How to remove continent ap 3.6 completely. Deletion of the subscriber station of earlier versions. The "Paper form" field does not need to be checked

Crypto-protection system of information Continent-AP from the developer "Security Code" is a software and hardware complex that provides remote access to the networks of large municipal organizations such as GAS Vybory and the Federal Treasury. To update the Continent-AP cryptographic protection system, it is necessary to completely remove the previous version of this program from the computer: otherwise, the installation of the new software will be impossible due to conflicts with the system.

Work in the program

Continent-AP provides users with such opportunities as:

  • secure RDP access to computers and portable devices using a special cryptographic algorithm certified in accordance with GOST 28147/89 (operates in gamma mode with a reverse response);
  • the creation of a multi-stage authentication algorithm for remote users based on X.509 standard public key certificates, which ensures a high degree of security for the data transmitted within the APC;
  • support for external VPN clients for Linux and Windows OS, including electronic keys Token, iKey, iButton identifiers, floppy disks and flash drives;
  • communication with the "Continent" system with mobile devices and stationary PCs with a speed of up to 16 MB per second;
  • much more.

To access the cryptographic information system, you must use valid certificates root certification authority:

  • cer - user certificate;
  • p7b - root certificate.

In order to install root certificate, you need:

  1. Unzip the file with certificates to the key drive - this can be a disk, flash drive and other removable media with a key container where private keys are stored, which are generated by employees of the relevant authorized department when a request for obtaining a user certificate is generated. By its content, a key container is a folder with attachments like "header.key", "masks.key", etc.
  2. Install the certificate in the "Storage" on the PC. To do this - on the Windows taskbar in the tray, find the shield icon with the inscription "AP" - usually the specified object is located in the lower right corner of the monitor, next to the time and date settings.
  3. If there is no application in the tray, you will need to launch it from the Start menu. Select the section of the opened menu "Start" - "Programs", go to the subsection "Security Code", to the folder "Subscriber Point Continent" and click on the icon "Control Program".
  4. In the opened context menu go to the "Certificates" section: in the drop-down list, select the "Install cert. user ".
  5. Go to "Explorer" - press the Win + E combination and go to the removable media on which the certificates of the key container file are stored.
  6. Select the file "user.cer" and click "Open".
  7. In the dialog box that opens, the inscription "Select a key container ..." will appear - click on the name of the key container. After the element is highlighted in blue, tap on "OK".
  8. When the window appears CryptoPro CSP enter the access password for the specified container, and then click on "OK". Password is issued to the user who submitted an application for a certificate. If the password has been forgotten or lost, you will need to generate a new application for a key, and the current certificate should be revoked.
  9. A dialog box will appear in which you need to click on "Yes, manually".
  10. Now you need to load the certificate called "root.p7b" - go to the explorer on the removable media, right-click on the object and select the "Open" context menu option.
  11. Read the text presented in the "Security Warning" window, and then tap on the "Yes" interactive button.
  12. The screen will display the message “Import custom certificates. completed successfully. "
  13. After pressing the "OK" button, you can connect to the access server.

To delete certificates in Continent-AP, you will need to perform the following operations:

