Unable to sign an EDS document. Unable to add signature to Microsoft Office document

Dear piligrim2180, maybe you and I don't understand each other ... Let's in order from the very beginning:

We have deployed our own own center certification based on MS Windows Server 2008. This center issues certificates to users for signing documents and outgoing letters Email... After short testing (about 2 months), certificates were issued to all users and the appropriate settings were made.

Custom configurations:

  • MS Windows XP / MS Windows Vista
  • MS Office 2007 Standard

After the implementation, it turned out that, nevertheless, on some PCs of users (with MS Windows 7 Pro / MS Vindows XP) the above problem occurs and the document is not signed. :(

Now about the article you quoted: I do not quite understand why such difficulties? Signing a document is done in three steps. "Office Icon" -> "Prepare Document" -> "Add Digital Signature".

PS: In addition to MS Office documents and e-mail, the digital signature is not used for anything.

We really do not understand each other, because for the umpteenth time I repeat to you that both files and macros are signed.

If the document you want to sign contains macros, then this signature can certify both the document and the macro project.

You can create your own digital signature certificate by choosing the second option in the add digital signature pop-up window on first launch.

The digital signature, unlike the signature line, is not visible, but only puts the document into read mode. By adding an icon to the status bar. Like any digital certificate that is installed for Office documents or macros.

Office help:

Unlike the signature string, an invisible digital signature is not visible in the content of the document, but allows the recipient of the document to determine that the document has a digital signature by displaying it or by locating the button signatures on the status bar at the bottom of the screen.

Well, if you have problems with certificates, then the article will help you:

Digitally sign an Office document

Introduction to digital signatures

Compatibility

When you create your form template, you can enable digital signatures so that users can add them either to the entire form or to specific parts of the form. In Microsoft Office InfoPath 2007, you can also create a browser-compatible form template. A browser-compatible form template is a form template that was created in InfoPath using a special compatibility mode. A browser-compatible form template can be invoked by the browser when it is published to a server running InfoPath Forms Services. In browser-activated form templates, you can enable digital signatures to be added to specific parts of forms that users fill out. When digital signatures are allowed for parts of a form, these signatures apply only to the data in those specific parts of the form.

The rest is a security problem for those computers that do not accept digital certificates. This already needs to be looked at, on each, separately, which of the programs blocks the execution of data.

Do not seek God, not in a stone, not in a temple - seek God within yourself. The seeker, let him find.

Without a doubt main goal use and implementation electronic signature is a gradual transition from traditional paper-based document management to electronic. Such workflow implies that the printout of electronic documents is not required to send and store them.

The use of electronic document management will significantly reduce the delivery time of documents both within the organization and to external addressees, thanks to the use of modern communication channels. Unfortunately, postal delivery in our country it can take from one to two days, to one to two weeks, and sometimes a letter can be completely lost. Besides electronic document management allows you to significantly reduce the cost of paper, courier fees, postal services, and so on. Any legal force electronic documents acquired after signing them with an electronic signature.

Today, you can get an EDS in just a few days at any certification center. But what to do if a situation arises when he does not sign an EDS and gives an error? Of course, you need to contact the Certification Center, but you can try to fix the error yourself, or at least figure out its cause.

So, among the reasons why the key certificate stopped working in normal mode, you can name:

The private key on the container in use does not match the public key of the certificate

It is necessary to carefully check all closed containers on the PC, it is likely that the wrong container was chosen in a hurry or inadvertently. In the event that, for one reason or another, the required closed container was not found, then you will have to contact the CA to order a reissue of the electronic signature.

At startup, an error is thrown - certificate is not valid

It is necessary to try again to install the EDS according to the instructions of the Certification Center.

Lack of trust in the EDS certificate

It is necessary to re-install the CA root certificate, you can download them either on the AETP web portal, or find them on digital media that were supplied with an electronic signature.

The CryptoPro program has expired

It is necessary to contact the CA specialists, who must issue a new license key to the software.

No valid certificates found on PC

It is necessary to install an EDS and clarify whether your key certificate has expired. By the way, most common reason why does not sign the EDS, the expired certificate is just the same.

Everything tariffs for electronic signatures you can see

In chapter .

Hello everyone today I will tell you how to solve such a situation that Outlook does not see the S / MIME configuration name. A token was issued for signing and encrypting mail, etoken was successfully installed and seen. In theory, if everything is ok with the certificate, then S / MIME should be configured automatically and see this certificate, but I haven't seen the certificate in Outlook for the life of me, public key was successfully installed and was seen in the certmgr.msc snap-in. Let's see what the problem was.

S / MIME is designed to provide cryptographic security for email. Authentication, message integrity and a guarantee of preservation of authorship, data security (through encryption) are provided. Most modern email programs support S / MIME including Outlook.

This is how the lack of a certificate in S / MIME looks like. Although the token should have been automatically registered in the configuration name

When trying to create a configuration manually when sending a signed letter, we received the following error

Microsoft Office outlook cannot sign or encrypt the message because there are no certificates that can be used to send from the address.

The first thing to do is check if the configured mail in Outlook and in the EDS on etoken is the same. In Outlook, go to Service-Account Settings.

We check the email address in the settings and compare it with the E field in the certificates.

We go to the Composition and check, in my case it turned out that when the certificate was issued after the email, they put a space and because of this there was a difference, as soon as the certificate was reissued, then everything immediately became ok.

This is how the error can be easily solved Outlook does not see the S-MIME configuration name.

Many procurement participants, regardless of experience, are faced with the problem of correctness of work on electronic trading platform... These errors can be detected at any time, including during electronic trading.

The consequences can be very different, namely:

  • Application for participation in the competition not submitted in time
  • Lost e-auction
  • State contract not signed in time

The three most common problems with electronic signatures

  1. The procurement participant certificate is not displayed on the electronic site
  2. Electronic signature does not sign documents

In fact, there can be much more errors, but we will analyze the main and their causes, and also outline possible ways to eliminate the problems.

The most important thing is to remember that for the electronic signature to work correctly, you must use the Internet Explorer browser not lower than version 8 and, preferably, not higher than 11 (with version 11 there is no guarantee of stable signature operation).

The signing key certificate is not visible on the site when trying to log in

In this case, the error was caused by several reasons at once, namely:

  • Incorrect configuration of the signing key certificate
  • Internet browser is incorrectly configured
  • Missing root certificate of the Certification Authority

How to solve the problem?

First of all, you need to make sure that you have correctly installed the open part of the certificate in the personal one through the cryptographic information protection tool (Crypto Pro). In this case, the version of the installed program is suitable for the type of your operating system.

Then, in the settings of the Internet Explorer browser, you must add the site addresses to the trusted sites and enable all ActiveX controls.

Electronic signature gives an error when signing documents

Typically, this error occurs in a number of cases:

  • The license of the CryptoPro program has expired
  • Media with different certificate inserted

How to fix it?

To do this, you need to obtain a new license by contacting the Certification Center. After the license has been successfully received, you need to launch CryptoPro and enter the serial number of the license.

In the second case, you need to check all closed containers (media) inserted into the USB connector of the computer and check that the correct certificate was selected.

The system gives an error when entering the electronic platform

This error can be caused by a combination of the reasons indicated above. As practice shows, such an error first of all appears due to the incorrectly installed Capicom library. We recommend that you check for the installed library on your computer and pay attention to the need to copy 2 system files with the ..dll extension to one of the Windows folders when using a 64-bit system.

In order for you to avoid such errors, before installing an electronic signature, read on installing and configuring an electronic signature or order for the release and configuration of an electronic signature in our company.