Where to get a digital signature. EDS - electronic digital signature

Do you need an EDS? Do you want to know how to create an electronic signature for government services? Where and how to get it, saving time on searching for the necessary information? Read a simple and understandable description in which we will tell you how to solve these problems without making mistakes.

Note: There is an opinion that to access your personal account on the government services portal, a key (EDS) is required. This is not entirely true. The attribute (flash drive) is necessary for legal entities, i.e. for individual entrepreneurs, LLCs and other commercial organizations. Individuals only need to pass authorization. Standard registration (receiving an activation code by E-mail) expands access to services and creates a simple electronic signature.

Explanation of abbreviations in the text:

EDS (EDS) – Electronic Digital Signature;
CA – Certification Authority;
NEP – Unqualified Electronic Signature;
CEP – Qualified Electronic Signature;
UEC – Universal Electronic Card;
SNILS – pension insurance certificate (green plastic card);
FTS – Federal Tax Service.

Types of electronic signature

There are three types of EP. The most common one, which we often use, does not have the same levels of information protection as the other two - Enhanced. They differ in status and their scope is not the same. Let's look at their differences:

Simple electronic signature requires the use of a login and password. When accessing services, to confirm the operation, a one-time code may be requested, sent via CMS message or email. We often encounter such types of identification. To do this, you do not need to contact specialized centers.
Strengthened unqualified signature– this attribute not only identifies the sender, but also records changes to the signed document. They receive the UNP from the certification center. The scope of the NEP is limited. State and municipal documents containing secrets cannot be signed with it.
Reinforced qualified electronic signature has the highest degree of protection at the legislative level. Electronic documents are equivalent to paper ones with all the attributes of approval and have the same legal force. The certificate, which is issued along with the key, contains information on its verification. To carry out legally significant transactions, it is necessary to use this key (signature).

To make it easier to distinguish them from each other, let’s draw an analogy with clear paper attributes of personal identification:

a simple electronic signature is equivalent to a badge, if others have used the PC (phone), you are responsible for the consequences;
unqualified EP– it's like a pass in an organization where there is an element of trust between the parties;
qualified EP– passport, gives the right to use all services, is the most significant element of personal identification in legal transactions.

Note:Decide for yourself what type of signature you need, but a qualified electronic signature covers all services provided on the Unified Portal, of which there are slightly less than a thousand. Therefore, further we will talk about its creation and receipt.

Where do you get an electronic signature?

To access all portal services, you must have an enhanced qualified signature. This can be done before registration or after. The second option is preferable, because you will be convinced that digital signature is really necessary for government services.

What needs to be done on the site?

Obtain information about Accredited Certification Centers.
Select the one available to you.
Inquire about the level of service provided and prices for services.
Submit your application.

Note:Some CAs offer the opportunity to undergo training on using electronic signatures, conducting tenders, working with various document extensions, etc.

On the government services portal, you can submit an application to receive an electronic signature in the center you choose. It is possible to first contact the CA and then register using your existing electronic signature (for legal entities this is a prerequisite).

Note:Regardless of the option chosen– You must obtain a qualified electronic signature from the Certification Center. Depending on the degree of secrecy of legally significant transactions, the type of digital signature is selected.

How to create an application for an electronic digital signature for government services?

Let me make a reservation right away: the process of issuing electronic signature keys to both legal entities and individuals is constantly undergoing changes. For example, the widely advertised Rostelecom CA does not work for technical reasons.

The project to obtain a key for free using UEC has been suspended. Perhaps by the time the article is published the situation will change for the better. The question arises: how to create an electronic signature for government services now?

Programs required for electronic operation

For ES attributes to work, you need to install several programs. You can do this yourself. You will need a crypto provider Vipnet CSP and one of two programs for verifying the signature: CryptoARM or Vipnet CryptoFile.

