VTB branch with a document that confirms the person’s identity, where managers will give recommendations or unblock closed accounts.

Error reading key container

Occurs when there is no certificate on the media. To fix it, you need to check the entire directory structure, the following documents should be in the shared folder: "masks.db3", "rand.opg", "kek.opg", "mk.db3", "request.pem" and folders "keys" , "cert", "CA". If some folders are missing, then go to the VTB personal account and resave the certificate. How to do it? In the CIPF key carrier directory field, specify the correct path to the root directory with the necessary documents and click the Save button. Then you can try logging in again.

What is the CIPF key carrier catalog?

CIPF is a service that provides electronic encryption of documents. This is usually used to obtain a signature for important information or, conversely, to send documents. Where can I get the catalog of the CIPF key carrier? In fact, this is a place for storing electronic keys; in this situation, the keys of the VTB client bank are stored. Store it, preferably on a separate medium: flash card, disk or internal storage.

Instructions for creating cryptographic keys

How to create a secret key in VTB client bank? To begin with, you enter the client bank using a link; at the initial login, the system may offer the installation of an ActiveX control element to protect information. After installing the component, you need to set up your personal account to register the organization in the VTB banking system.

To create private keys, you need to obtain a certificate:

1. Log in to the online office;
2. The reader (password generator) can generate a login code if used by the customer. If it is, then you need to press the "B" button on the device and the automatic generator will generate a code.
3. An SMS with a one-time code is sent to the phone number associated with the VTB personal account.
4. The password for the first login must be changed in the settings from temporary to permanent and more secure.

In LC VTB, you can create a certificate. Storage space must be found in advance on a flash drive or computer.

Please note that only one certificate should be stored in one folder, without any other files remaining. Otherwise, you will get an error related to the VTB client bank. To do this, on the "Request a new certificate" tab, you must specify the path to the folder in which the keys are stored.

When a message from the computer "Initializing the generator" appears, you need to move the mouse in random order.

When completed, a new decryption input window will appear, prompting you to enter a new secret key password. It must be remembered, attention is also drawn to the case of letters and the language of the keyboard.
Next, the creation of the certificate is completed. It will be available in the "Requests" section, where it will transfer the VTB client automatically. After receiving the certificate, a message appears about sending data to the bank.

VTB key generation

To create a unique key, you need to install the Quik VTB program (publisher Step Up inc), which is needed to create secret keys.

1. We launch the application on a PC and at the initial stage, the application offers us to show the path to the storage location of the codes, the client name and password with which we will open the service. If the client password specified at this stage is lost, the crypto key is created again and from the very beginning, since this password is not recoverable.
2. The second step is to confirm the password.
3. In the next window, the parameters of the created key are checked. If everything is correct, click the "Next" button.
4. Then a message about entering random numbers appears. The data entered in the line does not need to be remembered. Finish with the "Install" button.

After creation, you can click the "Finish" button and complete the work with crypto keys. Now we send the e-key document for registration to the email address: [email protected], but for safety, a file called sekring.txk is not sent. The letter contains the full details of the owner, the agreement number specified in the notice, clause 2, and the pubring.txk file.

We are waiting for the bank's response, print out the application from the response letter and put signatures at any VTB office in the presence of a banking specialist.

If the VTB client forgot the secret key password?

Unfortunately, it is not possible to reissue or change the password for the certificate in the VTB online client. To work, you need to re-save the document itself, then the electronic keys will be updated.

When problems arise in the VTB client bank, not all users can cope with the solution on their own. And with such cases, you can contact the operators for advice on the technical support hotline number, give your authorization data and calmly use the solutions of specialists.

Thank you very much, Mikhail, everything was done promptly and, most importantly, it was clear to me ... Since we have found a common language. I would like to keep in touch with you in the future. I hope for fruitful cooperation.

Olesya Mikhailovna - General Director LLC "VKS"

On behalf of the State Unitary Enterprise "Sevastopol Aviation Enterprise" we express our gratitude for the professionalism and efficiency of your company! We wish your company further prosperity!