  1. Right-click on the shield icon in the tray on the bottom toolbar: go to the "Settings" context menu item and select the "CIPF Continent-AP" section.
  2. In the opened dialog box "CIPF Continent-AP Properties" go to the "Security" tab.
  3. In the "Advanced (custom)" section, click on the "Options ..." interactive key.
  4. In the opened menu "Additional security settings" in the section " Secure Login»Activate the" Properties ".
  5. A dialog box will open, on the left side of which is the "Server Dostupa" element, and on the right side - "CA SD" (a particular user may have different names for the keys). To remove the specified certificates, you will need to click on the button located in the lower right part open window, - "Reset the stored certificate", then tap on "OK" and exit "Settings".
  6. Now you need to completely delete the Continent-AP “.cer” file from the key storage. To do this, in Windows 7, you need to call the Run window by pressing the Win + R keys or through the Start menu - Run. In version 10 operating system you need to click on the magnifying glass icon located in the lower left corner of the display to the right of the "Start" menu, and enter the "Run" command or hold down the Win + R combination.
  7. Type in the command "certmgr.msc" without quotes, then tap "Enter".
  8. If an error like "Can't find .msc" appears, follow the next 7 steps, if there is no error, go directly to step 18 of the current instruction.
  9. In the "Run" window, drive in the code word "mmc" without quotes and click on "OK".
  10. In the "Console" window go to the leftmost item of the "File" menu, in the drop-down list select the fifth item - "Add or remove snap-in".
  11. In the dialog box that opens, go to the "Isolated equipment" tab and click on the "Add" button located in the lower left corner of the screen.
  12. The monitor will display a list of available snap-ins. Click on "Certificates", and at the bottom of the "Add standalone snap-in" window, click on the "Add" button.
  13. In the "Certificate Manager Snap-in" check the box next to the option "my account... "and click on" Finish ".
  14. Exit "Add Rig" by clicking "Close".
  15. In the main part of the active window "Add / Remove ..." certificates of the current user will appear - click on the "OK" button.
  16. The "Consoles" window will be displayed under the name "Certificates" - select the objects with "CA SD" in the "Issued by" column, located on the right side of the screen, and click on the "Delete" option.
  17. In the left side menu go to the section "Trusted Root Authorities ..." - "Certificates" and uninstall the object called "CA SD".
  18. Exit Rig without saving.
  19. You can reinstall the new ".cr" format file.

Uninstalling the program

Before uninstalling Continent-AP from your computer, you must create a system restore point, since in case of incorrect uninstallation of CIPF components, problems may arise when you try to install this hardware and software complex on the PC again. To do this, follow these steps:


Now you can safely remove Continent-AP 3.6 from your PC and clean the registry from residual files of this program.

Standard uninstall

In order to remove Continent-AP 3.6 from your PC, it is recommended to follow the instructions:

  1. Exit the program in the tray - right-click on the icon in the form of a shield with the inscription "AP" and select the "Exit" option in the context menu.
  2. Make sure that the software is not included in the list of background processes and in startup. Go to the "Task Manager". You can perform this operation by pressing the Ctrl + Alt + Delete combination and choosing the appropriate Task Manager tool or through the Run menu: hold Win + R and enter passphrase"Taskmgr" without quotes, tap "Enter".
  3. In the "Processes" tab, complete the executable exe of the uninstalled CIPF - right-click on the object and activate the "End task" option.
  4. Go to the "Startup" tab and disable the uninstalled software by pressing the right mouse button and selecting the "Disable" option.
  5. Go to the "System Configurations" window. You can perform this action through the magnifying glass icon located to the right of the "Start" menu - enter the "Configuration" command or the "msconfig" key. You can also get to the configurator window alternative way: hold Win + R, in "Run" type in the password "msconfig" without quotes - "Enter".
  6. Go to the "Services" tab, click on "Do not display Microsoft services", tap "Disable all" (after this action will clear the entire list of startup programs). You can disable only the uninstalled cryptographic protection tool - for this, find the specified object in the general list of services and uncheck the box to the left of its name.
  7. In Windows 7, you will also need to go to the "Startup" tab and disable the executable process using the "Disable" option.
  8. Close the "msconfig" window after pressing the "Apply" button.
  9. Reboot the computer.
  10. In OS 10 you need to go to the "Start" menu, click on the gear icon. In the window " Windows settings"Select the subsection" Applications ".
  11. In the "Applications and Features" find the uninstalled "Control Program" using the built-in search string- right-click on the found search result and initiate deletion.
  12. Follow the prompts of the "Installation Wizard" - click "Finish" at the end of the uninstallation process.
  13. Restart your PC.
  14. After turning on the device - go to the tool "Registry Editor" - press Win + R and enter the command "regedit", tap on "OK".
  15. In the window " Registry Editor"Select the leftmost item of the" File "menu - the" Export "section. Specify "All registry" as the export range, then enter any file name and click "Save" in the required directory. Subsequently, you can restore data from the specified source using the "Import" option.
  16. Hold down the Ctrl + F combination and look for the residual components of the uninstalled application - click "Find Next".
  17. The monitor will display a list of registry entries: clear individual entries located in "HKEY_CURRENT_USER" and "HKEY_LOCAL_MACHINE".

