Failed to check the provided CSRF token, because your session was not found. What if the hardware key is found for the EGAIS? Promsvyazbank does not see Etoken Jacarta

Hello everyone today I want to tell my three day war with a problem that it does not see Etoken in PKI Client. The story of this company in our company is being introduced to encryption of letters and for this purpose, certificates of encryption and signing of letters to our Certification Center were issued (). Certificates issued on Etoken and all of them were established normally, but at the place of the accountant he refused seen. Next, I will describe the solution to the problem.

The accountant's workplace had a huge number of special accounting software. 3 RUCOCEN was already connected to the computer. That's how the PKI control console looked. We see 3 empty readers, but in the end it is not empty and how it turned out it was a tourse, which simply could not be determined by the PKI client.

That's how the Etoken properties looked. We see 3 empty devices.

The first thing to do is to add this number at the same time working keys is done so. Right-click on devices and choose management devices

and increase the number of hardware readers.

After this, the actions must be rebooted and the token must decide. If we did not decide read further :)

In viewing events, you can detect such a mistake.

Smart card reader "ALADIN TOKEN JC0" rejected ioctl get_state: I / O operation was interrupted due to the completion of the flow stream

This miracle most often pops up for two reasons, draver was kicked and removal and permutation or registry editing are required.

To reinstall, you need to remove the PKI Client and download the PKI Client with the subsequent reinstall. Let me remind you that when installing the Etoken client, it all must be disconnected from the computer. After installing the token, it must turn around and Windows must roll the driver on it and determine. If you do not define try turning off all the excess tokens and leave only the one. If the registry rules did not help. Open registry editor. We go to the branch: HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Cryptography \\ Calais

click on her right click and choose permissions

And put the rights of the creator-owner full

We reboot should work. If you do not appear write me together think. This is how the problem is simply solved that it does not see Etoken in the PKI Client.

I was looking for this problem, but it cannot be avoided. The problem occurs only when I try to make ajax call. The system will return the COULD NOT VERIFY THE PROVIDED CSRF TOKEN BECAUSE YOUR SESSION WAS NOT FOUND.

Based on the Spring MVC and CSRF Integration, I need to enable @EnableWebSecurity to solve this problem if I use Java Config, but if you use XML, you must use it:

@RestController Public Class CSRFController (@RequestMapping ("/ CSRF") Public CSRFToken CSRF (CSRFToken Token) (RETURN TOKEN;))

And I'm not sure how to use the class above.

The question is how to use the above class, if this is really a solution or is there any decision that I can use?

This is my XML file. security configurations;

In addition, I use a system similar to Ca Siteminder, which will check the user based on the header information without the input form.

For correct operation in the EGAIS system, you need to access the personal account of the organization on the official website. Already at this stage, many users encounter serious problems. One of them lies in the fact that the website of the EGAIS does not see the key.

The most likely reasons

There may be several reasons for this problem. Most often, the token cannot be found due to technical problems with the computer, the lack of drivers or the necessary add-ons. How to solve each of these problems?

Included incorrect media

Many entrepreneurs confuse Jacarta key with electronic signature To submit declarations to FSRAP, and try to go to personal Area It is using the latter. Check whether you inserted a carrier, you can in several ways.

• Examine an electronic signature certificate issued in the Certification Center. It should be specified serial number View JC-XXXXXXXXX and Jacarta PKI / GOST media type.
• open the "Jacarta Unified Client". If the flash card is detected, but connected tokens are not displayed in the program window - probably you are using the wrong media.

If you have not purchased a jacart, where to take a jacarta with an electronic signature? Contact the certifying center of your region, which is authorized to sell the CEP of this type.

The driver for the hardware keys of the EGAIS

You may be trying to use for yEGAIS KEY, Driver which is not yet installed. When you first connect Jacarta occurs automatic installation basic programs. This is a standard procedure for any new flash card that takes from 1 to 5 minutes.

After the installation is completed in the lower right corner, a notice of successful completion appears.

Do not attempt to enter your personal account before the driver appears - your computer at that moment has not yet established a connection with an electronic signature!

Not installed "Unified Jacarta Client"

The program is issued by the developer of tokens and is mandatory for installation. You can download it and other drivers for protected media on the site of the manufacturer of Tokens "Alladin - RD".

USB port does not work

There are two solutions options:

• Insert the token to another port and run the check again;
• check the power of the USB port.

To check, connect to a USB any other workshop card. If it is also not detected, then the problem is in USB. Contact your organization's technical specialist or to the repair master.

When the Jacarta media is properly inserted into the computer, the indicator lights up on its case. Depending on the model, it can be green or orange. If the indicator is not lit, the key cannot be found Егас, as it is not connected.

Outstructure Routeen EDP 2.0

When you try to log in at the bottom of the browser screen, you may have a message about add-on Rutoken Web Authentication Library. it software FSRAP is provided, is safe and necessary for correct work with the site. To start, click "Allow" in the pop-up window, and then repeat the check again.

How to use the hardware key of the EGAIS?

So, the first problems are solved, and you successfully went to your personal account. How to avoid repetition of such situations? Insert the Cap only to work and do not use it at another time to prevent the carrier overheating. Before starting work, always check the indicator - it signals that the token works correctly.