Guskova Liliya Ivanovna - manager. SUE "SAP"

Thank you Michael for your help with the design. Very qualified employee +5!

Nadiya Shamilyevna - Entrepreneur IP Anoshkina

On behalf of the company "AKB-Avto" and on my own behalf, I express my gratitude to you and all the employees of your company for productive and high-quality work, sensitive attitude to customer requirements and efficiency in the execution of ordered work.

Nasibullina Alfira - Senior Manager"AKB-Auto"

I want to thank the consultant Mikhail for the excellent work, timely and complete consultations. He is very attentive to the client's problems and questions, promptly solving the most difficult situations that would seem to me. It's a pleasure to work with Michael!!! I will now recommend your company to my clients and friends. Yes, and technical support consultants are also very polite, attentive, they helped to cope with the difficult installation of the key. Thanks!!!

Olga Sevostyanova.

Acquisition of the key turned out to be very easy and even pleasant. Many thanks for the assistance to the manager Michael. Explains things that are complex and massive to understand, concisely, but very clearly. In addition, I called the toll-free hotline and left a request online, together with Mikhail. I got the key in 2 business days. In general, I recommend it if you save your time, but at the same time you want to have an understanding of what you are buying and what you are paying for. Thank you.

Levitsky Alexander Konstantinovich Samara

Personal gratitude to the consultant Mikhail Vladimirovich for the prompt consultation and work on the accelerated receipt of the ES certificate. During the preliminary consultation, the optimal set of individual services is selected. The end result is immediate.

Stoyanova N.L. - Chief Accountant LLC "SITECRIME"

thanks for operational work and expert help! I was very pleased with the advice!

Dmitry Fomin

LLC "Expert System" thanks the consultant Mikhail for the prompt work! We wish your company growth and prosperity!

Sukhanova M.S. - AppraiserLLC "Expert System", Volgograd

Thanks to the consultant, who introduced himself as Mikhail, for the efficiency in working with clients.

Ponomarev Stepan Gennadievich

Many thanks to the consultant Mikhail, for the assistance in obtaining the EDS. For prompt work and advice on issues arising in the process of registration.

Leonid Nekrasov

The company, represented by consultant Mikhail, does the impossible! Speed ​​up accreditation in less than 1 hour! Payment upon rendering of the service. I thought this didn't happen. With full responsibility, I can advise you to contact the Center for issuing electronic signatures.

• Check the functionality of your Internet connection.
• Check the version of your operating system. The page of the Client-Bank system will not be displayed on operating Windows system XP Service Pack 2 and below, and on Windows Server 2003 without the latest updates installed.
• In Internet Explorer go to "Tools" → "Internet Options" → "Advanced". In the window that opens, check the boxes next to the items containing the abbreviation " TLS" and uncheck the boxes next to the items containing " SSL».
• Press key combination Ctrl+F5. The page will refresh and clear the cache.
• Check the spelling of the address of the Client-Bank system page. In the address bar, delete all information after .ru and press Enter.

Check that you entered your username and password correctly. We recommend paying attention to the input options: the current input language and pressing the Caps Lock key. Try to enter the password in a text document, check it visually and copy it into the password field in the system.

This error may appear for the following reasons:

• ES keys expired.
• The term of office of the director/general has expired. director, indicated in the bank card of the organization.
• You have not yet completed the initial generation of new keys.
• You have just done the initial generation of new keys and clicked the " Further". At this point, the keys are not yet ready. To make keys, you need to print out an application for the production of a certificate. public key and submit it to the Bank's office serving your accounts.

For more information on this error, please contact technical support.

