Electronic budget - presence of problems and their absence. How to solve problems in GIS electronic budget. Electronic budget setting up a workplace

The transition to “Electronic budget” is a requirement of the time and international standards. According to the Minister of Finance of the Russian Federation Siluanova A. G. the creation of an “Electronic Budget” will provide “an opportunity to strengthen the accountability of public authorities to society, and therefore increase transparency and efficiency of use budget funds».

Modern Russia is experiencing one of the most active stages of development information society, building an electronic state, electronic government.

Issues of informatization have already affected the sphere of public finance management. Until 2015, the electronic budget system will unite all ministries and departments of the Russian Federation and all organizations included in their structure. The President of the Russian Federation, in the Budget Address for 2012 - 2014, set the task for the Government of the Russian Federation on the need to approve the creation and development of an integrated information system for public finance management “Electronic Budget”, electronic document which can be seen on the official website of the Ministry of Finance of the Russian Federation - http//www.minfin.ru.

Speaking about the relevance of the topic, it should be noted that the concept of creating and developing a state integrated information system for managing public finances “Electronic Budget” was approved by Order of the Government of the Russian Federation dated July 20, 2011 No. 1275-r. The concept was developed in accordance with the provisions of the Russian Government Program for Improving Efficiency budget expenditures for the period until 2012, approved by Order of the Government of the Russian Federation dated June 30, 2010 No. 1101-r. The concept for the creation and development of the “Electronic Budget” system provides for a five-year implementation period - until 2015.

According to Pertsova L.V.“Electronic budget” is intended to ensure openness, transparency and accountability of the activities of state authorities and local governments, improving the quality of financial management of sector organizations public administration and creating conditions for the most effective use of budget funds and assets of public legal entities through the formation of a single information space, the use of information and telecommunication technologies in the field of public finance management - which is the main goal of the creation and development of the “Electronic Budget”.

System implementation electronic budget must achieve three interrelated goals.

Firstly, make open not only the result of financial and economic activities, but also the decision-making process itself. Not only open documents - reporting data, projects, forecasts, but also let citizens understand the logic of decision-making.

Second goal– link financial information with the final results of government activities and make it accessible to a specific user.

Third goal– transition from local information systems each institution to use the so-called cloud technologies that create unified system for all participants in the budget process uniform rules. "We now have budgetary institution on every table personal computer, which essentially closes the entire network, does not allow users to participate in a single space that can be created using cloud technologies. More than 20,000 federal agencies spend billions of dollars to purchase, develop, and annually maintain accounting software.

So what are the advantages and disadvantages of creating an “Electronic Budget”? The advantages include the following:

• the creation of an “Electronic Budget” will help to unify and simplify the preparation and presentation of regulated reporting, thereby eliminating the need for repeated manual entry of information;
• the creation of an “Electronic Budget” will facilitate the transition to legally significant document flow in the field of public finance management;
• The procedure for processing documents and monitoring the execution of orders will be automated, thereby creating a centralized, modern repository of normative and other legal acts in the field of budget legal relations.
• cost savings on procurement and support software for budget design and execution;
• speeding up the passage of documents by organizing paperless document flow using digital signatures between the institution and its main manager or financial authority;
• the ability to work on the design and execution of the budget together with its subordinate institutions in a single database;
• the ability to analyze the progress of design and budget execution with any degree of detail online;
• control over the activities of the main managers of budget funds and state (municipal) institutions online;
• the ability to control the planning processes of budget execution by the population;

The disadvantage of the system, or more precisely, the problem of implementing the “Electronic Budget” system, is that:

• lack of necessary technical equipment. It is difficult to imagine the full integration of various organizations within the framework of building an electronic budget if some of them work for modern equipment and modern software products, while the other part uses outdated technology and programs of the last century.
• The second problem, referring to an interview with Dmitry Vakhrushev, a member of the expert group under the Commission for public discussion of issues of creation and development information technology in the field of public finance management of the Ministry of Finance of the Russian Federation, one might say, is the lack of software. As Dmitry Vakhrushev himself states: “The transition to new software is always difficult for specialists in institutions. I very often encountered when replacing one software product on the other with a simple problem, when the accountant cannot find the button that he pressed before... it is necessary to competently organize staff training at the implementation stage and create a high-quality support system.”
• The third problem is the following - each subject of the Russian Federation lives and develops in its own way, different from all others, and has its own specifics. If we apply the same methodology to each region, it is unlikely to yield results. It is very important that the implemented system is truly in demand locally, and most importantly, that it works. In order for the regions to be interested in the “Electronic Budget”, it must solve the management problems of the constituent entity of the Russian Federation, and also take into account the specifics of each region. The system needs to be adapted to the needs of end users, in in this case– for the needs of public legal entities (subjects of the Russian Federation and municipalities). Such adaptation can be carried out much more effectively if the regional segment of the “Electronic Budget” is created by regional developers.
• The fourth problem is the unwillingness of Russian software developers to get involved in the creation of components of the “Electronic Budget” system due to their narrow specialization, i.e., when one company deals only with public procurement, another - only with budget accounting or reporting, and a third - only with treasury accounting. In this regard, in order to solve problems within the framework of the “Electronic Budget” concept, the developer must be competent in all matters, including linking all systems ( public procurement, budget accounting and control) into one.

