home  /  Operating systems (OS)  /  Deletion of the subscriber station of earlier versions. Common errors continent ap Continent removal utility

Deletion of the subscriber station of earlier versions. Common errors continent ap Continent removal utility

Operating systems (OS)
19.09.2020

The Continent-AP information cryptographic protection system from the Security Code developer is a software and hardware complex that provides remote access to the networks of large municipal organizations, such as GAS Vybory and the Federal Treasury. To update the Continent-AP cryptographic protection system, it is necessary to completely remove the previous version of this program from the computer: otherwise, the installation of new software will be impossible due to conflicts with the system.

Work in the program

Continent-AP provides users with such opportunities as:

  • secure RDP access to computers and portable devices using a special cryptographic algorithm certified in accordance with GOST 28147/89 (operates in gamma mode with a reverse response);
  • the creation of a multi-stage authentication algorithm for remote users based on X.509 public key certificates, which ensures a high degree of security for the data transmitted within the APC;
  • support for external VPN clients for Linux and Windows OS, including electronic keys Token, iKey, iButton identifiers, floppy disks and flash drives;
  • communication with the Continent system from mobile devices and stationary PCs at a speed of up to 16 Mb / s;
  • much more.

To access the CIPF, you must use valid certificates of the root certification authority:

  • cer - user certificate;
  • p7b - root certificate.

In order to install root certificate, you need:

  1. Unzip the file with certificates to the key drive - this can be a disk, flash drive and other removable media with a key container, where private keys are stored, which are generated by employees of the relevant authorized department when a request for a user certificate is generated. In terms of its content, a key container is a folder with attachments like "header.key", "masks.key", etc.
  2. Install the certificate in the "Storage" on the PC. To do this - on the Windows taskbar in the tray, find the shield icon with the inscription "AP" - usually the specified object is located in the lower right corner of the monitor, next to the time and date settings.
  3. If there is no application in the tray, you will need to launch it from the Start menu. Select the section of the opened menu "Start" - "Programs", go to the subsection "Security Code", to the folder "Subscriber Point Continent" and click on the icon "Control Program".
  4. In the context menu that opens, go to the "Certificates" section: in the drop-down list, select the "Install cert. user ".
  5. Go to "Explorer" - press the Win + E combination and go to the removable media on which the certificates of the key container file are stored.
  6. Select the file "user.cer" and click "Open".
  7. In the dialog box that opens, the inscription "Select a key container ..." will appear - click on the name of the key container. After the element is highlighted in blue, tap on "OK".
  8. When the CryptoPro CSP window appears, enter the access password for the specified container, then click on "OK". Password is issued to the user who submitted an application for a certificate. If the password has been forgotten or lost, you will need to generate a new application for a key, and the current certificate should be revoked.
  9. A dialog box appears in which you need to click on "Yes, manually".
  10. Now you need to load the certificate called "root.p7b" - go to the explorer on the removable media, right-click on the object and select the "Open" context menu option.
  11. Read the text presented in the "Security Warning" window, and then tap on the "Yes" interactive button.
  12. The screen will display the message “Import custom certificates. completed successfully ".
  13. After pressing the "OK" button, you can connect to the access server.

To delete certificates in Continent-AP, you will need to perform the following operations:

  1. Right-click on the shield icon in the tray on the bottom toolbar: go to the "Settings" context menu item and select the "Continent-AP" section.
  2. In the opened dialogue window "CIPF Continent-AP Properties" go to the "Security" tab.
  3. In the "Advanced (custom)" section, click on the "Options ..."
  4. In the opened menu "Additional security settings" in the section "Secure login" activate "Properties".
  5. A dialog box will open, on the left side of which there is an element “Server Dostupa”, and on the right side - “CA SD” (a specific user may have different names for keys). To delete the specified certificates, you will need to click on the button located in the lower right part of the open window - "Reset the stored certificate", then tap on "OK" and exit "Settings".
  6. Now you need to completely delete the Continent-AP “.cer” file from the key storage. To do this, in Windows 7, you will need to call the Run window by pressing the Win + R keys or through the Start menu - Run. In version 10 of the operating system, you need to click on the magnifying glass icon located in the lower left corner of the display to the right of the "Start" menu, and enter the "Run" command or hold down the Win + R combination.
  7. Type in the command "certmgr.msc" without quotes, then tap "Enter".
  8. If an error like "Can't find .msc" appears, follow the next 7 steps, if there is no error, go directly to step 18 of the current instruction.
  9. In the "Run" window, drive in the code word "mmc" without quotes and click on "OK".
  10. In the "Console" window go to the leftmost item of the "File" menu, in the drop-down list select the fifth item - "Add or remove snap-in".
  11. In the dialog box that opens, go to the "Isolated equipment" tab and click on the "Add" button located in the lower left corner of the screen.
  12. The monitor will display a list of available snap-ins. Click on "Certificates", and at the bottom of the "Add standalone snap-in" window, click on the "Add" button.
  13. In the "Certificate Manager Snap-in" check the box next to the "my account ..." option and click on "Finish".
  14. Exit "Add Rig" by clicking "Close".
  15. In the main part of the active window "Add / Remove ..." certificates of the current user will appear - click on the "OK" button.
  16. The "Console" window will be displayed under the name "Certificates" - select the objects with "CA SD" in the "Issued by" column, located on the right side of the screen, and click on the "Delete" option.
  17. In the left side menu, go to the "Trusted Root Authorities ..." - "Certificates" section and uninstall the object called "CA SD".
  18. Exit Rig without saving.
  19. You can reinstall the new ".cr" file.

