FTS of Russia: Personal account of taxpayer LC FTS of Russia

2023

As it turned out, you can connect to the personal account of the Federal Tax Service from your workplace on Linux

The TAdviser reader demonstrated to the editorial office the ability to work operating system Linux with the personal account of the taxpayer of an individual entrepreneur on the site, FTS although the instructions for connecting on the agency's website indicate compatibility only with operating systems Microsoft Windows Apple and MacOS X. However, Linux users are also available this functionality.

According to TAdviser IT specialist Alexander from Arbitration Managers Holding, you can connect to the personal account of the taxpayer of an individual entrepreneur on the FTS website using the Debian distribution, on the basis of which the domestic operating system Astra Linux is built. Also, to connect, you need to download and install the system components pcscd and libccid.

In addition, you need to download, install and configure^[1] a domestic crypto provider and an extension for the Chromium-Ghost browser from CryptoPro, which provide support for domestic encryption algorithms in the TLS protocol.

The certificate of qualified electronic signature must be located on one of the hardware keys: Rutoken EDS or GOST JaCarta-2. Packages for interaction of the crypto provider with the token used must be downloaded from the manufacturer's website. In our example, the Rutoken key was used. The manufacturer of this hardware key even published instructions on his website^[2] website at the entrance to the personal account of the Federal Tax Service of Russia using their key and various versions of Linux, including domestic ones.

You can check the correctness of the browser and crypto provider settings using the CryptoPro website.

Successful verification of the CryptoPro connection and the Chromium-Guest browser module

If everything is set up correctly, then you can go to the website of the Federal Tax Service to connect to the taxpayer's personal account. In it, you need to select the link "Rutoken EDS 2.0 or 3.0."

Entrance to the personal account of the taxpayer of the legal entity. Click on the marked link.

Next, follow the link "another section."

Go to check the certificates of the signature of the legal entity by the marked link.

In it, click the Start Scan button.

Scroll the page that opens until the "Start Scan" button appears

Then you need to select the appropriate certificate of the entrepreneur, to whose personal account you need to connect.

In the opened menu of the key "Rutaken" you need to select the required certificate...

... and confirm its application.

After that, the "Enter your personal account" button should appear, which allows you to interact with the agency's website completely electronically using a browser from under the Linux operating system.

If the certificate is successfully verified, the "Log in to Personal Account" button must be activated

There are similar instructions for connecting a crypto provider, browser module and USB key for the domestic ALT Linux^[3] platform^[4]. In this distribution, it is possible to configure authentication using a qualified electronic signature on the ESIA website, and with its help you can connect to the taxpayer's personal account.

Checking the browser, the GOST-TLS module and the CryptoPro crypto provider in the domestic ALT Linux OS

Despite the lack of official support for Linux on the FTS website, all technologies work on this operating system. However, this possibility is not indicated in the official requirements of the Federal Tax Service. And since the official versions of the requirements are usually used when drawing up documentation for tenders for digitalization, this may limit the transition, in particular, of the accounting department of enterprises to domestic operating systems, since they are not officially announced as supported on the website of the Federal Tax Service.

This is due to the fact that the accounting department submits financial statements to the Federal Tax Service and it is for it that jobs are needed that can interact with the taxpayer's personal account. Therefore, when buying computers for an accountant, you need to indicate the requirements in the tender documentation, including for connecting to the personal account of the Federal Tax Service, and there are only Windows and MacOS. Therefore, only these operating systems can be indicated in the tender documentation, and any proposals with Linux or domestic operating systems based on it will be considered not corresponding to the tender documentation. Moreover, this restrictive requirement for the use of domestic operating systems can be formulated without specifying specific names, for example, so "Meet the requirements for connecting to the taxpayer's personal account on the FTS website."

The Federal Tax Service was demanded to explain why its services for legal entities are intended only for Windows and MacOS users

Anton Gorelkin On November 24, a message appeared on the Telegram channel of the deputy chairman of the State Duma Committee on Information Policy^[5] appeared^[6] that the Federal Tax Service limits the use of domestic operating systems to legal entities. The problem is that the site FTS does not publish instructions for connecting to the "Personal account of the taxpayer of a legal entity" using domestic operating systems. In particular, the deputy's subscriber complains:

The accounting department actually got up: after switching to Astra Linux, it became impossible to enter the personal account of a legal entity on the website of the Federal Tax Service. The domestic operating system is not in the list of supported software for the correct operation of the crypto key, there are still only foreign Windows and Mac OS.

Requirements for entering the personal account of a taxpayer of a legal entity

Indeed, in the instructions for connecting users of the personal account there is a section "3.2. Hardware and Software Requirements, "which lists the following requirements:

The set of hardware on which the components of the Personal Account are located is located on the taxpayer's workstation. The following software must be installed at the taxpayer's workplace: Windows 7 Service Pack 1 (SP1) and higher, Mac OS X 10.13 or higher; Cryptoprovider with support for encryption algorithms GOST 34.10-2001, GOST 28147-89, GOST R 34.11-2012. (Certified version of "CryptoPro CSP" 4.0 R4 or higher. To work with the functionality of reissuing certificates, CryptoPro CSP 5.0.12000 or higher is required. For Mac OS X 10.14 or higher, it is recommended to use a certified version of CryptoPro CSP 5.0. With Windows 11, it is recommended to use version "CryptoPro CSP" 5.0.12000 and higher.)

