Removing the subscriber point of earlier versions. Typical Errors Continent AP Working in the Program

Order

Delete, install, generating key authentication keys "Continent-AP", sending a request for an authentication key certificate, issuing a certificate.

Deleting a subscriber point of earlier versions

If you have previous versions of the subscriber station installed on your computer Continent APbefore installing you need to remove old version. For this:

Starting control panel - installation and removal of programs - Continent-Upand press Change.

After successfully deleting a subscriber station, click Readyand restart the computer.

Installation of the subscriber point

Enter the computer administrator rights.

Note. The user administrator rights enters the local group of administrators.

Complete all applications running on the computer.

Run to execute the file Setup.exe.located in the catalog with the distribution kit of the subscriber point.

The installation program will start executing the preparatory actions, and the message will appear on the screen. After the preparatory operation is completed, the starting dialog of the installation wizard will be displayed.

Press the button Further To continue installing the subscriber point

A dialog appears on the screen containing a license agreement to use the software product.

Read the license agreement and, if you accept its terms, put the mark in the "I accept license agreement terms" and click Further.

Specify the IP Access Server Address

for connecting throughInternet83. 169.236.3

Press the button Further

Press the button Set

ATTENTION! For the correct operation of the program, you must respond positively on all warnings that may appear during the installation of the drivers!

After installing the subscriber station, click Ready

A request to restart the computer will appear on the screen.

Press the button Yes For the immediate reboot of the computer and start working with the subscriber point.

Forming a closed and open (query file of the certificate) of authentication keys.

The formation of authentication keys is made on a workstation defined as the subscriber point of Apkche "Continent-AP", with installed on it:

cryptoprovider "CryptoproCSP 3. 6.
software "Continent-AP" versions3.5.68, 3.5.71, 3.6.

To form closed and open keysusing "Continent-AP" versions 3.x Need:

Run "Continent-AP" (Start - Programs - Informschita - Subscriber Point Continent - Management Program).

Press the right mouse button on the icon "Continent-AP" located in the lower right corner of the screen - call the menu "Certificates - Create a request to a user certificate. "

In the window that appears "Ski Continent-Up »Fill the fields:

In the field "Files to save a certificate request - electronic form »The path to the file to which the request will be saved to the publication of the authentication key certificate. This file (file request with expansionrEQ. ) It will be necessary to transfer to the UFK in the Republic of Crimea (or the department of UFK in the Republic of Crimea).

The "Paper Form" field is not necessary.

To generate a key, click the button "OK"

In the appeared window "CryptoproCSP. »You need to select a magnetic medium for the key container created and press the" OK "button (the diskette" 3.5 ", the OS registry is supportedWindows, Touch Memory DS 1993 - DS 1996, electronic key with interfaceUSB , Replaceable media with interfaceUSB).

After pressing the "OK" key, the CSP cryptopro window appears, in which you can set the password to the key container created (howeverpassword is not desirable, since the lost password is not restored!).

A formed request for an authentication key certificate in this case is on diskC: \\ k-ap_31-03-2008_151130.req (The query file name will differ from the example above), the container with a closed part of the key will be located on the selected key media.

The manufactured key container is subject to accounting in accordance with "Instructions on the organization and securing storage, processing and transmission over communication channels using funds cryptographic protection Information with limited access not containing information constituting the state secret "commissioned by the order of the FAPSI of June 13, 2001 No. 152.

A formed request for a certificate with expansion *.rEQ. Provide for registration in UFK in the Republic of Crimea com. № 110 or in

Crypto Protection System Continent-AP from the Developer "Security Code" is a software and hardware complex that provides remote access Networks of large municipal organizations, such as GAS "Elections" and the Federal Treasury. To update Ski "Continent-AP" you need to completely remove previous version This program from a computer: otherwise, the installation of a new software will be impossible due to conflicts with the system.

Work in the program

Continent-AP provides users with such as:

protected access to RDP tools to computers and portable devices using a special cryptographic algorithm certified according to GOST 28147/89 (functions in a range of reverse response mode);
production of a multistage algorithm for authentication of remote users based on certificates open keys Standard X.509, which ensures a high degree of security transmitted under the APC data;
support external VPN clients for Linux and Windows OS, including. electronic keys Token, IKEY, IButton identifiers, floppy disks and flash drives;
communication with the "Continent" system with mobile devices and stationary PCs at a speed of up to 16 MB per second;
much.

To access SKZi, you must use the valid certificates of the root certification authority:

cER - Custom certificate;
p7B - root certificate.