Thus, the creation of an “Electronic Budget” will create both favorable conditions for the development of a unified methodology for designing and executing the budget, as well as some “costs”.

— Budget planning and their solutions.

1. Upon entering personal account displays a warning window: “ There is a problem with this website's security certificate «.

Solution: Needs to be configured Internet Explorer. To do this, click on the icon gears in the upper right corner, then from the drop-down list Browser properties.

In the window that opens, go to the tab Safety

Choose Reliable sites and click the button below Websites.

Add *://ssl.budgetplan.minfin.ru in the box above and click Add.

2 . Window " Paste key carrier «

Solution: Check if your flash drive\ruToken\eToken with key information is inserted. If it is in place and working correctly, install the certificate. You can use .

3 .This page cannot be displayed.

Solution: Check browser version. For correct operation, you need internet explorer 11.0 or an analogue with TLS GOST support. To check internet version explorer you need to click on the gear , in the list that opens, select the last line - About the program.

Check that the certified version of the crypto provider is installed correctly CryptoPRO CSP(at the time of writing this is version 3.9 and 4.0).

Check for the presence of other crypto providers installed together with CryptoPRO CSP (a conflict is possible).

Check your antivirus and firewall settings. Filtering of https traffic must be disabled, or the portal address must be included in exceptions.

But this is a non-exhaustive list of problems that you may encounter while working on the Budget Planning portal. For more detailed analysis You can contact us for remote help (contacts in the upper right corner of the site).

4. After selecting a certificate, a window for entering your login and password appears.

Solution: The appearance of this window indicates that the user whose certificate you selected is not registered in the system. The system checks the user's SNILS specified in the certificate (in the subject field) with the SNILS specified when the user registered in the system. There were cases when an error was made in SNILS during registration; for clarification, you can contact the free multi-channel technical support number 8 800 350-02-18.

5. This page cannot be displayed. Turn on TLS protocols 1.0, TLS 1.1 and TLS 1.2

Solution: Most often, this error occurs due to problems with the cryptoprovider CryptoPRO CSP and incorrect configuration of anti-virus software. To solve this problem, apply the recommendations from point 3.

A new series of exciting adventures with your favorite EDMS budget.gov.ru. Error: validation failed or not avaliable yet. When signing a document, when selecting a signature, signatures are not visible in TLS Continent or Jinn-Client. But they are in Windows certificates and when you select them, the electronic system shows you hieroglyphs and laughs in your face, and the jinn client goes into an endless loop when signing.

It doesn’t see it on the flash drive at all.
Jinn-Client writes nasty things about you in hieroglyphs.

Did you think your problems were finally over? And they have just begun. You have switched to the TLS and CryptoPro continent and go to your personal account at lk2012.budget.gov.ru.

Let's start with - validation failed or not avaliable yet.

The error is quite simple and does not always happen; it concerns a gadget called eXtended Container. It apparently comes bundled with Continent TLS client 2.0.14, but not in the form expected by Jinn-Client. We go to install and remove programs, find eXtanded Container 1.0.2.2 or similar. We install eXtanded Container 1.0.2.2 from the set of the Client Gene that you have, the key should also be there.

If you don't have a key, this one might work. Click

license key E6FV-00BC-CLDE-00BC-0A49-0000-0009

There will be something like XC in programs and components. Then the validation failed or not avaliable yet error will probably disappear.

Jinn-Client shows hieroglyphs when signing and whether or not the signatures hang in the list on the flash drive.

This problem only affects signatures according to GOST 2012 and occurs in lk2012.budget.gov.ru. As far as I understand, this is due to the fact that the Treasury issued signatures according to GOST 2012, but not exactly the same. Perhaps next time the problem will not appear.

By the way, do you know where to look for what GOST your signature has?

But now we need to do something. We are determined to download the converter for signatures, there are instructions there. If we don’t trust me, go to the site, read it, download it. There is no need to install anything. Unpack the archive and run the .exe file. If signatures in Crypto Pro are set correctly, in the window that appears there will be a choice from all the signatures with notes of which state (if you have problems with CryptoPRO, I recommend it).