Excerpt from the rules of use "CryptoPro CSP" 4.0 R4 with an incomplete list of supported operating systems

At the same time, if you look at the technical requirements for CryptoPro CSP 4.0 R4 itself, it turns out that it supports a huge number of operating systems, including Astra Linux, Alt Linux, Red OS, and many others. Similarly, hardware key manufacturers - RuToken and JaCarta - have support for domestic operating systems.

The Federal Tax Service is one of the key customers of Aladdin, we have been working successfully with this ministry for many years, "Sergey Ermolaev, a representative of Aladdin R.D., explained to TAdviser. - If you enter your personal account using Aladdin solutions - USB tokens and JaCarta PKI or 2 GOST smart cards - you really need to install an additional driver "JaCarta Single Client." At the moment, this driver is compatible with one of the leading domestic operating systems Astra Linux, and supports work with more than 13 domestic and foreign Linux distributions.

The Astra Linux operating system itself, like its domestic counterparts, also has tools for protecting communication channels using the TLS protocol using domestic GOST encryption algorithms, and also provides integration with both RuToken and JaCarta.

Access with Astra Linux is technically already possible, but requires some sequence of preliminary actions according to a certain instruction, "Yuri Sosnin, Deputy General Director of Astra Group, told TAdviser. - To ensure such adaptation, we are working on the compatibility of our OS with browsers, domestic CIPFs implementing secure communication channels (GOST TLS), support for domestic RuToken plugins, ifcp and cades plugin, as well as correct work together with electronic signature creation and verification tools and protected key information carriers.

That is, technically working with the FTS website using domestic OS, plugins for browsers and USB keys is possible, but the department has not yet updated the instructions and has not approved new regulations for interaction with domestic products. At the time of publication, the Federal Tax Service was unable to respond to a TAdviser request regarding the use of domestic OSs. Perhaps Anton Gorelkin will be more lucky with his request:

Everyone knows that Astra Linux is actively being introduced into Russian enterprises and state institutions (for example, the State Duma has already purchased almost two thousand licenses and is gradually transferring all jobs, including deputies, to the Russian OS), the deputy wrote in his telegram channel. - He sent a deputy request to the head of the Federal Tax Service Daniil Yegorov and asked to clarify how Astra Linux users can get the opportunity to work with the personal account of a legal entity.

2020: Entering the taxpayer's personal account for individual entrepreneurs using GOST and JaCarta-2 SE JaCarta-2

On June 25, 2020, Aladdin R.D. announced that USB tokens and smart cards of the JaCarta family (JaCarta-2 GOST, JaCarta-2 SE, JaCarta-2 PKI/GOST and JaCarta-2 PRO/GOST) are fully integrated on the official website of the Federal Tax Service of Russia as part of the update of JC-WebClient to version 4.2 to work in the taxpayer's personal account^[7] for individual entrepreneurs.

Personal account of the taxpayer

According to the company, the taxpayer's personal account for individual entrepreneurs (PLC) FTS Russia is a free online service developed to simplify the relationship between individual entrepreneurs tax and the service, and pay debts to. state

The LC of the Federal Tax Service of Russia has been working for individual entrepreneurs for several years and is changing every year, special changes in functionality have occurred in 2019. By transferring most of the questions to Online, the tax service removes the need for the taxpayer to contact the Federal Tax Service on each issue via Offline communication channels (telephone or in person).

Among the functions of the tax office for individual entrepreneurs:

• displaying information about the individual entrepreneur;
• calculations with a budget - displaying information on open obligations, on transactions for settlement with a budget, making offsets and returns, clarifying unclear payments;
• sending appeals to the tax authorities;
• viewing and selection of taxation systems for individual entrepreneurs;
• receipt of extracts and certificates, including information reconciliation certificates.

To sign applications and requests to the tax authorities, the use of electronic signatures is required.

The full functionality of the personal account (sending documents to the tax authorities) is available if there is an electronic signature with a certificate from the Ministry of Telecom and Mass Communications of the Russian Federation. For access to the LC, the company "Aladdin R.D." offers a number of tokens of the JaCarta line - JaCarta-2 GOST, JaCarta-2 SE, JaCarta-2 PKI/GOST and JaCarta-2 PRO/GOST. The JaCarta models of this line are the next generation of USB tokens, smart cards and security modules with hardware support for GOST R 34.10-2012 and GOST R 34.11-2012 for use as a certified EP tool and strict authentication.

USB tokens and second generation JaCarta smart cards are:

• certified electronic signature tool;
• full-fledged CIPF with a whole set of cryptographic functions;
• a means of strict two-factor authentication for secure access to information systems, Web portals and cloud services;
• means of secure storage of user data.

JC-WebClient 4.2 is used to work with USB tokens and JaCarta smart cards in Web applications and cloud services. JC-WebClient 4.2 allows you to implement mutual two-factor authentication of the user and the Web server, the formation and verification of an enhanced or enhanced qualified electronic signature, encryption of data transmitted between the client computer and the Web server, as well as secure confirmation of transactions using the Trust Screen device "Anti-Fraud Terminal."

Entering the taxpayer's personal account for individual entrepreneurs using electronic signature means, unlike authorization using a login and password, allows you to use the full functionality of the personal account of the Federal Tax Service, carrying out a fully legally significant electronic document flow, therefore, personal visits to the tax service will be reduced to a minimum.

Electronic keys and smart cards of the JaCarta family for the personal account of the Federal Tax Service for individual entrepreneurs can be purchased in one of the Certification Centers of the Ministry of Telecom and Mass Communications of Russia.

Notes