Note! It is better for inexperienced users to skip the step with a manual clean registry, as there is a high probability that their actions can lead to a breakdown of the OS. You can use special tool to clean the registry from residual files, which is called Reg Organizer. Available as a full version of this software solution and a portable exe that does not require installation.

In order to remove from the registry "garbage" keys and files left after uninstalling Continent-AP versions 3.5, 3.6 and 3.7 using RegOrganizer, you will need:


Alternative way to uninstall the program

If the user has little time and urgently needs to remove the Continent-AP program from his computer, then one of the specially designed uninstaller utilities will come in handy. Best solutions:

  • CCleaner;
  • Revo Uninstaller;
  • Advanced SystemCare (iObit);
  • Uninstall Tool.

All of these applications operate on approximately the same principle: they produce standard delete applications and then clean file system and a registry of residual software components. For example, in order to completely remove Continent-AP 3.7 using the free CCleaner software, you will need to follow the instructions:


Information security tool "Continent-AP" 3.6 - p A software VPN client that allows a remote user to establish a secure connection with the Access Server of the APCS "Continent".

Purpose of "Continent-AP" 3.6:

  • Protection of connections with remote workstations

In cases where only 1-2 employees work in a remote office and for some reason the installation of APPS Continent is impractical, it is possible to securely connect the AWP to resources automated system enterprises using software VPN client Continent-AP.

  • Securing connections with mobile clients

Providing the ability to securely connect to information resources enterprise for mobile workers and company management. The Continent-AP software VPN client can be installed on the laptops of mobile employees.

Certificates

"Continent-AP" 3.6 is a certified solution, has certificates: FSTEC of Russia for compliance with the levels of ITU 3 and NDV 3, FSB of Russia CIPF class KS1, KS2 (with the use of the Sobol PAK).

Opportunities "Continent-AP" 3.6

  • Cryptographic data protection

Cryptographic protection of the transmitted data is implemented on the basis of Russian cryptographic algorithms in accordance with GOST 28147-89 in the feedback gamma mode.

Identification and authentication of a remote user when establishing a connection between a subscriber station and an access server of the APCS "Continent" is carried out on the basis of public key certificates. The scheme is implemented using certificates of the X.509 standard. There are 2 options for working with certificates, the trusted certification center is the access server management program - the first option and the trusted center is an external certification center - the second option, in the second option, integration with the CryptoPro CA is possible.

  • Support for a variety of key media

Floppy disks, flash disks, eToken, ruToken, iKey electronic keys can act as a carrier of key information, and it is also possible to use iButton identifiers if the PC allows installing Sobol or TM Card.

  • Integrated firewall
ORDER

Removal, installation, generation of authentication keys for cryptographic information protection system "Continent-AP", sending a request for a certificate of an authentication key, issuing a certificate.


  1. Deleting an earlier version of the Subscriber Station
If you have installed on your computer previous versions subscriber station Continent AP, you need to uninstall before installing old version... For this:

Start - Control Panel - Add or Remove Programs - Continent-AP and press Change.

After successful deletion of the Subscriber Station, press the button Ready and restart your computer.


  1. Subscriber station installation
Log on as a computer administrator.

Note. The computer administrator rights are possessed by a user who is local group administrators.

Quit all applications running on your computer.

Run the file for execution Setup.exe located in the directory with the distribution kit of the Subscriber Center.