It’s important that when converting you will be asked to provide a password even if you didn’t have one. You can’t refuse, even a gap will do. Click next and select which flash drive to bury the signature on. Two files will appear named TE.cer and TEcont.p15. You cannot rename them and, as a result, you cannot put two signatures on one flash drive. If anyone knows how to do this, I would be grateful for your answer in the comments.

Well, when signing the document, do not forget to set your password in the Jinn Client field - Crypto container password. I’m not sure about the “remember” checkbox, because God knows where to uncheck it later if anything happens.

Here they are, below.

Actually, that's all, at this point Jinn Client should stop showing you hieroglyphs. We enjoy life and wait for new setups from Major Payne.

Another federal hemorrhoids crept up as planned, and as always... The basis will be taken from the instructions sent by email (with the request “incognito”), supplemented by my lyrics and notes. Because everything worked for us. By analogy with procurement in ⇒ Cloud I threw in everything you might need.

Lyrics and additions are also important, read from cover to cover.

Introductory . We have everything set up to work via the Internet. Explorer versions 11 and the KES 10 antivirus is installed. After the ransomware epidemic, we had to disable the Firewall and now we work through Windows Firewall. No settings were made in the “wall of fire”; EB-2012 works without problems. But I’ll show you the settings for KES 10 later. Internet Explorer 11 can be downloaded from ⇒ Yandex.

So, let's go...

Point No. 1 . Remove all versions of Jinn-Client and Continent TLS (if previously installed). Reboot.

Lyrics. If you don’t have any “homemade” departmental software, I also recommend running the registry utility CCleaner. And clean until it says “No errors.” If VirtualBox is installed, only errors from it will remain. Reboot.

Point No. 2 . Remove Extended Container (if it was installed before). Reboot.

Lyrics. I didn’t figure out how to remove it, it remained in the system - it didn’t affect the final result. As a last resort, you can simply put a fresh one on top. This is where we may need the Microsoft Visual C++ libraries (which I put in a separate folder).

Information. This time our Treasury remained silent, and I looked for all the software myself and installed it according to the instructions from the forums. Ultimately, we have Extended Container not from the “official” distribution, but version 1.0.2.2 (folder "eXtendedContainer" in the Cloud).

Point No. 3 . Install browser Mozilla Firefox 63.0.1 (32-bit), can be updated over old version.

Lyrics. I completed the step, but it didn’t work, but configured via Firefox SUFD flew off. The result was extra hemorrhoids. Internet Explorer 11- our everything! There's another problem here. Firefox and Chrome are constantly updated, but the final security requirements have not been formed... and extensions crash and are disabled... Firefox ESR is also going through a stage of global changes... In short, it’s better not to touch it.

Point No. 4 . Install CRL for GOST-2012 (from admin in Trusted root in Local computer). You can download the latest ones from crl.roskazna.ru.

For information. Different Electronic Budget certificates indicate different paths: crl.roskazna.ru and crl.roskazna.ru/crl/. If suddenly the list turns out to be expired, you can try from a different address. Suddenly it will leak.

Lyrics. This was not necessary, because we had already done all this crap with unsuccessful attempt installing Continent-AP 3.7.7.651 (the computer is built on server hardware). I don’t know about the others, but we rolled back to Continent-AP 3.6.90.4 and continue to work without problems (Continents ⇒ ). We are waiting for the normal version of Continent-AP 4.0.

But problems arose with GOST-2001 in the “Electronic Budget”. And this point will be useful both for general development and for solving the problem... How to find out where to get the CRL (aka “Certificate Revocation List”)?

Click twice in Explorer on the problematic certificate. Go to the "Composition" tab and select the line "Revocation List Distribution Points (CRL)". We get addresses... Launch any Internet browser and enter the URL. If “empty” at all addresses, well, stillborn... :(

What we downloaded needs to be forced into the system. And so every time the list loses its relevance... In the same Explorer, double-click on the downloaded file and select "Install...":

And the most interesting thing is that the download paths are specified in TLS 2.0, but this c[puppy’s mother] writes that specified address there is nothing.

And for information: It turns out certificates and containers private key independent in terms of lifespan from each other. Those. the certificate may be current, but it is no longer possible to sign the document...

Point No. 5 . Install personal certificate user via CryptoPro.

Point No. 6 . Go to CryptoPro and check the “Do not check the server certificate for revocation” and “Do not check the purpose of your own certificate” checkboxes on the “TLS Settings” tab.

Point No. 7 . Install Continent TLS Client 2.0.1440. Reboot.