Make sure that in the settings of subscribers' key carriers you have specified the path only to the directory with secret keys. All other lines must be empty:

• Make sure you are logged in using the Internet Explorer browser.
• Add the website address of the Client-Bank system to the list of websites operating in compatibility mode.
• In Internet Explorer, click on the " Service» in the upper bar (if there are no buttons, then press the key alt on the keyboard until a strip appears with the buttons " File», « Edit», « View" etc.).
• Next select " Compatibility View Options».
• In the window that opens, enter the website address in the top line website and press the buttons Add" and " close».
• Restart your browser for the changes to take effect.

• In Internet Explorer, press the key combination " Ctrl+Shift+Delete". In the window that opens, check the boxes next to " Temporary Internet Files" and " Cookies” and press the button “ Delete».
• Perform a general reset of your browser settings.
• Close all Internet Explorer windows and go to " Control Panel» → « Browser PropertiesNetworks and the Internet»).
• Additionally” and press the button “ Reset».
• Delete personal settings” and press the button “ Reset».

Windows Vista, Windows 7:

• Start».
• Select " Control Panel» → « Browser Properties" (may be in the " Networks and the Internet»).
• In the window that opens, go to the " Additionally” and press the button “ Reset».
• In the window that opens, do not check the box " Delete personal settings” and press the button “ Reset».
• After the reset is complete, restart your computer for the changes to take effect.

Windows 8-10:

• Start» with the right mouse button.
• Select " Control Panel» → « Browser Properties" (may be in the " Networks and the Internet»).
• In the window that opens, go to the " Additionally” and press the button “ Reset».
• In the window that opens, do not check the box " Delete personal settings” and press the button “ Reset».
• After the reset is complete, restart your computer for the changes to take effect.

Errors when generating new keys

This error is due to the fact that the system cannot access the selected key storage location.

If you did not receive a USB device (eToken) at the bank office:

• When filling in the generation parameters in the field " Key storage location» indicate « disk drive". In field " Catalog» Specify a place to store the keys. We strongly recommend that, in order to avoid errors when creating keys, DO NOT USE for storing keys system disk (local disk C:\) and the folders stored on it (including the Desktop, Documents, etc.).
• Check if the directory that was chosen to store the secret keys in the section is writable. Key storage location».
• Check if the Flash media you are using is correct.

If you are using eToken:

Errors when working in the Bank-Client system

Windows Vista, Windows 7:

• Close all Internet Explorer windows and go to the " Start».
• Select " Control Panel» → « Browser Properties" (may be in the " Networks and the Internet»).
• In the window that opens, go to the " Additionally” and press the button “ Reset».
• In the window that opens, do not check the box " Delete personal settings” and press the button “ Reset».
• After the reset is complete, restart your computer for the changes to take effect.

Windows 8-10:

• Close all Internet Explorer windows and click the " Start» with the right mouse button.
• Select " Control Panel» → « Browser Properties" (may be in the " Networks and the Internet»).
• In the window that opens, go to the " Additionally” and press the button “ Reset».
• In the window that opens, do not check the box " Delete personal settings” and press the button “ Reset».
• After the reset is complete, restart your computer for the changes to take effect.

Problem
In Microsoft Office 2007-2016 applications, the PROMT Translator tab with translation functions is not displayed. Office applications with built-in PROMT translator features may hang or terminate incorrectly on startup. Try to resolve this issue with the solutions below. If any of the solutions fix the problem, you do not need to apply the following solutions.

Plugin manager
Embedding translation functions is done with the following program:

• "Plugin Manager" ( Start -> Programs -> PROMT -> "Your PROMT Product" -> Launch Applications -> Plugin Manager).

Solution 1
Connect translation features to Microsoft Office:

1. Launch the Plugin Manager program and check the box next to Microsoft Office.

Reason 2
Translation features are connected to Microsoft Office in the "Plugin Manager", but the PROMT add-in does not appear on the ribbon in Microsoft Office.

Solution 2

1. Close all windows of Microsoft Office applications;
2. Download the utility and run it for execution. The IssuesFixerLog_”date”_”time”.log report file will be created, allowing you to analyze the result of the utility.