The installer will begin the preparatory steps and a message will appear on the screen. After completing the preparatory steps, the start-up dialog of the installation wizard will be displayed.


Click the button Further to continue the installation of the Subscriber Station

A dialog will appear on the screen containing the license agreement for the use of the software product.

Read the license agreement and, if you accept the terms, check the box "I accept the terms. license agreement"and press the button Further.


Enter the IP address of the access server


  • to connect viaInternet83. 169.236.3
Click the button Further


Click the button Install

ATTENTION! FOR CORRECT OPERATION OF THE PROGRAM, IT IS NECESSARY TO ANSWER POSITIVELY TO ALL WARNINGS THAT MAY APPEAR DURING THE INSTALLATION OF DRIVERS!


After installing the Subscriber Station, press the button Ready

The screen will ask you to restart your computer.



Click the button Yes to immediately reboot the computer and start working with the Subscriber Station.

  1. Generation of private and public (certificate request file) authentication keys.

Authentication keys are generated at the workstation, defined as the subscriber station of the Continent-AP APCS, with the following installed on it:

  • by the crypto provider "CryptoPro CSP 3. 6 ".

  • software "Continent-AP" versions 3.5.68, 3.5.71, 3.6.

To generate private and public keys using "Continent-AP" version 3.x necessary:

Launch Continent-AP ( Start - Programs - Informzaschita - Subscriber Point Continent - Management Program).

Right click on the icon "Continent-AP" located in the lower right corner of the screen - call the menu " Certificates - Create a custom certificate request ”.

In the appeared window “ SKZI Continent-AP »Fill in the fields:


In the field "Files for saving the certificate request - electronic form "The path to the file where the request to issue the certificate of the authentication key will be saved is specified. This file (request file with the extension req ) will need to be transferred to the UFK for the Republic of Crimea (or the Department of the UFK in the Republic of Crimea).

The “Paper form” field does not need to be checked.

To generate a key, press the button " OK"

In the appeared window "CryptoPro CSP "It is necessary to select the magnetic medium for the key container being created and click the" OK "button (the" 3.5 "diskette is supported as the medium, OS Registry Windows Touch Memory DS 1993 - DS 1996, Electronic key with interface USB .Removable media with interface USB).


After pressing the "OK" button, the "CryptoPro CSP" window will appear, in which you can set a password for the created key container (however It is not advisable to set a password, since a lost password cannot be recovered!).

The generated request for obtaining an authentication key certificate in this case is located on disk C: \ k-ap_31-03-2008_151130.req (the name of the request file will differ from the given example), the container with the private part of the key will be located on the selected key carrier.

The produced key container is subject to accounting in accordance with "Instruction on the organization and security of storage, processing and transmission through communication channels using cryptographic protection of information with limited access, which does not contain information constituting a state secret ”, put into effect by order of the Federal Agency for Information and Communication No. 152 dated June 13, 2001.


The generated request for a certificate with the extension *.reqprovide for registration with the UFK in the Republic of Crimea com. No. 110 or in

Error messagesarising during the installation of communication at the Continent-AP subscriber station.

The subscriber station allows establishing remote secure connections using the Continent 3 PPP Adapter modem emulator. When connecting a Continent-AP subscriber station, error messages about their solutions, listed below, may appear.

Error 721 Remote computer does not answer.

1) You may not have an Internet connection.

2) Some programs are blocking ports. Disable antivirus, firewall.

3) Remove, if installed, the firewall that comes with the Continent-AP program.

4) If you are using wired Internet it is possible that the provider has blocked the ports required for the Continent-AP program to work. To check, establish an Internet connection via a USB modem.

Error 628 The connection was closed.

See Error 721

Error 629 The connection was closed by the remote computer.

See Error 721

This error occurs when the user manually prescribes an IP address in the properties of the TCP / IP protocol, while the server should automatically issue them. To fix it given error, you need to go to the Continent-AP connection settings.

In the "Network" tab, select the line "Internet Protocol TCP / IP" and click the "Properties" button.