Uninstalling the program

Before uninstalling Continent-AP from your computer, you need to create a system restore point, since in case of incorrect uninstallation of CIPF components, problems may arise when you try to install this software and hardware complex on your PC again. To do this, follow these steps:


Now you can safely remove Continent-AP 3.6 from your PC and clean the registry from the residual files of this program.

Standard uninstall

In order to remove Continent-AP 3.6 from your PC, it is recommended to follow the instructions:

  1. Exit the program in the tray - right-click on the icon in the form of a shield with the inscription "AP" and select the "Exit" option in the context menu.
  2. Make sure that the software is not included in the list of background processes and in startup. Go to the "Task Manager". You can perform this operation by pressing the combination Ctrl + Alt + Delete and choosing the appropriate tool "Task Manager" or through the menu "Run: hold Win + R and enter the code phrase" taskmgr "without quotes, tap" Enter ".
  3. In the "Processes" tab, finish the executable exe of the uninstalled CIPF - right-click on the object and activate the "End task" option.
  4. Go to the "Startup" tab and disable the uninstalled software by pressing the right mouse button and selecting the "Disable" option.
  5. Go to the "System Configurations" window. You can perform this action through the magnifying glass icon located to the right of the Start menu - enter the "Configuration" command or the "msconfig" key. You can also get to the configurator window in an alternative way: hold Win + R, in Run, type in the password "msconfig" without quotes - "Enter".
  6. Go to the "Services" tab, click on "Do not show Microsoft services", tap "Disable all" (after completing this action, the entire list of startup programs will be cleaned). You can disable only the uninstalled cryptographic information protection tool - for this, find the specified object in the general list of services and uncheck the box to the left of its name.
  7. In Windows 7, you will also need to go to the "Startup" tab and disable the executable process using the "Disable" option.
  8. Close the "msconfig" window after pressing the "Apply" button.
  9. Reboot the computer.
  10. In OS 10, you need to go to the Start menu, click on the gear icon. In the window "Windows Settings" select the subsection "Applications".
  11. In the "Applications and Features" find the uninstalled "Control Program" using the built-in search bar - right-click on the found search result and initiate removal.
  12. Follow the prompts of the "Installation Wizard" - click "Finish" at the end of the uninstallation process.
  13. Restart your PC.
  14. After turning on the device - go to the tool "Registry Editor" - press Win + R and enter the command "regedit", tap on "OK".
  15. In the “Registry Editor” window, select the leftmost item of the “File” menu - the “Export” section. Specify "All registry" as the export range, then enter any file name and click "Save" in the required directory. Subsequently, you can restore data from the specified source using the "Import" option.
  16. Hold down the Ctrl + F combination and look for the residual components of the uninstalled application - click "Find Next".
  17. The monitor will display a list of registry entries: clear individual entries located in "HKEY_CURRENT_USER" and "HKEY_LOCAL_MACHINE".

Note! It is better for inexperienced users to skip the step with a manual clean registry, as there is a high probability that their actions can break the OS. You can use a special tool for cleaning the registry from residual files called Reg Organizer. There is both a full version of this software solution and a portable exe, which does not require installation.

In order to remove from the registry "garbage" keys and files left after uninstalling Continent-AP versions 3.5, 3.6 and 3.7 using RegOrganizer, you will need:


Alternative way to uninstall the program

If the user has little time and urgently needs to uninstall the Continent-AP program from his computer, then one of the specially designed uninstaller utilities will come in handy. Best solutions:

  • CCleaner;
  • Revo Uninstaller;
  • Advanced SystemCare (iObit);
  • Uninstall Tool.

All these applications operate on approximately the same principle: they perform a standard removal of the application, after which they clean the file system and registry from residual software components. For example, in order to completely remove Continent-AP 3.7 using the free CCleaner software, you will need to follow the instructions:


15. "Error" Insert the key carrier. The keyset does not exist.

