Computer lessons

Copy the key from the registry to the cryptopro flash drive. How to copy certificates in the cryptopro program

As a rule, an electronic digital signature is recorded on a USB drive. However, if you need to install a digital signature from a flash drive to a computer, that is, copy the digital signature to a computer, find out in this article how to do it quickly and easily.

Copy digital signature to computer

Of course, carrying a flash drive with you all the time is not always convenient. It may either become unusable, or it may simply not be available at the right time. In this case, a method will come to the rescue in which we copy the digital signature certificate to the computer itself, which will subsequently allow us to do without a USB drive.

In order to copy digital signature to computer, please follow the following instructions:

Insert the USB drive with digital signature into the computer and run the program CryptoPro CSP, go to the tab Service and press Copy….

In the window that opens, select the key container by clicking the button Review.

In the list of user key containers that opens, select a container and click OK.

After selecting a container, its name will appear in the line Key container name. In the next window just click Further.

In the next step, you need to specify information about the new container, for which enter Certificate name (think of any name for the key certificate). After that, click the button Ready.

For a newly created container, it is possible to set a new password. If you want to set a password, enter it twice in the appropriate fields. If you do not plan to use a password, leave the fields blank and click OK.

So, we have selected the object to copy and indicated the location where the certificate will be stored. Now you need to install this certificate.

In the tab Service click View certificates in container...

Clicking the button Review, in the window that opens, if you noticed, another key container has appeared. Select the newly created container and click OK.

After selecting a new container, click Further.

The window that opens will indicate the certificate to view. Click Install.

As a result, after your actions, a message about the successful installation of the certificate will appear. Click OK.

Ready. The digital signature is installed on the computer.


A copy of the EPC will be useful for:

  • signature security guarantees
  • ease of use

Some certification authorities provide a backup service.

Copying an electronic signature from a secure medium is carried out using the CryptoPRO CSP program.

A copy of the digital signature is made onto a secure medium, such as Rutoken/Etoken. A regular USB flash drive will not work.

Copying from CryptoPro CSP

First of all, download and install the CryptoPRO CSP program from the licensed website. Insert the digital signature media into the computer. Launch the previously installed program. Open the section - Tools → “Copy”.

In the window that appears, select - Review. Select the media you plan to copy → “Ok” → “Next”. In the PIN code entry line, insert the PIN code from your digital signature carrier

Give the new container a name using the Russian layout and spaces. Click → “Done”.

In the line - “Insert a blank key media”, indicate an empty key media. The program will prompt you to set a password. This action is optional. Click → “Ok”. It is worth noting that if you lose your PIN code, you will not be able to use the container. When recording an electronic signature on Rutoken, use the PIN code issued by the certification center.

When the operation is completed, the window will close. A new container will appear on the media, which will be a copy of the digital signature.

If problems arise when creating a duplicate yourself, you can contact our CA. Our managers will be happy to answer your questions. Contact us!

To perform any actions on the digital signature, copy the digital signature, delete or install it, you need the CryptoPro program installed on your computer.

  1. In order to copy the digital signature, you need to go to Start-All Programs-CryptoPro and run the CryptoPro CSP file.
  2. Next, go to the Service tab.

  1. Click on the “Browse” button.

  1. Select the required container and click “OK”.

Note:

In the image above, you can see the presence of two columns: On the left is the “Reader” column and on the right is the “Container Name” column. This information will help you decide which digital signature to copy.

The inscription “Register” in the reader column means that the digital signature is on the computer. Otherwise, the digital signature is located on some medium (flash drive, floppy disk or secure media). In the case shown in the image, there are three digital signatures recorded on the computer and one signature recorded on Rutoken.

You can understand which certificate you need to copy by looking at the “Container Name”. The “container name” is made up of the serial number, the date of issue of the certificate and the name of the organization.

In the case we are considering, we choose the digital signature located on the protected Rutoken media.

  1. Select and copy the container name, click “next”.

  1. Paste the container name copied in step 5 into the “Key container name” field, add any few characters or spaces and click the “Finish” button.

  1. Next, we need to select the location where we want to copy the digital signature. This could be a computer, flash drive or secure media. And click ok.

Note:

In the case we are considering, we copy the digital signature to a flash drive by selecting its name in the list of devices. If you need to copy your digital signature to your computer, you should select “Register” from the list of devices.

  1. Next, the system will ask you to create a password for the container. If you do not want to create a password, then leave the fields blank, as shown in the image. And just click “OK”.

This completes the digital signature copying.

Often people who use electronic digital signatures for their needs need to copy the CryptoPro certificate to a flash drive. In this lesson we will look at various options for performing this procedure.