In the window that opens, put the following switches:

  • "Obtain an IP address automatically";
  • Obtain DNS Server Address Automatically.

Error 703: The connection requires some data from the user, but the application does not allow user interaction. "

Go to the settings of the AP Continent - on the "security" tab, the "parameters" button, the button - "properties", "reset the stored certificate".

Error 734 The PPP link control protocol was terminated.

1. Focus on the error that appears before this one.

2. Check the system date.

Error. The server denied access to the user. Reason for rejection Multiple user logon is denied.

Wait a few minutes and re-establish the connection.

The server denied access to the user.Reason for refusal: Client-Cert not found.

Key signing error 0x8009001D (Provider library not initialized correctly).

The license of the CryptoPro program has expired

Key signing error 0x80090019 (Keyset not defined).

  1. Delete remembered passwords (CryptoPro => Service => Delete remembered passwords).
  2. The certificate may have expired. Check the expiration date by opening the user.cer file.

Key signing error 0x8009001F (Invalid keyset parameter).

Key signing error 0x00000002 (The specified file cannot be found).

Remove this version of the Continent-AP program and install the Continent version 3.5.68.

The server denied access to the user. Reason for refusal: user login is blocked.

You have been blocked on the UFC server. Call and find out the reason for blocking.

The integrity of the files is compromised. Contact your system administrator.

It is necessary to "fix" the Continent-AP program through the installation and removal of programs

Error 850: The protocol type is not installed on the computerEAP required to authenticate the dial-up connection.

It is necessary to "fix" the Continent-AP program through the installation and removal of programs

Insert the key carrier. The keyset does not exist.

  1. Continent inserted.
  2. When establishing a connection at the stage of choosing a certificate, make sure that the correct certificate is selected.
  1. Make sure CryptoPro sees the given key

Insert the key carrier (The "devices" field is empty).

  1. Make sure the flash drive with the key Continent inserted.
  2. Open CryptoPro and, in the tab "Equipment", select "Configure readers ...".
  1. In field "The following readers are installed:" delete all readers by selecting them one by one and pressing the button "Delete".
  1. Click on "Add"
  2. The Reader Installation Wizard window will appear. Click on "Further"
  1. In the next step of the wizard to install the reader in the field "Producers" choose "All manufacturers"... And on the list "Available readers" choose All Removable Drives... Click the button "Further".
  1. In the next window, press the button "Further"
  1. In the window that appears, click "Ready".
  1. Try to re-establish the connection.

The tray icon is gone.

  1. Go to "Start" => "All Programs" => "Security Code" => "Subscriber Point Continent" and select "Control Program".
  2. If the icon does not appear, right-click on the Windows taskbar (or press alt + ctrl + delete) and select Task Manager.

Go to the Processes tab and select AP_Mgr.exe from the list and click the End Process button.

Then repeat step 1.

For installation new version Continent-AP 3.6, you must first uninstall the old version of Continent-AP 3.3, the Continent-AP 3.6 version is available for download at http: // www. ***** / cont / install / Cont_Client_3.6.83.0.zip

and install the Continent-AP cryptographic protection system

1 2

in general, the usual installation ...

3https: //pandia.ru/text/78/111/images/image004_17.jpg "width =" 307 "height =" 246 ">

during installation, disable the "firewall" item

(more about embedded ITU in the Continent-AP-Windows - Admin Guide.pdf page 5)

5https: //pandia.ru/text/78/111/images/image006_12.jpg "width =" 323 "height =" 247 src = ">

IPspecify the Access Server address 91.242.171.57 After completing the installation, be sure to restart your PC.

7 https://pandia.ru/text/78/111/images/image008_9.jpg "width =" 316 "height =" 242 src = ">

After restarting the PC, the "Security Code" will appear in the "Programs" menu.

The file located at http: // www. ***** / cont / install / request. xsl copy to the C: \ Program Files \ Security Code \ Continent Client folder, replacing the installed one. If request. xsl you saved as request. xml, delete the installed one, and change the extension of the newly copied one to * .xsl.

