Introduction to mobile electronic signature
Modern business and document management increasingly require efficiency, which cannot be ensured by being solely at your desk. Mobility is becoming a key factor in productivity, allowing you to sign important contracts and reports while on the road or in meetings. The use of electronic signature on devices running the Android operating system turns an ordinary tablet into a full-fledged tool for legally significant actions.
The process of transferring encryption keys to a mobile device has become much easier thanks to the development of specialized software. However, despite the simplification of the interfaces, the procedure itself requires careful attention to the details of safety and compatibility of components. Incorrect configuration can lead to the inability to read the private key container or errors when forming a signature at the right time.
In this material we will analyze in detail all the stages of preparing and installing certificates. You will learn what applications are necessary for work, how to correctly transfer keys from a computer, and what nuances should be taken into account when choosing a storage medium. Proper organization of the workspace on the tablet will allow you to forget about being tied to a stationary PC.
Necessary components and equipment preparation
Before proceeding with the direct installation of certificates, you need to make sure that all the required hardware and software are available. The basic element is the tablet itself, which must meet the minimum system requirements of the cryptographic software used. Usually this means having an operating system version no lower than Android 8.0 and a sufficient amount of free RAM.
- 📱 Android-based tablet with activated developer rights (in some cases).
- 💾 Flash drive (USB flash drive) with OTG support or cloud storage for file transfer.
- 🔐 License activation key for a crypto provider (for example, CryptoPro CSP).
- 📄 Public key certificate files and private key container.
Particular attention should be paid to the choice of a crypto provider. The market is dominated by a solution CryptoPro CSPthat has the most complete support for Russian encryption standards. Solutions from VipNet CSP and Cryptokiare also popular, but their compatibility with specific banking systems or platforms must be checked individually before purchasing a license.
⚠️ Attention: Using unlicensed or hacked cryptographic software makes the created electronic signature is legally void. In addition, this creates a critical vulnerability for your data and can lead to leakage of confidential information.
To connect external media, such as tokens Rutoken or Jacarta, your tablet will need support for OTG (On-The-Go) technology. Most modern models support this feature, but older devices may require a special adapter. You can check support in the device specifications or experimentally by connecting a regular flash drive.
Installing cryptographic software
The first step in the setup process is the installation of the crypto provider itself. You can find the official application in the Google Play Market or on the developer’s website. In the search bar of the store, enter the name of your software, for example, CryptoPro CSP, and make sure that the publisher is an official person, for example, CRYPTO-PRO LLC.
After downloading and installing the application, it must be activated. To do this, enter the purchased license key into the appropriate field in the app settings. Without an active license, the functionality of the application will be limited to the evaluation mode, which will not allow signing documents.
Settings → License → Enter activation keyAn important step is setting up the application's access rights to the file system. Modern versions of Android have strict security policies, so when you first launch the app, it will ask for permission to access media files and device memory. Denying these rights will make it impossible to read containers with keys.
If the application crashes on startup, try clearing the cache in the Android settings or reinstalling it after rebooting the tablet. Android version conflicts are often resolved by simply updating the system.
In addition to the main crypto provider, you may need to install additional plugins to work with some document formats. For example, to work with PDF documents in a browser or specialized applications, you often need a plugin CryptoPro PDF or similar extensions that support GOST standards.
Transferring electronic signature keys to a tablet
There are several ways to transfer a private key and certificate to mobile device. The choice of method depends on where your keys are initially stored: on a computer, in the registry, or on physical media. The most universal and secure way is to use intermediate media.
If the keys are on a computer running Windows, they must first be exported. To do this, go to the crypto provider settings on your PC, select the desired container and use the copy function. Save the container files (usually files with the extension .key or a folder with the name of the container) to removable media.
⚠️ Attention: Never transfer private key files through unsecured communication channels, such as regular email or public instant messengers, without first archiving them with a password. Interception of these files will allow attackers to act on your behalf.