By and large, the procedure for copying a certificate to a USB drive can be organized in two groups of ways: using the internal tools of the operating system and using the functions of the CryptoPro CSP program. Next we will look at both options in detail.

Method 1: CryptoPro CSP

First of all, let's look at the copying method using the CryptoPro CSP application itself. All actions will be described using the Windows 7 operating system as an example, but in general the presented algorithm can be used for other operating systems of the Windows family.

The main condition under which it is possible to copy a container with a key is the need for it to be marked as exportable when created on the CryptoPro website. Otherwise, the transfer will not be possible.

  1. Before you begin, connect the USB flash drive to your computer and go to "Control Panel" systems.
  2. Open section "System and safety".
  3. In the specified directory, find the item "CryptoPro CSP" and click on it.
  4. A small window will open where you need to move to the section "Service".
  5. Next, click the button "Copy...".
  6. A window for copying the container will appear, where you need to click on the button "Review…".
  7. A container selection window will open. Select from the list the name of the one from which you want to copy the certificate to a USB drive, and click "OK".
  8. The authentication window will then be displayed, where in the field "Enter password" you need to enter a key expression that is used to password the selected container. After filling out the specified field, click "OK".
  9. After this, you return to the main window for copying the private key container. Please note that in the key container name field the expression will be automatically added to the original name "-Copy". But if you wish, you can change the name to any other, although this is not necessary. Then click the button "Ready".
  10. Next, a window for selecting a new key media will open. In the list presented, select the drive with the letter that corresponds to the desired flash drive. After that press "OK".
  11. In the authentication window that appears, you will need to enter the same random password for the container twice. It can either correspond to the key expression of the source code or be completely new. There are no restrictions on this. After entering, click "OK".
  12. After this, an information window will be displayed with a message that the container with the key was successfully copied to the selected media, that is, in this case, to a flash drive.

Method 2: Windows Tools

You can also transfer the CryptoPro certificate to a flash drive exclusively using the Windows operating system by simply copying it via "Conductor". This method is only suitable when the header.key file contains an open certificate. However, as a rule, its weight is at least 1 KB.

As in the previous method, the descriptions will be given using the example of actions in the Windows 7 operating system, but in general they will be suitable for other operating systems of this line.


At first glance, transferring a CryptoPro certificate to a flash drive using operating system tools is much simpler and more intuitive than actions through CryptoPro CSP. But it should be noted that this method is only suitable when copying an open certificate. Otherwise, you will have to use the program for this purpose.

Copying the private key container is a mandatory action when reinstalling the SBS on another computer. You can also copy the certificate if you want to create a spare digital signature key.

Copying a private key container to a flash drive, floppy disk or token is a rather complicated process to avoid errors it is important to strictly follow our instructions.

CryptoPro: certificate copying

Step 1. Opening the CryptoPro program

To open the program follow this path:

Click menu Start, then go to ProgramsCryptoProCryptoPro CSP and enable the tab Service.

In an open window Service click the button Copy container.

Rice. 1.

Step 2: Copy the private key container

After pressing the button Copy container, the system will display the window Copying the private key container.


Rice. 2

In the open window you need to fill in the field Key container name.

Step 3. Entering the key container

There are 3 ways to fill out the field Key container name:

    Manual input

    Select from the list by clicking the Browse button

    Search by digital signature certificate

In addition to filling out the Key container name field, you must fill in the remaining search options:

  • - the switch is set to position User or Computer, depending on what storage the container is located in;
  • Select CSP to search for key containers - the required crypto provider (CSP) is selected from the proposed list.


Once all fields are filled in, click the button Further.

If a password is set for access to the private key, the system will ask you to enter it. Enter your password and click the button OK.

Step 4. Entering a new key container

The system will display the window again Copying a private key container, in which you need to enter the name of the new key container and set the switch The name entered specifies the key container to position User or Computer, depending on in which storage you want to place the copied container.

After entering, click the button Ready.

Step 5: Select media for the copied container

A window will appear on your screen in which you need to select the media for the copied container.

Insert the media (token, flash drive, floppy disk) into the reader and press the button OK.

Step 6. Set a password

The system will display a window for setting a password to access the private key.

Enter your password, confirm it, and check the box if necessary Remember your password.

If this box is checked, the password will be saved in a special storage on the local computer, and when accessing the private key, the password will be automatically read from this storage rather than entered by the user.


After entering the required data, click the button OK. The CryptoPro CSP cryptographic information protection tool will copy the private key container.

If you have any questions, you can order a consultation with a specialist.