15.1 Make sure the Continent key media is inserted.

15.2 When establishing a connection at the stage of choosing a certificate, make sure that the correct certificate is selected.

15.1.3 Make sure that CryptoPro sees this key.

16. "Error" Insert the key carrier (the "Devices" field is empty).

    Make sure the storage medium with the Continent key is inserted;

    Open CryptoPro and, on the "Equipment" tab, select "Configure readers";

    In the field "The following readers are installed" remove all readers by selecting them in turn and pressing the "Remove" button;

    Click "Add";

    The Reader Installation Wizard window will appear. Click "Next";

    In the next step of the Reader Installation Wizard, in the Manufacturers field, select All Manufacturers. And in the list of "Available readers" select "All removable drives". Click "Next";

    In the window that appears, click "Finish";

    Try to re-establish the connection.

17. "Error" The icon located in the tray is gone.

17.1 Go to "Start" \u003d\u003e "All Programs" \u003d\u003e "Security Code" \u003d\u003e "Subscriber Point Continent" and select "Control Program".

17.2 If the icon does not appear, right-click the Windows taskbar (or press ctrl + alt + delete) and select Task Manager.

Go to the Processes tab and select AP_Mgr.exe from the list and click the End Process button.

Then repeat point 17.1.

18. The server denied access to the user "Invalid key usage type".

18.1 Reinstall the certificate after clearing the "remembered passwords" in CryptoPro. Check work.

18.2 It is necessary to “fix” the Continent-AP program through the Control Panel \u003d\u003e Add or Remove Programs, or install a new version of the Continent-AP.

18.3 Reinstall Continent-AP (restart the computer). Reinstall the certificate.

18.4 Reinstall CryptoPro first (preferably through cspclean.exe), then Continent-AP (restart the computer). Reinstall certificates.

19. The server denied access to the user. "Client-Cert not found" (see Fig. 5).

Decision: Check the license validity period for CryptoPro cryptographic information protection system, version 3.6. To do this, open the Start menu \u003d\u003e Programs \u003d\u003e Crypto-Pro \u003d\u003e CryptoPro PKI License Management (see Fig. 6).

Select the "CryptoPro CSP" menu item. The license expiration date is indicated in the right part of the "CryptoPro PKI License Management" window (see Figure 7).

If the license has expired, right-click on the CryptoPro CSP menu bar, select the All Tasks \u003d\u003e Enter Serial Number menu item (see Figure 8). Enter the serial number of the license obtained from the FC authority.

If the license is valid for an unlimited period, close the CryptoPro PKI License Management window and try to establish a Continent-AP connection. If the problem persists, follow these steps.

It is required to remove the Continent-AP certificate from the computer settings and reinstall this certificate. To do this, open the Continent-AP menu by right-clicking on the icon in the lower right corner of the screen.

On the menu "Configuring Authentication" activate the command "Continent-AP"(see Figure 9).

The "Continent-AP" window will appear on the screen. Click the button "Reset Stored Certificate"press the button "OK"(see fig. 10).

Run the program certmgr.mscfrom the Utilities folder included in the Continent-AP 3.6 distribution kit with Windows7 support Distribution and user manual. The "Certificates" window will appear on the screen. Open the "Certificates - current user" list, then the "Personal" list, then the "Certificates" list (see Fig. 11).


Fig. 11

Remove all certificates for which the "Issued by" column indicates "UFC Access Server" or "OFK Access Server" (see Figure 12). Close the "Certificates" window.

Call the Continent-AP menu by right-clicking on the icon in the lower right corner of the screen.

On the menu "Certificates" activate the command "Install user certificate"(see fig. 13).

The "Open" window will appear on the screen. select a file user.cer and press the button "Open"(see fig. 14). File user.cer may be on a floppy disk or flash drive.

The "Continent-AP" window will appear on the screen with the offer "Select the key container of the user certificate". Select the required key container and click the button "OK" (see fig. 15). Usually, the initial characters of the name of the key container are the same as the TIN of the organization.

If a message appears on the screen, as in Figure 16, press the button "Yes, automatically"(see fig. 16). This message will not appear when reinstalling the certificate.

If a message appears on the screen, as in Figure 17, press the button "Yes"(see fig. 17) . This message will not appear when reinstalling the certificate.

Click the button "OK"(see fig. 18).

Try to establish a Continent-AP connection. If the problem persists, reinstall the Continent-AP. To do this, open the menu "Start \u003d\u003e Settings \u003d\u003e Control Panel" (see Fig. 19).


Open the "Add or Remove Programs" shortcut (see Fig. 20).

Find the line "Continent-AP" in the list of installed programs and click the "Change" button (see Fig. 21).