Note: SmartoolXSupport is a universal PROMT embedding problem solver that automatically diagnoses and resolves problems.
3. Launch a Microsoft Office application such as Word.
4. The PROMT Translator tab with translation functions will appear on the ribbon of the Microsoft Office application.

Reason 3
Translation features are built into Microsoft Office, but the PROMT add-in is disabled in Microsoft Office.

Solution 3
Enable the PROMT add-in in Microsoft Office (using Microsoft Word as an example):

1. In Microsoft Word select File -> Options.
2. Select add-ons not located in the Disabled Application Add-ons group.
3. If the PROMT add-in is in the group of disabled add-ons, select Disabled Objects in the "Manage" drop-down list and click the button Go.
4. In the "Disabled Objects" window, select "PROMT for Microsoft Office" and click the button Turn on, and then click the button close.
5. Restart Microsoft Word.
6. The PROMT Translator tab with translation functions will appear on the ribbon of the Microsoft Office application.

Reason 4
Translation features are built into Microsoft Office, but the PROMT add-in is not active in Microsoft Office, or it lacks permissions to run.

Solution 4
Make the PROMT add-in active in Microsoft Office (using Microsoft Word as an example) and add launch permissions to it:

1. In Microsoft Word select File -> Options.
2. Select add-ons and check that the "PROMT for Microsoft Office" add-in not located in the Inactive Application Add-Ins group.
3. If the PROMT add-in is in the group of inactive add-ins, close Word.
4. Disable translation features from Microsoft Office: Launch Plugin Manager and uncheck all boxes next to Microsoft Office.
5. Download the caspol.zip archive, extract the caspol.js file from it and run it. After execution, the result "Successful" should appear. If you get a different result, then check that caspol.js is running with administrator rights.
6. Connect translation functions to Microsoft Office: launch the "Plugin Manager" program and check the boxes next to Microsoft Office.
7. Launch Microsoft Word.
8. The PROMT Translator tab with translation functions will appear on the ribbon of the Microsoft Office application.

Reason 5
Microsoft Office does not have the .NET Programming Support component installed, which is required for the PROMT add-in to work.

Solution 5

1. Close all running programs.
2. In panel Windows controls open list of installed Windows programs, select Microsoft Office, and then click Change.
3. In the Microsoft Office installer window, check the box next to "Add or remove features" and click Proceed.
4. In the Microsoft Office component tree, open the node for each Office application in sequence, and select Install the .NET Programming Support component.
5. Wait for the end Microsoft installations office.
6. Launch the Plugin Manager program and make sure the boxes next to Microsoft Office applications are checked.
7. The PROMT Translator tab with translation functions will appear on the ribbon of the Microsoft Office application.

Solution 6
Install (reinstall) the Visual Studio 2005 Tools for Office Second Edition Runtime package:

1. Download the VSTO2005SE.zip archive.
2. Extract the vstor.exe file from the archive, run it and follow the instructions in the installer windows.

Solution 7
Reinstall (repair) Microsoft Office 2007-2016:

• On Windows Vista/7/8/10: run Start -> Control Panel -> Programs, find the installed Microsoft Office 2007-2016 package, in the context menu select Change and in the Microsoft Office Setup window select the mode Reestablish.

Before version 3.0.8, many people have given error:

sun.security.pkcs11.wrapper.PKCS11Exception: CKR_USER_ALREADY_LOGGED_IN
2

UTM 3.0.8 bug is fixed so

For Rutoken 2.0 in the configuration files in UTM replace the following lines:

gost.pkcs11.library.path=C\:\\Windows\\System32\\rtPKCS11ECP.dll
gost.library.path=C\:\\Windows\\System32\\rttranscrypt.dll
rsa.library.path=C\:\\Windows\\System32\\rtPKCS11ECP.dll

on those:

rsa.library.path=C:\\Windows\\System32\\rtPKCS11ECP-replica.dll
gost.library.path=C:\\Windows\\System32\\libtranscrypt.dll
gost.pkcs11.library.path = C:\\Windows\\System32\\rtPKCS11ECP.dll

Accordingly, for win 64 change folder name System32

If nothing helped then try to reinstall UTM -

UTM EGAIS does not start. Antivirus blocking

rtpkcs11ecp-replica.dll access denied

Recently, it has been noticed that anti-virus programs began to block UTM files, mistaking them for viruses.