To install Root Certificate, you need:

Unzip file with certificates to a key drive - it can be a disk, flash drive and other removable media with a key container where closed keys are stored, which are generated by employees of the corresponding authorized department when creating a request for a custom certificate. The key container in its content is a foler with attachments of type "Header.key", "Masks.key" and so on.
Install the certificate in the "Storage" on the PC. To do this - on the panel windows tasks In a tray, find the shield icon with the inscription "AP" - usually the specified object is located in the lower right corner of the monitor, next to the time settings and date.
In the absence of an application, the tray will need to start it from the "Start" menu. Select the section Opening menu "Start" - "Programs", go to subsection "Security Code", in the "Subscriber Point Continent" folder and click the "Management Program" icon.
In the opened context menu, go to the "Certificates" section: In the Options, select the "Install SERT. user ".
Go to "Explorer" - press the combination of Win + E and go to the removable media on which the key container file certificates are stored.
Select the "user.cer" file and click "Open".
In the audition dialog box that opens, "Select a key container ..." - click on the name of the key container. After the element is highlighted in blue, tap on ok.
When the appearance of the window appears Cryptopro CSP. Main password access for the specified container, then click on "OK". Password is issued to the user who formed an application for a certificate. If the password has been forgotten or lost, it will be necessary to form a new application for the receipt of the key, while you should withdraw the current certificate.
A dialog box appears in which you need to click on "Yes, manually".
Now you need to download the certificate called "root.p7b" - go to the explorer to the removable media, click on the right mouse button and select the Open Context menu option.
Get acquainted with the text presented in the "Security Warning" window, and then tap on the "Yes" interactive key.
The screen will appear "Import Custom Sert. successfully completed. "
After clicking on the "OK" key, you can connect to the access server.

To remove certificates to continent-AP, you will need to perform the following operations:

Right click on the shield icon in the tray on the bottom of the toolbar: Go to the configuration menu item "Settings" and select the "SKZI Continent-AP" section.
In the "SKZI Continent-AP" dialog box that opens, go to the "Security" tab.
In the "Advanced (Selecting Parameters)" section, click on the "Parameters ..." interactive key.
In the menu that opens " Extra options security "in the section" Safe input"Activate" Properties ".
A dialog box opens, in the left part of which the "Server Dostupa" element is located, and in the right - "CA SD" (a particular user can have other keys names). To delete the specified certificates, you will need to click on the button located in the lower right. open window- "Reset the Marded Certificate", then tap on "OK" and exit "Settings".
Now you need to completely delete the ".cer" file of the Continent-AP from the key storage. To do this, in Windows 7, you will need to call the "Run" window with the Win + R keys or through the Start menu - "Run". In version 10 operating system You need to click on the magnifier icon located in the lower left corner of the display to the right of the Start menu, and enter the "Run" command or hold the combination of Win + R.
Drive the command "Certmgr.msc" without quotes, then tap "ENTER".
In the event of an error type, "" Does not be able to find. MSC "- perform the following 7 steps, in the absence of ERROR - go to 18 points of the current instruction immediately.
In the "Run" window, drive the code word "MMC" without quotes and click on "OK".
In the "Console" window, go to the extreme left section of the "File" menu, select the fifth item to "add or remove the snap" in the open list.
In the dialog box that opens, go to the "Isolated Snap" tab and click the Add "key, located in the lower left corner of the screen.
The monitor will show a list of available snapshots. Click on "Certificates", and at the bottom of the "Add Isolated Snap" window to click on the Add key.
In the "Equipment of the Certificate Manager" to set the mark next to the "My account... "and click on" ready. "
Exit "Add snap" by clicking "Close".
In the main part of the active window "Add / delete ..." certificates of the current user will appear - click on the "OK" key.
The "Console" window is displayed under the "Certificates" window - select objects from "CA SD" in the "Who is issued" column, located on the right side of the screen, and click on the "Delete" option.
In the left side menu, go to the "Trusted Root Centers ..." section - "Certificates" and uninstall an object called "CA SD".
Get out of "snap" without saving.
You can re-install a new ".cr" format file.

Uninstalling program

Before you delete the continent-AP from the computer, you need to create a system recovery point, since in case of incorrect uninstalling components of SCJi, problems may arise when you try to install this software and hardware complex on the PC. To do this, you must perform the following actions:

Now you can safely delete the continent-up 3.6 with PC and clean the registry from residual files of this program.