The "Continent-AP" window will appear on the screen. Click the Next button (see Fig. 22).

Check the box "Fix". Click the Next button (see Fig. 23).

Click the "Install" button (see Fig. 24). Wait for the Continent-AP installation to complete. This may take several minutes.


Figure: 24
Click the Finish Button (see Fig. 25).

Press the button to restart the computer. "YES" (see fig. 26).

After restarting your computer, try to establish a Continent-AP connection.

20. "Error" When trying to establish a connection, the message “ The integrity of the Subscriber Station files is violated. Contact your system administrator"(See fig. 27).

Run the start.bat file from the setup folder, which is located in the archive with the Continent-AP distribution kit. Try to establish a connection. If it does not connect, uninstall Continent-AP and install Continent-AP version 3.6 in accordance with the document "User Guide for installing and configuring CIPF Continent-AP 3.6.doc".

Some of the information is taken from the sourcetut- admin. ru/ 2014/06/11 / typical-mistakes-continent-up /

ORDER

Removal, installation, generation of authentication keys for cryptographic information protection system "Continent-AP", sending a request for a certificate of an authentication key, issuing a certificate.


  1. Deleting an earlier version of the Subscriber Station
If you have installed previous versions of the subscriber station on your computer Continent AP,you must uninstall the old version before installing. For this:

Start - Control Panel - Add or Remove Programs - Continent-APand press Edit.

After successfully deleting the Subscriber Station, press the button Doneand restart your computer.


  1. Subscriber station installation
Log in as a computer administrator.

Note. A user who is a member of the local Administrators group has administrator rights for the computer.

Quit all applications running on your computer.

Run the file for execution Setup.exelocated in the directory with the distribution kit of the Subscriber Station.

The installer will begin the preparatory steps and a message will appear on the screen. After completing the preparatory steps, the start-up dialog of the installation wizard will be displayed.


Click the button Further to continue the installation of the Subscriber Station

A dialog will appear on the screen containing the license agreement for the use of the software product.

Read the license agreement and, if you accept its terms, check the box "I accept the terms of the license agreement" and click Further.


Enter the IP address of the access server


  • to connect viaInternet83. 169.236.3
Click the button Further


Click the button Install

ATTENTION! FOR CORRECT OPERATION OF THE PROGRAM, YOU MUST ANSWER POSITIVE TO ALL WARNINGS THAT MAY APPEAR DURING THE INSTALLATION OF DRIVERS!


After installing the Subscriber Station, click Done

The screen will ask you to restart your computer.



Click the button Yes to immediately restart the computer and start working with the Subscriber Station.

  1. Generation of private and public (certificate request file) authentication keys.

Authentication keys are generated at a workstation, defined as a subscriber station of the Continent-AP APCS, with the following installed on it:

  • by the cryptoprovider "CryptoProCSP 3. 6 ".

  • software "Continent-AP" versions3.5.68, 3.5.71, 3.6.

To generate private and public keysusing "Continent-AP" version 3.x it is necessary:

Launch Continent-AP (Start - Programs - Informzashita - Subscriber Point Continent - Management Program).

Right click on the icon "Continent-AP" located in the lower right corner of the screen - call the menu "Certificates - Create a custom certificate request ”.

In the appeared window “SKZI Continent-AP »Fill in the fields:


In the field "Files for saving the certificate request - electronic form »Specifies the path to the file where the request to issue the certificate of the authentication key will be saved. This file (request file with the extensionreq ) will need to be transferred to the UFK in the Republic of Crimea (or the UFK Branch in the Republic of Crimea).

The “Paper Form” field does not need to be checked.

To generate a key, press the button "OK"

In the appeared window "CryptoProCSP "It is necessary to select a magnetic medium for the key container being created and click the" OK "button (the" 3.5 "diskette, OS RegistryWindows, Touch Memory DS 1993 - DS 1996, Electronic key with interfaceUSB .Removable media with interfaceUSB).


After pressing the "OK" button, the "CryptoPro CSP" window will appear, in which you can set a password for the created key container (howeverit is not advisable to set a password, since a lost password cannot be recovered!).

The generated request for obtaining an authentication key certificate in this case is located on diskC: \\ k-ap_31-03-2008_151130.req (the name of the request file will differ from the given example), the container with the private part of the key will be located on the selected key carrier.

The produced key container is subject to accounting in accordance with "Instruction on the organization and security of storage, processing and transmission through communication channels using cryptographic protection of information with limited access, which does not contain information constituting a state secret ”, put into effect by order of the Federal Agency for Civil and Information Technologies No. 152 dated June 13, 2001.


The generated request for a certificate with the extension *.req provide for registration with the UFK in the Republic of Crimea com. No. 110 or in