Also, an icon will appear in the taskbar, right-click ( right button mice)

9

carefully look at the following request form

10 Employee name "should be entered" organization", possibly an abbreviated name (usernames or the names of your PC are not allowed.) When creating a request, do not specify quotes.

In the "Description" field - the name of the organization in full;

In the field "Organization" - abbreviated name;

All fields are required.

The e-mail address must be specified as an official one (if there is none, please enter it), the exchange of messages, requests and certificates will be used only via e-mail specified in the electronic request with the application.

Print and fill in the request form. There is no need to edit the displayed form (* .html).

The proposed electronic form query that contains the name of the current Windows user(you can edit it at your discretion), leave the current time and date unchanged.

Click the "Details >>" button and select the encryption provider on which your key will be created; CryptoPRO CSP... After pressing the "OK" button, the formation of the secret part of the key will begin.

11 CryptoPro CSP "(floppy disk 3,5 '', USB Flash drives, registry, eToken, ruToken, etc.).

12 13

you need to move the mouse and press the keyboard keys.

14 https://pandia.ru/text/78/111/images/image016_1.jpg "width =" 258 "height =" 145 src = "> 13

Electronic (<имя запроса>.req) and paper (<имя запроса>.html) forms send to ***** @ *** ru 1 (pp. 6-7). When filling out a paper form, write the full name of the organization (manual filling is encouraged). You are waiting for a reply message with certificates. If necessary, the user can copy the container by means of CryptoPro to another carrier and install it on another workplace.

Installation of public key certificates for the Cryptographic protection system "Continent-AP" https://pandia.ru/text/78/111/images/image018_2.gif "width =" 587 "height =" 303 ">

select the received certificate

17

indicate the secret container

18

agree to import the root certificate (Yes, automatically)

19

install and agree with the proposed,

20

21

perform the "Connect Continent-AP" action

22

A colored icon indicates a successful connection to the Access Server.

Verify ping command 10.12.16.16 availability of the URM server.

Obtaining a Continent-AP key certificate:

1) Nonresident clients when sending all documents by e-mail, attached files must be scanned in color with a resolution that allows all signs on the seal of the organization to be read. The body of the letter must indicate the organization of the sender. Originals of documents on paper with signature and seal should be sent by mail or other in an accessible way within 3 (three) working days to the YNAO Finance Department. This option is convenient for remote users who are unable to personally bring the required documents. It is recommended to pack the documents to be sent with the built-in Windows zip packer. If everything is filled in correctly, a user certificate, root certificate and 1 (one) CryptoPro CSP 3.6 license for 1 (one) workplace will be attached in the response message.

23

2) Documents are delivered on paper with the signature and seal of the organization to the Finance Department of the Yamalo-Nenets Autonomous Okrug at Salekhard, avenue. Youth, 3rd floor, office 311

If a representative of the organization receives a certificate, you must have the following documents with you:

Power of attorney signed by the head of the organization with a seal,

available for download at (http: // www. ***** / cont / install / warrant. doc);

Media for saving certificates;

Identity document.

Briefly about creating a request:

1. Install the required software, replace the request template. xsl;

2. Print and fill without editing the html file;

3.Scan the completed form signed with the seal of the organization;

- for users who are unable to personally deliver a printed request form:

4. Pack in zip (req, html) and send to the box ***** @ *** ru;

5. Wait for the receipt of certificates and license in the reply letter;

6. And only after receiving the certificates, send the original by mail in an envelope;

- for users who have the opportunity to personally bring a request *.req and paper form *.html personally:

7. Bring the originals personally to the YNAO Finance Department

have a medium for recording certificates with you

identity document

completed power of attorney http: // www. ***** / cont / install / warrant. doc

Fitting © 2021 Tech Look - Gadgets. Android device. Antiviruses. Security. Graphics. Internet. Mobile devices