Standard uninstallation

In order to remove Continent-AP 3.6 with a PC, it is recommended to follow the instructions:

Exit the program in the tray - click on the icon in the form of a shield with the inscription "AP" with the right mouse button, and select the "Exit" option in the context menu.
To believe that the software is not listed in the list of background processes and in autoload. Go to the "Task Manager". You can perform this operation by pressing the Ctrl + Alt + Delete combination and select the appropriate Task Manager tool either through the "Run: Click Win + R menu and enter the code phrase" taskmgr "without quotes, tap" ENTER ".
In the Processes tab, complete the executable EXE uninstalled SPJ, click on the right mouse button and activate the "Remove Task" option.
Go to the "Startup" tab and turn off the right mouse button uninstalled by pressing the right key and select the "Disable" option.
Go to the "System Configuration" window. You can perform this action through the magnifying glass icon located to the right of the Start menu, - enter the "Configuration" command or "MSCONFIG" key. You can also get into the configurator window alternative way: clamp Win + R, to "Run" Password "msconfig" without quotes - "ENTER".
Go to the "Services" tab, click on "not display Microsoft services", tap "Disable everything" (after committing this action Clean the entire list of automotive programs). You can only turn off the uninstalled SCJ. To do this, in the general list of services, find the specified object and remove the checkbox located on the left of its name.
In Windows 7, it will also be necessary to go to the "Auto-loading" tab and disable the executable process using the "Disable" option.
Close the "msconfig" window after pressing the Apply key.
Implement the computer's reboot.
In OS 10, you need to go to the "Start" menu, click on the gear icon. In the Windows Settings window, select the "Applications" subsection.
In "Annexes and Opportunities", find the uninstalled "Management Program" using an embedded search string - click on the found search results by right-click and initiate deletion.
Follow the prompts of the "Master of the Installation" - click "ready" at the end of the uninstall process.
Reload PC.
After turning on the device - go to the registry editor tool - press Win + R and enter the "REGEDIT" command, tap on "OK".
In the Registry Editor window, select the left left menu item "File" - section "Export". In the quality of the export range, specify "ALL REGISTRY", then enter any file name and click "Save" in the desired directory. Subsequently, you can restore the data from the specified source using the "Import" option.
Click the Ctrl + F combination and search for the residual components of the uninstalled application - click "Find Next".
A list of records in Registry will be displayed on the monitor: Clean the individual entries located in HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE.

Note! Inexperienced users, it is better to skip a step with a manual net registry, since the likelihood is that their actions can lead to the operating breakage. You can use a special tool for cleaning the registry from residual files, which is called Reg Organizer. There is a full version of this software solutionand portable exe, which does not require installation.

In order to remove the keys and files from the registry, the keys and files remaining after removing the continent-AP versions 3.5, 3.6 and 3.7 with the help of Regorganizer will be required:

Alternative way to remove the program

If the user has little time and urgently need to remove the continent-up program from its computer, then one of the specially developed utilities of uninstallastors will be useful. Best Solutions:

CCleaner;
Revo Uninstaller;
ADVANCED SYSTEMCARE (IOBIT);
Uninstall Tool.

All specified applications operate in about the same principle: produced standard removal applications, after which they clean file System and the registry from the residual components of the software. For example, in order to completely delete Continent-AP 3.7 with the help of the free CCleaner software, you will need to follow the instructions:

Information security tool "Continent-Up" 3.6 - Pragmet VPN Client, allowing a remote user to install a secure connection with the APKCH access server "Continent".

Appointment "Continent-Up" 3.6:

Protection of connection with remote arm

In cases where the remote office operates only 1-2 employees and for some reason, the installation of the apks continent is not an advantage, it is possible to secure ARM to the resources of the automated enterprise system using the customer's software VPN continent-up.

Protection of connections with mobile clients

Providing the ability to secure connection to information resources Enterprises for mobile employees and company management. On the laptops of mobile employees, a software VPN client continent-up can be installed.

Certificates

Continent-Up 3.6 - a certified solution, has certificates: FSTEC of Russia for compliance with ITU 3 and NDV levels 3, FSB of Russia Ski class KS1, X2 (using pack "Sable").

Opportunities "Continent-Up" 3.6

Cryptographic data protection

The cryptographic protection of the transmitted data is implemented on the basis of Russian cryptographic algorithms in accordance with GOST 28147-89 in feedback gamming mode.

Authentication / Identification of remote users

Identification and authentication of a remote user When you install the connection between the subscriber point and the APCCH access server, the Continent is based on public key certificates. The scheme is implemented using the X.509 certificate certificates. There are 2 options for working with certificates, trusted certification authority is the access server management program - the first option and the trusted center is the external certification authority - the second option, in the second version it is possible to integrate with Cryptopro.