This situation occurs on computers that have Windows Defender (Windows Defender), in Windows 10 it is installed by default.

Also, problems with UTM occur on a PC with MS Security Essentials antivirus installed.

To start UTM it is enough to restore files from quarantine and add them to the antivirus exclusion.

How to find out why UTM EGAIS does not work?

Where to look for the cause of the malfunction?

If your UTM has stopped working or is unstable (it constantly turns off, communication with the EGAIS is lost), then you need to determine the cause of the malfunction.

All errors about a malfunction UTM writes in the log files of its services. As a rule, it is enough to look at the log files of the update and transport service to diagnose the problem.

The log files for these services are located here:

• C:\UTM\updater\l\ update.log- update service log
• C:\UTM\transporter\l\ transport_info.log- transport service log

These files are opened by Notepad, which is a standard MS Windows program. Files tend to contain a lot of textual information, so the file size can be large.

The log files contain a lot of information that helps to identify malfunctions of the UTM EGAIS. They record each step of the UTM operation, and in case of an error, detailed information about the error is displayed.

The latest events UTM EGAIS are at the end of the file, so if you have a failure, then to identify the error:

• - open and scroll the file to the very end;


• - look for the line with the inscription ERROR and the decoding of the error, as in the example below.

Having the text of the error on hand, you can fix UTM malfunctions quickly enough and even without the involvement of specialists.

It does not matter which key (Rutoken, JaCarta or other) you use, which operating system on your computer, wholesaler or retail... UTM will inform you about all the problems directly in the log files, even if it could not start.

Examples how to find an error in UTM and fix it yourself

An example of detecting error No. 1.

For example, in your file C:\UTM\transporter\l\ transport_info.log at the very end of the file there is information about the error:

2018-09-24 10:16:28,057 INFO ru.centerinform.crypto.c - Crypto library initialization

2018-09-24 10:16:28,171 ERROR en.centerinform.crypto.c - Crypto library initialization error

sun.security.pkcs11.wrapper.PKCS11Exception: CKR_USER_ALREADY_LOGGED_IN b>

at sun.security.pkcs11.wrapper.PKCS11.C_Login(Native Method)

at sun.security.pkcs11.wrapper.PKCS11$SynchronizedPKCS11.C_Login(PKCS11.java:1599)

at en.centerinform.crypto.j.a(Unknown Source)

According to this error, UTM has problems in operation that occurred on September 24, 2018 at 10:16 am, in particular, UTM stops with the error CKR_USER_ALREADY_LOGGED_IN.

Error detection example #2. We solve the problem ourselves.

For example, in the file C:\UTM\transporter\l\transport_info.log at the very end of the file there is information about the error:

2018-09-26 15:36:59,766 ERROR es.programador.transport.h.e - Error while receiving and reading documents from the EGAIS server

com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLException: java.security.ProviderException: Token has been removed

at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput(Unknown Source)

at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(Unknown Source)

at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(Unknown Source)

at com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(Unknown Source)

According to this error, UTM has problems in operation that occurred on September 26, 2018 at 15:36, in particular, the Token has been removed error is displayed in the UTM logs.

Even shallow knowledge of a foreign language can suggest that, most likely, UTM for some reason does not see the key for EGAIS.

You should make sure that the key is really connected to the computer and its light is on (or blinking). If the key is really connected and the light is on, then disconnect the key from the computer and reconnect it - after a few minutes the error usually disappears.

Error " Token has been removed"very common. Our technical support encounters it constantly, any user can diagnose and fix it on their own.

If you get an error " unknown function details undefined applet false"and does not let you into EGAIS, then leave a request with your contact details in technical support -->>