CryptoPro EDS Browser plug-in

If the digital signature does not work in some programs, for example, Office or Banking systems, install CryptoPro EDSBrowser plug— in. the possibilities for using and verifying signatures will expand. Or... For the government services website, download the plugin, which is automatically detected on the page: ds-plugin.gosuslugi.ru/plugin/upload/Index.spr

Note:The key is valid for 13 months, so don’t miss out on updating your data. The flash drive is guaranteed for a year– it is also better to replace it. The CA will tell you how to do this in your personal account yourself.

How to get an electronic signature for government services for free?

It is impossible to purchase a qualified electronic signature, which requires a visit to a CA, for free. This mostly applies to legal entities. Individuals can obtain broader powers by registering on the government services website using SNILS.

To understand the need for a particular account, study the information on the page gosuslugi.ru/help/faq#q.

Note: When asked how to get an electronic signature for government services for free, we answer: unfortunately, not at all. You can expand your powers for free, but you have to pay for a digital signature for government services in the form of a flash drive - an electronic token. The price depends on the functionality of the key and the prices of the CA.

Verification of digital signature for public services

To make sure that the digital signature you purchased from the CA is working, go to gosuslugi.ru/pgu/eds. Check the certificate and file handling. This will not cause any difficulties - everything is simple there. As a result, you will receive electronic signature data and a message: Document authenticity confirmed.

Is the electronic signature suitable for other resources?

Unfortunately, the electronic signature key for government services will not be valid, for example, for the Federal Tax Service portal. For tax authorities, a different type of (non-)qualified signature is required. It must contain the TIN data, and sometimes the registered powers of the legal entity. Therefore, for different needs you need to purchase separate keys. This is inconvenient, but they haven’t made a universal type of signature yet.

An electronic signature (hereinafter referred to as ES) is a complete list of details of a document created in an electronic version, obtained by cryptographic transformation of available information using a special key, which makes it possible to verify the absence of errors in the provision of data.

Receiving algorithm

Selecting a certification authority

The entire range of points certifying such a signature is available 24 hours a day on the above site. You just need to visit the community’s online page and find the corresponding subsection.

The program is adapted for a user who owns any spreadsheet editor, one of which is Center for Certification of Technologies and Communications LLC. The center provides high-quality services and online services based on the use of the most advanced technologies with high speed of service delivery at reasonable prices.

The next stage is the procedure for drawing up and correctly filling out an application for the production of a sample electronic signature. This can be done either on the official website www.iecp.ru or in absentia.

In the electronic application, you must indicate your full name, email address, telephone number and a phrase explaining the purpose of the document (issuing an electronic signature).

The next step is to enter the alphabetic characters located on the left side of the central main field, after which you should register the request.

Bill payment

Everything here is extremely simple - you just need deposit the appropriate amount of money into the account and send a receipt, confirming the payment made, to the certification company.

Submission of documents to the CA

Upon submission and registration of the corresponding application for the production of a key certificate to the organization, the applicant is obliged to collect all the necessary papers and then submit them to the CA.

Documents for obtaining digital signature

Any person can purchase keys, regardless of the method of registration of his business activities. The only requirement is to prepare a complete package of documents regulated by regulatory legal acts of Russian legislation.

Individual entrepreneurs

Individual entrepreneurs are required to prepare following papers:

Along with the papers, you should also provide an electronic storage medium in an amount corresponding to the number of keys ordered. If it will be issued to the principal, blank envelopes will be required. You need as many of them as the number of keys you receive.

Legal entities

In case of registration you will need:

registration card of a legal entity - 2 copies;
addition to the second section of the card - according to the number of electronic keys;
original Charter, Regulations or their copies, notarized;
legal documents for the conduct of activities by a legal business entity;
applicant’s passport – copy;
RNUKPN - a copy, if not, then passport pages confirming this fact;
clean storage media.

You can learn how an electronic signature works from this video.

Individuals

registration card of an individual;
the first two pages of the passport (copies), certified by the applicant;
two copies of RNUKPN.

If the electronic signature will be received by a person who is an employee (chief accountant or leading economist of an organization), an employment contract at this enterprise and addition No. 2 of the registration card will additionally be required.