Support for a variety of key carriers

The key information carrier can perform a floss, flash drives, electronic keys ETOKEN, RUKOKEN, IKEY and is also possible to use iButton identifiers in case the PC allows you to install a package sable or TM Card.

Integrated firewall

Error messages arising when installing the connection of the subscriber station Continent-AP.

The subscriber point allows you to install remote secure connections via the Continent 3 PPP Adapter modem emulator. When connecting the subscriber station, the Continent-AP may appear error messages listed below.

Error 721. Remote computer Not responding.

1) You may have no internet connection.

2) Any programs block ports. Disconnect the antivirus, firewall.

3) Delete if installed, firewall, which runs with the Continent-AP program.

4) if you use wired InternetPerhaps the provider blocked the ports needed to work the Continent-AP program. To check, establish an Internet connection via a USB modem.

Error 628 Connection was closed.

See Error 721

Error 629 Connection was closed by a remote computer.

See Error 721

This error occurs when the TCP / IP protocol properties prescribe an IP address manually, while the server must produce them automatically. To fix it this errorYou must go to the Connectant-AP connection settings.

In the "Network" tab, highlight the TCP / IP Internet Protocol string and click the Properties button.

In the window that opens, put the following switches:

"Get an IP address automatically";

"Get the address of the DNS server automatically."

Error 703: Connection requires some data from the user, but the application does not allow user interaction. "

Go to the settings of the Continent AP - on the Safety tab, the "Parameters" button, the button - "Properties", "Reset the Wired Certificate".

Error 734 PPP control protocol was interrupted.

1. Focus on the error that appears before this.

2. Check the system date.

Error. The server refused to access the user. Cause of failure Multiple user input is prohibited.

Wait a few minutes and re-establish a connection.

The server refused to access the user.Cause CLIENT-CERT NOT FOUND.

The 0x8009001D key signature error (the supplier library is initialized incorrectly).

The expired license of the Cryptopro program

A key signature error 0x80090019 (a set of keys is not defined).

Remove the memorized passwords (cryptopro \u003d\u003e service \u003d\u003e Remove the memorized passwords).

The certificate is possible expired. Check by opening the user.cer file, the validity period.

Key Signature Error 0x8009001F (incorrect key set parameter).

Error signature key 0x00000002 (Unable to find the specified file).

Delete this version Continent-AP programs and install the Continent version 3.5.68.

The server refused to access the user. Cause of failure: the user's input is locked.

You were blocked on the UFK server. Call and find out the cause of the lock.

Violated the integrity of the files. Contact the system administrator.

It is necessary to "correct" the program Continent-AP through the installation and removal of programs

Error 850: The computer does not set the protocol typeEAP required to authenticate remote access connectivity.

It is necessary to "correct" the program Continent-AP through the installation and removal of programs

Insert key media. The set of keys does not exist.

Continent Inserted.

When you install the connection at the certificate selection phase, make sure that the correct certificate is selected.

Make sure the cryptopro sees the key

Insert the key media (the "device" field is empty).

Make sure the clock flash drive Continent Inserted.

Open the cryptopro and on the tab "Equipment", Select "Set up readers ...".

In field "The following readers are installed:" Remove all readers, choosing them in turn and pressing the button "Delete".

Click "Add"

A reader installation wizard window appears. Click "Further"

In the next step of the reader installation wizard in the field "Manufacturers" Choose "All manufacturers". And in the list "Available readers"choose "Everything removable discs» . Press the button "Further".

In the next window, click "Further"

In the window that appears, click "Ready."

Try to reinstall the connection.

Pictogram disappeared in the tray.

Go to "Start" \u003d\u003e "All programs" \u003d\u003e "Security code" \u003d\u003e "Continent subscriber point" and select "Management Program".

If the icon does not appear, right-click on the Windows taskbar (or press Alt + Ctrl + Delete) and select "Task Manager".

Click the Processes tab and select "AP_MGR.EXE" in the list and click Finish Process.

Then repeat item 1.

For installation new version Continent-AP 3.6 It is necessary to pre-delete the old version of Continent-AP 3.3, the Continent-AP version 3.6 is available for download at http: // www. ***** / CONT / INSTALL / CONT_CLIENT_3.6.83.0.ZIP

and install the installation of SKZi "Continent-AP"

1 2

in general, the usual installation ...

3Https: //pandia.ru/text/78/111/images/image004_17.jpg "width \u003d" 307 "height \u003d" 246 "\u003e

when installing, disable the item "Firewatch"

(Read more about the built-in ITU in the Continent-AP-AP-Windows manual - Admin Guide. PDF page 5)

5https: //pandia.ru/text/78/111/images/image006_12.jpg "width \u003d" 323 "height \u003d" 247 src \u003d "\u003e

IP. Access server address indicate 91.242.171.57After completing the installation, be sure to restart the PC.