Connect the prepared media to the tablet via an OTG cable. Using any file manager, for example ES Explorer or the built-in "Files", copy the folder with the keys to the tablet's internal memory. It is recommended to create a separate directory, for example /CryptoKeysto avoid losing important data among other files.
| Transfer method | Security level | Complexity | Required equipment |
|---|---|---|---|
| USB flash drive (OTG) | High | Low | Flash drive, adapter |
| Cloud storage | Average | Low | Internet access |
| Direct copying (Wi-Fi) | Average | Average | Shared Wi-Fi network |
| Bluetooth | Low | High | Bluetooth module |
After copying the files, you need to register them with the crypto provider on the tablet. Go to the application, select "Install personal certificate" or "Import key". Specify the path to the copied folder. The system will automatically check the integrity of the keys and offer to install the associated public certificate.
☑️ Verifying successful key transfer
Setting up the workplace and testing the signature
After successfully installing the keys, you need to make sure that the system is ready to work with documents. To do this, it is recommended to test sign any file. Create a simple text document or use a sample contract provided by your counterparty or platform.
Open a document application that supports integration with a crypto provider. This could be a specialized office package or a web interface for a government services portal/trading platform. When you try to sign a document, the system should prompt you to select a certificate.
The list of available certificates should display the one you just installed. Pay attention to the expiration date and owner to avoid selection error. Once selected, the system will ask for a PIN code from the private key container. Enter it carefully, as multiple incorrect entries may block the media.
What to do if the certificate is not displayed in the list?
Most often, the problem lies in the absence of a chain of trust. Try installing the root certificate of the certification authority manually through the settings of the crypto provider. Also check whether the certificate itself or intermediate certificates have expired.
If the signature was generated successfully, you will see a corresponding notification, and the file will receive a visual mark or will be saved in a format with the extension .sig. This confirms that the “tablet - crypto provider - key” combination works correctly and is ready for combat use.
Working with tokens and external media
The use of hardware tokens, such as Rutoken Lite or Jacarta-2, on tablets has its own characteristics. Not all token models support working with mobile devices directly. Before purchasing or using, be sure to check the device specification for compatibility with Android.
To work with the token, you may need to install an additional driver or plug-in that comes with the crypto provider. Insert the token into the tablet's USB port using the OTG adapter. The indicator on the token should light up, signaling that power is supplied and that it is ready to work.
In the settings of the crypto provider, select the mode of working with external media. The system must detect the connected device and read the list of available containers from it. The advantage of this method is increased security: the keys do not physically leave the protected token chip.
However, it is worth considering power consumption. A connected token may drain your tablet's battery faster. In addition, active use of a tablet with a device hanging from the port creates the risk of physical damage to the connector due to careless movement.
⚠️ Attention: Interfaces and menu names in crypto provider applications may change with updates. If you don't find the option you need, check the official documentation on the developer's website or the "Help" section inside the application.
Hardware tokens provide the maximum level of key protection, but require an OTG cable and may be less convenient for constant mobile use compared to keys in the device registry.
Often asked questions (FAQ)
Is it possible to use one digital signature on a computer and a tablet at the same time?
Yes, you can copy the private key container to several devices. However, it should be remembered that the security of the key in this case is reduced, since the risk of its compromise increases. Make sure that the copy on the tablet is securely protected with a password.
What to do if the tablet does not see the flash drive with keys?
Check the file system format of the flash drive. Android works best with FAT32 or exFAT. If the flash drive is formatted in NTFS, the system may not recognize it without installing special drivers. Also try a different OTG cable.
Is a signature made from a tablet legal?
Yes, an electronic signature created using certified cryptographic information protection tools (CIPF) on the Android platform has full legal force equal to a handwritten signature, subject to compliance with the regulations for use.
How to update the certificate on the tablet?
The procedure is similar to the initial installation. You need to obtain a new certificate file from the certification authority and import it into the application, replacing the old one. In this case, the private key container usually does not change unless the keys are reissued.
Is it safe to store keys in the tablet’s memory?
Storing them in the device registry is convenient, but less secure than on a token. Be sure to set a password on the tablet's lock screen and use device memory encryption, if this feature is available on your model.