Benefits of use

An electronic digital signature has a number of undeniable advantages:

absolute confidentiality - it will absolutely indicate the author’s uniqueness, it cannot be copied, forged on another document, or changes made;
profitability - taxpayers are reduced several times;
does not imply the maintenance of specialists on the organization’s staff who have knowledge of compiling an electronic form of reporting;
priority right to submit reporting documents in comparison with organizations that do not have keys;
saving time and physical resources that will inevitably be spent on visits to the tax office during the reporting period;
the ability to submit data on the last day of the established time limit;
maintaining mathematical control of possible errors;
prompt updating of information regarding innovations, additions and changes in the tax code;
prompt receipt of statements of budget transactions and obligations;
timely delivery of reporting information and its confirmation;
timely notification of tax payments and budget collections.

The legislative framework

Legal support, which makes it possible for widespread use, begins in 2000, when a law was ratified on the possibility of using an electronic version of a signature on the territory of the Russian Federation in the process of conducting business and economic activities.

At the beginning of 2011, a law was adopted regulating civil and legal relations at the time of concluding transactions, providing services and performing other types of actions.

Regulatory document competently regulates the procedure for using electronic keys, checking them and monitoring the activities of centers involved in their production.

Cost of digital signature

The cost of the service is based on the following factors:

location where the individual or legal entity is registered;
signature option and the intended scope of its further application according to the type of activity of the business entity;
general state price policy.

Currently, the approximate average cost of one type of signature varies from 5 to 20 thousand rubles.

It is not advisable for the owner of an electronic certificate to tell anyone the code combination of the prescribed characters, since this can provoke a lot of unpleasant moments in the future.

Production time and validity

The period during which an electronic certificate will be issued to an entrepreneur is determined by the following factors:

availability of all necessary paperwork;
the level of employment of a particular center providing such a service;
mode of operation of intermediaries.

The production period can be roughly classified into two kinds:

urgent;
unlimited

In the first case, you can get everything done “turnkey” in a couple of days. In the second, production will take about three weeks from the moment all the necessary documents are submitted to the organization that produces the keys.

Before proceeding with the execution of the order, the registration center must draw up and bilaterally sign the appropriate agreement for the provision of services, which will specify the cost and timing of the production of the electronic signature, as well as penalties for non-compliance.

The customer will receive a special certificate along with the key. It can be in paper or electronic form. This document is direct evidence of the specific ownership of the key to a given client. It is equivalent to a passport of a participant in commodity and financial capital turnover.

The period during which the certificate is recognized as valid is one year from the date of its receipt. During the entire period of validity, its owner is authorized to sign any documents with its help. After this period, such a signature becomes legally invalid and is declared invalid.

You can extend the period by certificate renewal. It is advisable to do this in advance so as not to limit yourself in the ability to fully conduct your business and submit reports to the tax authorities and other government services. By law, the customer is given one month from the date of expiration of the certificate to renew the certificate.

What does an electronic signature look like?

Depending on the specifics of the document flow, the electronic signature has an individual protection option. It might look like:

Character combination- these can be numbers or letters that seem random at first glance. In fact, they contain a specific code cipher written in the certificate.
Graphic signature– looks like a simple “sticker”, like the seal of an organization or a sample signature of an authorized person. It is used not only as protection, but as an option for transmitting information. The person who endorses the documents in this way can send a verbal addition to the recipient. On paper it looks like a simple visa with a stamp.
Invisible signature– an ideal option that guarantees 100% protection. A person for whom it is not intended will not be able to see it, and therefore not copy it.

Verification and PIN code

Signature verification is a step-by-step process. Initially, the addressee, using a computer program of accessible code, conducts fingerprint decoding and then receives the original impression. The second stage is the calculation of the print using the software function of the received document.

During the verification process, the resulting version and the source code undergo a comparative analysis. The test result is one of the “right/wrong” answer options.

If even minor changes were registered at the time of sending the document, the forgery will be revealed immediately.