7 https://pandia.ru/text/78/111/images/image008_9.jpg "width \u003d" 316 "height \u003d" 242 src \u003d "\u003e

After rebooting the PC in the "Programs" menu, the "Security Code" will appear.

The file is located at http: // www. ***** / CONT / INSTALL / REQUEST. XSL Copy to folder C: \\ Program Files \\ Security Code \\ Continent Client Replacing Mounted. If Request. XSL you have preserved as Request. XML, delete the installed, and in the newly copied change the extension to * .xsl.

Also in the taskbar, the icon will appear by clicking PCM (right mouse button)

9

carefully look at the following form of request.

Employee "Employee" Fix " organization", Abbreviated name (usernames or names of your PEVM are unacceptable). When creating a quotation request does not specify.

In the field "Description" - the name of the organization is completely;

In the field "Organization" - abbreviated name;

All fields are required.

The email address must be specified by the official (if there is no one - boost), messaging, requests and certificates will be used only Through the e-mail specified in the electronic request with the application.

Request blank to print and fill. Edit the output shape (* .html) is not needed.

The proposed electronic form of the query that contains the name of the current windows User. (You can edit at your discretion), the current time is left unchanged.

Click the "Details \u003e\u003e" button and select the cryptoperder on which your key will be created, to create an exported key, it is necessary when you form a certificate request, select the Cryptopolder field to select Cryptopro CSP.. After pressing the "OK" button, you will begin to form the secret part of the key.

11 CRPTOPRO CSP "(22 '' floppy disk, USB Flash. drives, registry, etoken, rutoken, etc.).

12 13

you must move the mouse and press the keyboard keys.

14 https://pandia.ru/text/78/111/images/image016_1.jpg "width \u003d" 258 "height \u003d" 145 src \u003d "\u003e 13

Electronic (<имя запроса>.req) and paper (<имя запроса>.html) forms send to ***** @ *** RU 1 (p.6-7). When filling out a paper form, you should write the full name of the organization (the filling is welcome). Waiting for a response message with certificates. If necessary, the user can copy the cryptopro container to another media and install it to another workplace.

Installing open key certificates SKI "Continent-AP" https://pandia.ru/text/78/11/images/image018_2.gif "width \u003d" 587 "height \u003d" 303 "\u003e

select the resulting certificate

17

indicate the secret container

18

we agree to the import of the root certificate (yes, automatically)

19

we establish and agree with the proposed

20

21

run the action "Connect Continent-AP"

22

Color pictogram speaks of a successful connection with the access server.

Check team Ping. 10.12.16.16 Availability of the URM server.

Obtaining a key certificate Continent-AP:

1) non-resident customers when sending all documents emailThe attached files must be scanned in color with a resolution allowing you to read all the signs on the print printing. In the body of the letter should be specified by the sender. Originals of documents on paper support and printing should be sent by mail or other affordable way Within 3 (three) working days to the Department of Finance of the YNAO. The option is convenient for remote users who are not able to personally bring the required documents. Documents sent It is recommended to pack the ZIP embedded in Windows. If everything is completed correctly in the response message will be attached by the user certificate, root certificate and 1 (one) license SKZI Cryptopro CSP 3.6 to 1 (one) workplace.

23

2) Documents are delivered on paper with the signature and printing of the Organization to the INAO Finance Department at the Salekhard, Pros-CT. Youth, 3rd floor, 311 cab.

In case of receipt of the certificate, the representative of the organization needs to have the following documents with him:

Power of Attorney, signed by the head of the Organization with the presence of a press,

available for download at (http: // www. ***** / Cont / Install / Warrant. Doc);

Media for saving certificates;

Document certifying personality.

Briefly about creating a request:

1. Install the required software, replace the Request query template. xsl;

2. Move to print and fill out without editing an HTML file;

3. Put the completed, signed with the seal of the organization form;

- For users who are not able to personally deliver a request form with printing:

4. Playing in ZIP (REQ, HTML) and send to the box ***** @ *** RU;

5. For receipt of certificates and license in response letter;

6. And only after receiving certificates to send the original in the envelope;

- For users who have the opportunity to personally bring a request *.req and paper shape *.hTML personally:

7. Whether personally in the Department of Finance YNAO originals

with yourself have a media for writing certificates

document certifying personality

the completed power of attorney http: // www. ***** / CONT / INSTALL / WARRANT. DOC