...

...

...

1. MOEX EDS DSSK Certificates storage (х86, х64) (here in after Certificates storage);

2. certificates;

3. up to date version of Java;
4. Java API for MOEX EDS DSSK.

...

...

...

...

...

1. install and configure the Certificates storage;

2. sign necessary documents with Moscow Exchange (Certificate authority in this context) for obtaining a certificate;

3. create a request for certificate issuing;

4. download the recieved certificate to the Certificates storage;

5. install Java;

6. install Java API;

7. access the Web-client.

Certificates storage

Certificates storage is designed to store and manage certificates through which incoming and outgoing messages are encrypted and decrypted. This kit is used for:

• generation of a request to Certificate authority for obtaining a certificate;

• adding and removing certificates;

• checking and displaying the status of certificates (revoked, active);

• operation of the third-party software (for example, Web-client Java applet) with the Cryptographic Service Provider using the API of the Certificates storage.

...

Installation of the Certificates storage begins with launching the installer file rcs_x86.msi (additionally, file rcs_x64.msi for Windows 64-bit, see details above). This opens a Windows OS security window, in which you must click Run.

Image Removed

Fig. 1 – security window

Then the screen will display the Setup Wizard Welcome screen, where you should click Next (Fig. 2).

Image Removed

Fig. 2 – start of installation

After that dialogs of preparation for installation will pop up on the screen as described in Table 1.

Table 1 – Installation of the Certificates storage

Dialog box	Action
Image Removed	In this window you will be prompted to enter full name and company name. We recommend skipping this step by clicking on the Next button
Image Removed	In this window you will be asked to specify a destination folder (by default C:\ Program Files (x86)\ Validata\), using the Browse button. We recommend skipping this step by clicking on the Next button
Image Removed	In this window you can select Full installation (installing all components required for the Web-client to work) (clause 1) and click Next (clause 2)
Image Removed	In this window click Next to start installation

Further progress of the installation is displayed in the dialog box System Update (Fig. 3).

Image Removed

Fig. 3 – Status of the installation

After a few seconds the program will be installed on the computer and a dialog will pop up (Fig. 4), where you need to click Finish.

 Image Removed

Figure 4 – installation complete

As a result, several software components will be installed to the computer. In the process of configuration the user only works with MOEX EDS DSSK – hereinafter Certificates storag.

Since the Certificates storage interface only supports the Russian language, in the non-Russian language versions of Windows after the installation is complete, it is necessary to specify the localization of programs which do not support Unicode.

...

For operating systems, where regional settings differ from the Russian ones, the Certificates storage will not display correctly most of the inscriptions in the interface. In this connection, we recommend setting the Russian language as the basis for programs that do not support Unicode in the operating system settings. To do this:

...

click on Change location (see Fig. 6);

open the Administrative tab ( Fig. 7.1 ) and click Change system locale (Fig. 7.2);

...

As a result of your settings when starting the Certificates storage via Start→All Programs→(ПКЗИ СЭД МБ) MOEX EDS DSSK→(Справочник сертификатов) Certificates storage, an interface in Russian will be displayed (Fig. 10).

Image Removed

Fig. 10 – Certificates storage

Key certificates

To work in the NSD EDC system the user's computer must have the following certificates and keys installed:

• NSD certificate (public key) to encrypt messages sent from the client to the repository;
• Clients certificate with public and private keys, used for creating digital signature to messages sent from the client to the repository and for decrypting messages sent from the repository to the client;
• Root certificate of the Moscow Stock Exchange (Certification Authority, hereinafter CA). 

The process of obtaining private and public client key (certificate) consists of two stages:

1. organizational – registration of necessary documents;

2. technical – making a request to the Certificates storage.

Obtaining a certificate

...

To work in the Web-client it is initially necessary to connect to the Electronic Document Interchange (EDI) system. To do this:

1. sign an agreement about participation in the EDI system. To conclude a contract provide the Moscow Exchange with the following documents or certified copies thereof (list of documents obtained when connecting to EDC);
2. conclude a contract for the provision of the Authorized organization services;
3. execute and deliver an Application for the generation of electronic signature;
   
4. pay for the EDI services;
5. obtain from the Moscow Exchange a certificate of registration document and a CD disk, comprising of:
   1. software (MOEX EDS DSSK: Certificates storage, MOEX EDS DSSK: Java API);

   2. certificate of registration with private key.

 Once all the necessary documents are prepared, you can proceed to the technical part.

Technical part

Installing the certificate of registration

Certificate of registration are used for:

1. generation of a profile;

2. generation of user's private and public key;

3. creation of a request to issue a public key certificate.

Depending where the certificate is stored (external hard drive or a computer), the order they are added to the Certificates storage and making a request will differ.