The PIN code, as an additional degree of protection, is established by the organization that develops the key and issues a confirming certificate. The combination has restrictions on the number of entries, after which the media is automatically blocked. Unlocking is carried out under the conditions of the Certification Center.

FAQ

Most often during use the following questions arise:

whether the use is legal from a legal point of view;
what is needed to use the electronic signature;
is an individual CA necessary?
how to check an electronic signature.

Find out how and when an electronic signature is issued in the video.

An electronic signature (ES) is information in electronic digital form that can be used to identify an individual or legal entity without his personal presence.

In electronic document management, two types of electronic signature are used:

simple electronic signature;
enhanced electronic signature (can be qualified or unqualified).

They differ in the degree of protection and scope of application.

2. What is a simple electronic signature?

A simple electronic signature is essentially a combination of login and password, confirmation code by email, SMS, USSD, and the like.

Any document signed in this way is, by default, not equivalent to a paper document signed by hand. This is a kind of statement of intent, which means the party agrees with the terms of the transaction, but does not participate in it.

But if the parties enter into an agreement to recognize an electronic signature as an analogue of a handwritten one in a personal meeting, then such documents may acquire legal significance. This, for example, happens when you connect an online bank to a credit or debit card. A bank employee identifies you by your passport, and you sign an agreement to connect to online banking. In the future, you use a simple electronic signature, but it has the same legal force as a handwritten one.

3. What is a strong unqualified electronic signature?

A strengthened unqualified electronic signature is two unique sequences of characters that are uniquely related to each other: the electronic signature key and the electronic signature verification key. To form this link, cryptographic information protection tools are used ( Cryptographic information protection tools (CIPF) are tools that allow you to sign digital documents with an electronic signature, as well as encrypt the data they contain, thereby helping to reliably protect them from interference by third parties. CIPF is implemented in the form of software products and technical solutions.

"> CIPF). That is, it is more secure than a simple electronic signature.

The enhanced unqualified signature itself is not an analogue of a handwritten signature. It means that the document was signed by a specific person and has not been changed since then. But such a signature is usually valid only in conjunction with an agreement to recognize it as handwritten. True, not everywhere, but only in the document flow with the department (organization) with which such an agreement was signed.

4. What is an enhanced qualified electronic signature?

An enhanced qualified electronic signature differs from an enhanced unqualified one in that cryptographic information protection tools (CIPF) certified by the FSB of the Russian Federation are used to generate it. And only a certification center accredited by the Ministry of Digital Development, Communications and Mass Communications of the Russian Federation can issue such a signature. In this case, the guarantor of authenticity is the qualified certificate of the electronic signature verification key provided by such a center. The certificate is issued on a USB drive. To use it, in some cases you may need to install additional software.

An enhanced qualified signature is an analogue of a handwritten signature. It can be used everywhere, but to use it with a number of organizations, you need to enter additional information into a qualified electronic signature certificate.

How to obtain an enhanced qualified electronic signature

To obtain an enhanced qualified electronic signature you will need:

identification document;
insurance certificate of compulsory pension insurance (SNILS);
individual taxpayer number (TIN);
the main state registration number of the record of state registration of an individual as an individual entrepreneur (if you are an individual entrepreneur);
an additional set of documents confirming your authority to act on behalf of the legal entity (if you receive the signature of a representative of the legal entity).

The documents must be submitted to an accredited certification center (you can find them in the list or on the map), whose employee, after establishing your identity and checking the documents, will write the certificate and electronic signature keys onto a certified electronic medium - an electronic card or flash drive. You can also purchase information cryptographic protection products there.

The cost of the service for providing a certificate and electronic signature keys is determined by the regulations of the accredited certification center and depends, in particular, on the scope of application of the electronic signature.

5. Does an electronic signature have an expiration date?

The validity period of an electronic signature verification key certificate (both qualified and unqualified) depends on the cryptographic information protection tool (CIPF) used and the certification center where the certificate was received.

Typically, the validity period is one year.

Signed documents are valid even after the expiration of the electronic signature verification key certificate.