Lyrics. During the installation process, an access error may occur... We have already gone through this before. You need to unlock the registry branch (right during the installation process), change the rights to change it. By default, the owner of the branch is “system”, and the software is installed on behalf of the user. Since on computers of this level users must be in “Administrators” (tested by practice), we give access accordingly:

If the question arises, “What is shown in the picture above?”... It’s better not to get involved yourself, but to ask a person who knows what it is “ System registry Windows" and how to work with it.

Point No. 8 . We configure the Continent TLS (see the manual on the website roskazna.ru, section "GIS-Electronic Budget").

• lk2012.budget.gov.ru
• lk.budget.gov.ru

TLS settings:

Point No. 9 . Registering Continent TLS.

• Win+R and type %PUBLIC%\\ContinentTLSClient\\
• Find the PublicConfig.json file
• Open with Notepad for editing
• In the SerialNumber parameter, insert the value " in quotes test-50000"
• Restart TLS Continent.

Point No. 10 . Uninstall the Extended Container program through "Programs and Features" in the Control Panel. Reboot.

Lyrics. I did not complete this step. I don’t understand why it should be removed; it doesn’t interfere at all.

Point No. 11 . Install Jinn Client 1.0.3050 (serial number required). Reboot.

Lyrics. The Treasury issued us version 1.0.1130.0, this did not affect the performance in any way. We take the serial number from the old version of the previously issued distribution.

Point No. 12 . Install Extended Container from the distribution with Jinn Client (a separate serial number is required).

Lyrics. About what serial number I'm talking about I have no idea. It didn't exist before. Perhaps this means the number issued in the latest distribution. Unlike Jinn, there are no restrictions on the number of installations. I installed the new Extended (version 1.0.2.2) earlier in an attempt to solve the problem on my own.

Point No. 13 . Let's go to C:\Program Files\Secure Code\CSP\ and find the file csp_uninstal.exe. We launch it and remove the crypto provider from the Security Code. Reboot.

Point No. 14 . Let's go Install JinnSignExtensionProvider(to interact with Chrome browsers and Firefox).

Lyrics. I also missed this point, because we have Internet Explorer 11. I didn’t try it on Chrome, but Firefox didn’t work.

Point No. 15 . Install CadesPlugin (aka - CryptoPro EDS Browser Plug-in).

Lyrics. You can download ⇒. Download the most latest version. We register the site "http://lk2012.budget.gov.ru" in the plugin settings:

• Internet Explorer: add to Trusted Sites - http://lk2012.budget.gov.ru And https://lk2012.budget.gov.ru
• Firefox: add the JinnSignExtension.xpi extension and disable the old proxy setting in the network settings (set to "No proxy")
• Chrome: add the JinnSignExtension extension (drag the folder with the extension into the extension installation window)

Creating shortcuts on the desktop for both options (GOST-2001 and GOST-2012) by writing the following lines in the objects:

• "C:\Program Files\Internet Explorer\iexplore.exe" http://lk.budget.gov.ru/udu-webcenter
• "C:\Program Files\Internet Explorer\iexplore.exe" http://lk2012.budget.gov.ru/udu-webcenter

Setting up Anti-Virus. The network recommends disabling your antivirus completely. Great joke, especially on a money management computer. I suggest settings for Kaspersky Endpoint Security 10 . You need to create similar rules on other antiviruses.

First, disable traffic checking:

You will have to convert the keys. Download Private key converter and there is a file in the archive Readme.doc with installation instructions. For conversion, you don’t need an additional flash drive, we do everything on the same one, files with the new key format will just be added. The medium will become universal. Both new and old keys are converted without problems.

Change user has become much easier. Now you don’t need to restart the service, just change the certificate in the “Default user certificate” line in the Continent TLS settings.

Good luck in your difficult struggle with federal portals!

Problem

When trying to log into the personal account of the GIIS “Electronic Budget”, an error message appears:

This page cannot be displayed

Enable TLS 1.0, TLS 1.1, and TLS 1.2 protocols in the " Additional options"and try connecting to the web page https://ssl.budgetplan.minfin.ru again. If you cannot resolve the error, contact your website administrator.

Solution

It is necessary to check the workplace settings according to the document.

The instructions do not mention several nuances:

1. Need to install CryptoPro EDS Browser plug-in and check its operation on the demo page.
2. It is necessary to disable filtering of the SSL/TLS protocol in the antivirus settings; in other words, for the site you are looking for, you should make an exception for checking a secure connection. It may be called differently in different antiviruses. For example in Kaspersky Free need to go “Settings>Advanced>Network>Do not check secure connections” .