	If the key and the certificate of registration are stored on the user's computer		If the key and the certificate of registration are stored on an external drive
Image Removed	During the first start a window will open informing you that you need to insert an external drive. As the key and the certificate of registration are located on your computer, skip this step and click Cancel	Image Removed	Before you begin, insert an external drive in the usb-port on your computer, then run the Certificates storage. This opens a window where you will need to select device containing the key and certificate of registration (1) and click OK (2)	Image Removed
Image Removed	During the initial connection the user only  has a certificate of registration, so skip this step by clicking Cancel	Image Removed	As a result the key and the certificate of registration will be  added automatically. The screen will display a message containing information about the added files, where you need to click OK	Image Removed
Image Removed	Next the storage will be automatically checked for the presence of a personal certificate. During the first start a personal certificate and copies of storagies are not available. Skip step by clicking No	Image Removed	The certificate of registration will serve as a basis for creating a personal and local storage (profile). The personal  storage is confirmed with an electronic signature using the registration key. The personal storage will display the certificate of Moscow Exchange, and the user’s registration certificate in Certificates of registration section	Image Removed
Image Removed	Then the screen will sequentially display windows for selecting the certificate of registration, where you need to click OK and Yes respectively	Image RemovedImage Removed	Next, a message will appear informing you that the personal storage is protected with the registration certificate. In this window you need to click OK to create private keys and make a request for their confirmation (see Generation of user keys and creating a request)	Image Removed
Image Removed	The window for adding a certificate of registration will appear, where you need to select the certificate file and click Open. The registration key will be imported automatically (provided that it is next to a certificate, in the same folder)	Image Removed
Image Removed	Next, the screen displays information about adding certificates of registration The certificate of registration will serve as a basis for creating a personal and local storage. The personal storage is confirmed with an electronic signature using the registration key. The personal storage will display the certificate of Moscow Exchange, and the user’s registration certificate under Certificate of registration Click OK to continue working in the storage	Image Removed
Image Removed	Next, you will need to generate your public and private key and a request for their confirmation by the Moscow Stock Exchange by clicking OK  Panel If the registration certificate and keys are stored on the computer, the request and the private keys will be generated automatically	Image Removed

...

Image Removed
Fig. 11 – generation of a request 

In the Certificate request dialog box, click OK (Figure 12). This will open the Export files for the Registration Centers, where you should select a folder to which the request will be saved and click the Save button (Fig. 13). 

Image RemovedImage Removed
Fig. 12 – request parameters                           Fig. 13 – export files

The resulting request (a *.pse file) needs to be compressed and sent to pki@moex.com, with a scanned and signed registration certificate (document) attached. The subject field should specify the name of the organization and the required scope of the certificate (for example, the Oblachnye Investitsii CJSC – exchange market EDI, stock market EDI). The Moscow Exchange will respond with a letter with an attached ZIP-file of the certificate. This certificate must be added to the Certificates storage.

...

To add a certificate to the  Certificates storage:

1. run Certificates storage menu using the Start menu→All Programs→ ПКЗИ СЭД МБ (MOEX EDS DSSK)→Справочник сертификатов (Certificates storage);

2. select Справочник сертификатов (Certificates storage)→Импортировать сертификат в локальный справочник (Import Certificate) to the local storage (see Figure 14). This will open a window to select the certificate file (Fig. 15);

   Image RemovedImage Removed
   Fig. 14 – starting to import file                                                                     Fig. 15 – selecting a certificate 
    
3. select the certificate file (see Fig. 15.1 ) and click OK (see Fig. 15.2 ). Before adding a window will open displaying the certificate to be added, in which you should click OK (Fig. 16).
   Image Removed
   Fig. 16 – information about the certificate to be added

This will open a window informing the certificate was successfully added to the Certificates storage, where you need to click OK (Figure 17). Example of adding a certificate is presented in Fig. 18.

 Image RemovedImage Removed
Fig. 17 – informative message                                    Fig. 18 – example of adding a certificate

Then the certificate must be set as default. To do this, select the added certificate, right-click on the shortcut menu, and select Сделать сертификат рабочим (Make certificate workable) (Fig. 19).

Image Removed

Fig. 19 – selecting the working certificate

After adding a personal certificate to the Certificates storage, the personal storage is signed on the member’s personal certificate. The generation of a digital signature for sent messages is ensured by the private key.

...

To install Java, follow the diagram shown in Fig. 20

Image Removed

 Fig. 20 – scheme of Java installation

...

To make Java applet work with Certificates storage, the user must install the appropriate Java API. To do this, download the Java API package  (download link) and run the installation file. This opens a security Windows OS window (Fig. 21), where you need to click Run.

Image Removed

Fig. 21 – security window

Then the screen will display the Setup Wizard Welcome screen, where you should click Next (Fig. 22).

Image Removed

Fig. 22 – start of installation

After that the screen will open dialogs, preparing for installation as described in Table 2.

Table 2 – installation of the Certificates storage

Dialog box	Action
Image Removed	In this window you will be prompted to enter full name and company name. We recommend skipping this step by clicking on the Next button
Image Removed	In this window you will be asked to specify a destination folder (by default C:\ Program Files (x86)\ Validata\), using the Browse button. We recommend skipping this step by clicking on the Next button
Image Removed	In this window you can select Full installation and click Next
Image Removed	In this window click Next to start installation

After a few minutes the program will be installed on the computer and a dialog will pop up (Fig. 23), where you need to click Finish.

Image Removed

Figure 23 – installation complete

Software installation is complete.

The information for further preparation of the computer and the configuration of the installed components is presented in the following articles:

...