6. What is ESIA and why is it needed?

The federal state information system “Unified System of Identification and Authorization” (USIA) is a system that allows citizens to interact with authorities online.

Its advantage is that a user who has registered once in the system (on the gosuslugi.ru portal) does not need to go through the registration procedure on government and other resources each time to gain access to any information or service. Also, to use resources that interact with the ESIA, you do not need to additionally identify your identity and equate a simple electronic signature with a handwritten one - this has already been done.

With the development of e-government and electronic document management in general, the number of resources interacting with the Unified Identification and Automation System is growing. Thus, private organizations can also use the ESIA.

Since 2018, a system for remote identification of clients of Russian banks and users of information systems began to operate, subject to registration in the Unified identification and authentication system and the citizen providing his biometric data (facial image and voice sample) to a unified biometric system. That is, you can receive banking services without leaving your home.

There are several account levels on the gosuslugi.ru portal. Using the simplified and standard levels, you sign applications with a simple electronic signature. But to gain access to all services, you need a verified account - for this you need to confirm your identity, that is, equate a simple electronic signature to a handwritten one.

On the website of the Federal Tax Service

Individuals, receiving services through a personal account on the website of the Federal Tax Service, use an enhanced unqualified signature, equivalent to a handwritten one. A verification key certificate can be obtained in your personal account, but personal identification and equating an electronic signature to a handwritten one occur at the level of entering your personal account: you can log in either using the login and password that are issued during a personal visit to the tax office, or using a confirmed account records on the gosuslugi.ru portal, or even using an enhanced qualified electronic signature.

But individual entrepreneurs and legal entities may need an enhanced qualified signature to receive services (for example, to register an online cash register).

On the Rosreestr website

Some of Rosreestr’s services (for example, submit an application, make an appointment) can be obtained using a simple electronic signature. But most services are provided to those who have an enhanced qualified electronic signature.

To participate in electronic trading

In order to participate in electronic trading, you need an enhanced qualified electronic signature.

An electronic signature is a phenomenon in modern life that is easier to talk about and how it works than to describe it. At the very least, the legislator’s attempt to give the concept of an electronic signature can hardly be called successful.

“Electronic signature is information in electronic form that is attached to other information in electronic form (signed information) or is otherwise associated with such information and which is used to identify the person signing the information” (Article 2 of the law dated 04/06/2011 N 63-FZ ).

And yet, from this description we can conclude that an electronic signature, like a regular one, identifies the person to whom it belongs and expresses his agreement with the contents of the signed document.

To be widely used, an electronic signature must have advantages that a personal signature on paper documents does not have. EP does have such advantages, and we will look at them below.

Legal regulation of electronic signature

The first law on electronic signatures was adopted in January 2002 (No. 1-FZ of January 10, 2002). True, the signature was called not just electronic, but electronic digital signature or EDS. This abbreviation is still found today, although it is correct to use another combination - ES (electronic signature).

Now the use of electronic signature is regulated by a new law - dated 04/06/2011 No. 63-FZ. ES is also mentioned in other legal acts, for example, in the law of July 27, 2006 No. 149-FZ, where it is called an analogue of the handwritten signature of an individual.

The Federal Security Service was also concerned about the regulation of electronic signatures, and by Order No. 796 of December 27, 2011, it approved the Requirements for electronic signature tools and for the means of a certification center.

Anyone can familiarize themselves with the primary sources (which, frankly, are not easy to understand) via the links, and in this article we will answer practical questions: why do we need an electronic signature and how to get it.

Why do you need an electronic signature?

First of all, such a signature confirms to a much greater extent the fact that a document (in this case, only an electronic document) was signed by a certain person. With the current development of technology, an ordinary personal signature on paper is quite easy to forge.

Tax authorities also like to claim that documents were signed by an unidentified person, and this often entails an increase in the tax base, fines and other sanctions. An independent examination of a personal signature on significant documents cannot always help, because not in all situations allows you to confirm or deny the fact of authenticity due to the small number of characters in the signature. If the document is signed with an electronic signature, then there is no longer any doubt about its authorship.

