What needs to be done at the ETP after receiving a new ES certificate? Why do I get the error "You do not have sufficient authority to perform this action..." when applying for an auction or other action? Update User Permissions


—
—

Detailed information on registration of a certificate on the ETP, as well as information on other sections and sites not presented in the instructions, you can get from the support specialists of a particular ETP.

Sberbank-AST

  1. On the home page ETP, without entering the Personal Account, click the "Participants" section and the "Registration" button in the drop-down list.
  2. Click on the "Select" button opposite the item "Registration of a participant user (new electronic signature certificate)" and select one of the buttons on the right:
    - "Apply" - to add a new user.
    - "Bind certificate to registered user" - to renew the certificate of an existing user.
  3. In the form that appears, select a new certificate and click "Fill in the registration form".
  4. Fill in the form fields. If you add a new user, then the login must be different from the previously used one.
  5. Click Sign and Send.

After completing these steps, you can immediately enter the ETP using a new certificate.
ETP technical support.

USP Sberbank-AST (utp.sberbank-ast.ru)

  1. Sign in Personal Area ETP by login and password or valid certificate, through which entry is possible. If you do not remember your username and password, use the "Forgot your password?" on the login page to reset your password. If you do not remember the data, then use site instructions.
  2. Select the "Personal Account" section and the "Register of Representatives" button in the drop-down list.
  3. Click the "Change user certificate data" button for the desired user.
  4. In the required field, upload the public key file of the new certificate and click the "Sign and save" button.


For questions related to work on the site, filling out forms and documents, please contact ETP technical support.

EETP "Roseltorg"

Up-to-date instructions for adding a certificate to sections of Roseltorg are located at https://www.roseltorg.ru/faq/personal. Select the desired section and read the instruction "How to download electronic signature(EP)".

For questions related to work on the site, filling out forms and documents, please contact ETP technical support.

National electronic platform

1 way

  1. Log in to your personal account using your login-password, or using the old certificate, if it is still valid, or through the ESIA.
  2. Expand the "My Account" section and select "Download certificates", then specify the desired certificate.

2 way

  1. On the main page of the ETP, without entering the Personal Account, select the "Participants" section and click on the "Registration of Power of Attorney" button in the drop-down menu.
  2. Fill out the form in which you need to specify a new username and password.
  3. In the last field, select a new certificate and click on the "Submit" button.
  4. Within an hour, a letter will come to the mail, in it follow the link and specify a new login and password to enter.

After performing the actions indicated in the methods, it will be possible to immediately enter the ETP using a new certificate.
For questions related to work on the site, filling out forms and documents, please contact ETP technical support.

RTS-Tender

The order of actions of the Participants when working with users of the organization depends on whether the organization of the Participant is registered in the Unified Information System.

— The participant is registered in the EIS

After the registration of the Participant in the UIS, the actions to add users of the organization are performed by the Participant in the Personal Account of the UIS.

— The participant is accredited on the site, but not registered in the EIS

Actions to add a user are carried out on electronic platform. To add an electronic signature to a Participant who is not registered in the EIS:

  1. Open the main page of the RTS tender and select the "44-FZ" section, then the "Participants" section;
  2. Click on the "Add User" section or go to the "Accreditation" section and click on the "Request to add a new user of the organization" link, which is located under the "Continue registration" button;
  3. The "Application for adding a user" form will open. In the "Certificates" field, click the "Select from list" button. Select your certificate and click OK. The data specified in the certificate will automatically fill in a number of fields in the "Application for adding a user" form;
  4. Fill in the required fields marked with "*";
  5. Click the "Submit" button and confirm the action with a certificate. An application for adding an electronic signature is approved automatically within 20-30 minutes.

For questions related to work on the site, filling out forms and documents, please contact ETP technical support.

Order of the Russian Federation "Tatarstan"

  1. On the main page of the ETP, without entering the Personal Account, click on the "Registration" section.
  2. Select the "Add New EDS" button.
  3. Click on the "Organization User" button, select a new certificate and an organization from the list.
  4. Fill out the form in which you need to specify a new login and password, and click on the "Submit for consideration" button.

After completing these steps, you can immediately log in with a new certificate.
For questions related to work on the site, filling out forms and documents, please contact ETP technical support.

ETP RAD

1 way

  1. On the main page of the ETP, without entering the Personal Account, select the "Participants" section and the "Registration of Power of Attorney" button in the drop-down list.
  2. Fill out the form in which you need to specify a new login and password, select a new electronic signature and click on the "Submit" button.
  3. If the message “A user with this certificate is already registered” appears, then click on the “Continue” button.
  4. Fill out the form and select the "Sign and send" button
  5. On the email, which was indicated in the application, a confirmation letter will come, you need to follow the link in it and enter your login and password. An application for adding an electronic signature is approved within an hour after confirmation of the mail.

2 way

  1. Enter the personal account of the ETP using your login and password or a valid certificate that allows you to enter. If you do not remember your username and password, use the "Password recovery" or "Remind password" button on the login page. If you do not remember the data for recovery, then use the instructions on the site.
  2. In the "My Account" section, click on the "Change electronic signature" button.
  3. Select a new electronic signature and click the "Sign and send" button.
  4. On the new page check the box "I confirm the change of roles" and click the "Sign and send" button.

A fact known to all administrators is that after adding a computer or user to an Active Directory group, to update group membership and apply the assigned rights / policies, you need to restart the computer (if a computer account was added to the domain group) or restart the system (for the user). This is because AD group memberships are updated when the Kerberos ticket is created, which occurs at system boot and user logon.