Please note that only a handwritten signature is considered equivalent to enhanced qualified electronic signature.

The second advantage of using electronic signature is the protection of an electronic document from unauthorized modification. Paper documents, even if they have a genuine signature, can be forged or supplemented. In addition, they can be accidentally damaged, lost, stolen, etc., and the lack of paper documents will not allow you to confirm any significant fact, because words cannot be attached to deeds.

The third reason why the use of electronic signatures will continue to develop is the opportunity to perform actions or receive information without leaving home. EP allows:

submit documents for or;
make civil transactions;
receive state and municipal services;
maintain secure document flow;
hand over;
work with bank documents and manage funds in the current account;
participate in, tenders and;
carry out other legally significant actions.

Finally, when conducting business, in some cases it is no longer possible to do without an electronic signature. Thus, reporting for and for employees (if there are more than 25 people) is now accepted only in electronic form.

Submitting reports electronically will only continue to develop, because this method reduces the labor and time costs of those who accept and submit reports; reduces the number of technical errors when filling out forms; Protects reporting from unauthorized correction or viewing.

Where can I get an electronic signature?

You cannot come up with and create an electronic signature yourself; it is issued by specialized organizations - certification centers. The requirements for them are established by Article 16 of Law No. 63-FZ, and among them:

the value of the organization's net assets must be at least one million rubles;
financial security for liability for losses caused to third parties must be at least one and a half million rubles;
the number of qualified employees directly involved in the creation and issuance of electronic signature verification key certificates must be at least two.

Certification centers must obtain accreditation from the Ministry of Telecom and Mass Communications. You can find a suitable regional certification center or check its accreditation here:

By clicking on the name of the selected certification authority, you will be taken to a page with brief information about it, and from there to the website of the organization itself.

For some time, it was possible to obtain an electronic signature in some branches of Rostelecom, but now its certification center reports that for technical reasons it has temporarily suspended the provision of this service.

Types of electronic signatures

Article 5 of Law No. 63-FZ distinguishes three types of electronic signature: simple, enhanced unqualified and enhanced qualified.

A simple signature is a combination of symbols, codes and passwords that allow you to establish the fact that an electronic signature was formed by a certain person. Such a signature is quite easy to hack.

An enhanced signature (unqualified and qualified) is generated using an external medium - a flash drive or floppy disk. Additional protection of the enhanced qualified signature is the electronic signature verification key specified in the qualified certificate. Reports and legally significant documents must be signed only with an enhanced qualified signature.

Certification authorities offer different electronic signatures depending on the ability to access various resources. Thus, an electronic signature for an ordinary individual for only 450 rubles allows you to conduct secure legally significant document flow, receive state and municipal services online, and pay taxes through your personal account.

Universal electronic signatures provide maximum opportunities, including participation in and.

How to get an electronic signature?

Typically, all certification centers provide detailed advice on their websites to everyone who wants to obtain an electronic signature. We will briefly describe this process here:

1. Select a certification center from organizations accredited by the Ministry of Telecom and Mass Communications.

2. Submit along with the application the necessary package of documents, which will vary depending on the type of owner of the electronic signature - an ordinary individual, individual entrepreneur or organization. An ordinary individual will have the minimum package of documents - a copy of the passport, SNILS and TIN certificate. You should familiarize yourself with the requirements for document preparation at the center itself, because some of them only accept notarized copies, while others request original documents for verification.

3. Identify the identity of the applicant - by appearing in person at the certification center or by sending a certified telegram via Russian Post.

4. At the agreed time, come to the digital signature issuing point to receive a qualified certificate and electronic signature keys.

How to check the authenticity of an electronic signature?

A special service has been created on the State Services portal that allows you to verify the authenticity of the electronic signature. To verify, you need to upload an electronic document, the authenticity of which must be confirmed, and the file of the electronic signature itself.

If the signature is authentic and the document is unchanged, the service will issue a message about the completion of the verification, as well as information about the owner and publisher of the electronic signature and its validity period.