In some cases a system reboot or user logoff is not feasible for operational reasons. And you need to use the received rights, access or apply new policies now. Possibility to upgrade membership account in AD groups without rebooting or re-registering the user in the system.

Note. The technique described in this article will only work for network services that support Kerberos authentication. Services that only work with NTLM authentication still require a logof + user logon or a Windows restart.

The list of groups in which the current user is a member can be obtained from command line and with the command:

The list of groups the user is a member of is contained in The user is a part of the following security groups section.

The utility can reset current Kerberos tickets without rebooting. klist.exe. Klist has been included in Windows since Windows 7, for XP and Windows Server 2003 is installed as part of the Windows Server 2003 Resource Kit Tools.

To reset the entire Kerberos ticket cache of a computer (local system) and update the computer's membership in AD groups, you need to run the following command at the command prompt with administrator rights:

klist -lh 0 -li 0x3e7 purge

Note. 0 x3e7- a special identifier indicating the session local computer(local system).

After executing the command and updating the policies, all policies assigned to the AD group via Security Filtering will be applied to the computer.

As for the user. Let's say a user's domain account was added to an Active Directory group to access a file share. Naturally, the user will not have access to the directory without a relogin.

Let's reset all Kerberos tickets of the user with the command:

To see the updated list of groups, you need to launch a new command line window and through , so that a new process is created with a new security token.

Let's say an AD group was assigned to a user to grant access to a network directory. Try contacting him FQDN name (for example, \\msk-fs1.winitpro.loc\distr) and check that the TGT ticket has been updated:

The network directory, which was granted access through the AD group, should open without a user relogin (!!! be sure to use the FQDN name).

Thank you very much, Mikhail, everything was done promptly and, most importantly, it was clear to me ... Since we found mutual language. I would like to keep in touch with you in the future. I hope for fruitful cooperation.

Olesya Mikhailovna - General Director LLC "VKS"

On behalf of the State Unitary Enterprise "Sevastopol Aviation Enterprise" we express our gratitude for the professionalism and efficiency of your company! We wish your company further prosperity!

Guskova Liliya Ivanovna - manager. SUE "SAP"

Thank you Michael for your help with the design. Very qualified employee +5!

Nadiya Shamilyevna - Entrepreneur IP Anoshkina

On behalf of the company "AKB-Avto" and on my own behalf, I express my gratitude to you and all the employees of your company for productive and high-quality work, sensitive attitude to customer requirements and promptness in the execution of ordered work.

Nasibullina Alfira - Senior Manager"AKB-Auto"

I want to thank the consultant Michael for great job, timely and complete consultations. He is very attentive to the client's problems and questions, promptly solving the most difficult situations that would seem to me. It's a pleasure to work with Michael!!! I will now recommend your company to my clients and friends. Yes, and technical support consultants are also very polite, attentive, they helped to cope with the difficult installation of the key. Thank you!!!

Olga Sevostyanova.

Acquisition of the key turned out to be very easy and even pleasant. Many thanks for the assistance to the manager Michael. Explains things that are complex and massive to understand, concisely, but very clearly. In addition, I called the hotline free line and on-line, together with Mikhail left a request. I got the key in 2 business days. In general, I recommend it if you save your time, but at the same time you want to have an understanding of what you are buying and what you are paying for. Thank you.

Levitsky Alexander Konstantinovich Samara

Personal gratitude to the consultant Mikhail Vladimirovich for the prompt consultation and work on the accelerated receipt of the ES certificate. During the preliminary consultation, the optimal set is selected individual services. The end result is immediate.

Stoyanova N.L. - Chief Accountant LLC "SITECRIME"

Thanks for the quick work and expert help! I was very pleased with the advice!

Dmitry Fomin

LLC "Expert System" thanks the consultant Mikhail for the prompt work! We wish your company growth and prosperity!

Sukhanova M.S. - AppraiserLLC "Expert System", Volgograd

Thanks to the consultant, who introduced himself as Mikhail, for the efficiency in working with clients.

Ponomarev Stepan Gennadievich

Many thanks to the consultant Mikhail, for the assistance in obtaining the EDS. For prompt work and advice on issues arising in the process of registration.

Leonid Nekrasov

The company, represented by consultant Mikhail, does the impossible! Speed ​​up accreditation in less than 1 hour! Payment upon rendering of the service. I thought this didn't happen. With full responsibility, I can advise you to contact the Center for issuing electronic signatures.

If you are having the following errors when entering the trading platforms by EDS, then you have a browser installed Internet Explorer 11 , which does not work correctly with EDS and other components necessary for working with electronic platforms. To restore work on electronic trading floors you need to do the following: 1. Install " CryptoPro EDS Browser plug-in". a) Download CryptoPro EDS Browserplug-in and save it on your computer. b) Install the plugin following the installation wizard instructions. c) Restart Internet Explorer (if you had it running). 2. Open the menu Tools - Compatibility View Options and enter the address http://etp.roseltorg.ru in the line add this website and click Add:

Roseltorg.ru will appear in the list of websites for which you have selected Compatibility View.

3. We go to the personal account of the site using the EDS. This procedure can be repeated for all sites that have problems with logging in via EDS. If the above methods did not work, then in order to restore work on electronic trading platforms, it is necessary roll back version Internet browser Explorer up to 10 or 9 ( this decision not suitable for Windows 8.1). To uninstall the Internet Explorer 11 update, we recommend that you do the following: 1. Click the Start button, type Programs and Features in the search box,

and then click the View link installed updates in the area on the left. 2. In the Uninstall update section, navigate to Microsoft Windows.