TLS connection errors in Sberbank Business Online is a problem that users of the system sometimes have to face. Recent times remote control banking operations has become very popular. Many companies and private enterprises have appreciated the convenience of the service: now there is no need to spend time visiting the bank, and managing accounts and filling out payment orders can be done right in the office at the desktop. As with any system, failures are not uncommon here. This cannot be avoided. Better to know ahead of time possible problems to deal with them easily.
The work of any service is inevitably associated with the presence of isolated difficulties in connecting It is impossible to foresee all the errors in the work, but there are the most common ones, which in most cases can be eliminated on your own.
- Incorrect username and password entry. Such an inscription on the monitor indicates that indeed the login and password were entered incorrectly. Solving the problem is simple: reload the page, log in again, but at the same time specify the ID and password very carefully.
- Error 401. It appears during login. Here the reason may be the operation of the computer itself (an outdated version of the OS or browser, antivirus blocking or an ordinary failure). The solution is as follows: update the browser, install the Business Online Bank service in the anti-virus exclusion list, or simply re-enter.
- Control error. Occurs during the formation of a payment document, if errors are made in filling. The system automatically accepts the document as outdated. To eliminate this trouble, it is worth re-checking all the data entered in the fields of the document, correcting inaccuracies, and re-installing the “payment” check.
- Internal Server Error. Here you should not worry at all and wait for a while: all server failures are dealt with by the bank's specialists. It is enough to report this to the technical support service.
This article contains the most common problems in the bank service and how to fix them. Problem number 0100
TLS connection error 0100 Sberbank Business Online warns about problems with the certificate. When you enter the system, the procedure of checking and confirming its authenticity takes place. The bank server performs certificate authentication, validity period, compares the URL address with specified address in the certificate.
TLS connection error 0140
There can be several reasons for this problem. Of course, this may be an elementary program failure. But most often this is due to the use of electronic digital signature. It is a user identifier and is used when approving various documents. Most likely, the signature could have expired, and therefore it is outdated and not valid. To do this, you need to update it. If the validity period has not yet expired, it is necessary to check the correctness of filling in the fields. You may need to install Capicom in order to attach a digital signature. In any case, you must quickly respond and seek help from the bank's technical support service, having previously indicated the code and actions that precede the occurrence of an error. To avoid such problems in the future, you need to know when the signature expires.
You can check this in the certificate store. Replacement should be carried out in advance: during the renewal of the certificate, situations may arise when it is necessary to urgently sign any payment documents.
Users often encounter difficulties in working with the bank service Problem number 0160
If the message “TLS connection error 0160” appears on the screen in the Sberbank system, this indicates that the service was unable to verify the authenticity of the client certificate. This can mean one thing, that the pin code has expired. The solution is simple - contact a banking institution to receive a new token and pin codes.
Conclusion
Many business structures work with the Sberbank Business Online program, and TLS connection errors are not uncommon. Since the cash flow of many companies is significant, the decision to fix the problem should be made immediately. It cannot be hoped that this is an ordinary system failure. This may be, as well as problems on the server. But most often this occurs due to a mismatch of the requirements for technical equipment when connecting to the program. The software should be taken seriously so that similar problems do not arise in the future. In any case, to speed up the resolution of this issue, you should immediately contact the service technical support banking institution.
Accounting moved from SPED to Sberbank business online. Everything was going well, but now the bukhs began to want additional functionality that SBBOL (Sberbank Business Online) provides, in particular EDO (electronic document management), or as it is called e-invoicing in SBBOL.
But it was not there.
Get TLS error 0210 when entering the tab
Started kicking those. support. They suggested updating the VNPKey firmware.
No sooner said than done. Did not help. Okay let's check it out Internet settings explorer.
We are going step by step. We reach the stage of reliable nodes and then she says what needs to be added to reliable nodes http://einv.esphere.ru. And of course, when asked if the user needs access to this address, the answer is yes. And they couldn’t say right away that e-invocing requires access to third-party resources. Okay, I open access to the site on the proxy, but that's all. What do I need declare and you disable access through a proxy, to which I answer them that it will not work without a proxy. the user does not have a direct access, and then the connection was interrupted.
But by adding two plus two, he made a row experiments, came to this decision
Solution
Due to the nature of the VPN key, squid did not allow an additional connection. I had to open direct access (bypassing the proxy) for the computer from which the user works to the following resources.
When using new products from Sberbank, you can improve and simplify your own life much faster. With the advent of the Internet, many questions began to arise, how can you work through the network? If people need to hand over papers or reports, do they have to be on the road most of the working time? No, it won't. So Sberbank specialists suggested using new technologies that allow you to work at a computer and perform absolutely all payment calculations and data transfer online.
When using the Sberbank Business Online system, unforeseen problems may occur. Most often, this is the possibility that users cannot connect to personal access. Why can't connect? This question has a simple answer - incorrect reading of the instructions. If the system did not work for absolutely all users, then one could say that this is the wrong model or, even worse, a flaw in specialists. In order to find the right opinion, it is worth familiarizing yourself with many materials. The problem is that people do not understand how to properly install the Business Online system from Sberbank.
Online TLS connection errors
Many structures work with it, and their cash turnover during one day is more than one thousand rubles. That is why the problems that have arisen should be addressed immediately. You must understand that the compatibility of the operating system and technical equipment your computer must meet the requirements. It is in this version that everything will work one hundred percent. When connection problems occur, TLS connection error messages may occur with various variations: TLS connection error 0140, 0070 (error 401 for users regular version Sberbank online) and others.
To do everything right, it is better to use the services of a specialist, because you have little understanding of the system. Yes, this may seem strange. But most users abandoned the system only because they could not install it. But you pay attention to operating system there should not be a single mistake in it, and only then everything will be in order. Of course, if you want to always enter SMS with a code, then you can not install anything on your computer.
When checking the certificate store yourself, check the expiration date of the electronic signature. If a electronic signature has expired, check the primary connection certificate. If the electronic signature has expired and the primary connection certificate has expired, you need to replace the token. TLS connection error code 0070 - most likely, the user should update the firmware or their certificate. If the TLS connection problem appears with code 0140, check the validity period of the digital signature. Maybe it's outdated and you need an update.
When opening one fairly well-known site in the browser Mozilla Firefox 62.0.3 over secure HTTPS, I encountered this error:
Error establishing a secure connection
While loading the page, the connection to www.site.ru was interrupted.
The page you are trying to view cannot be displayed because the validity of the received data cannot be verified.
Please contact the website owners and inform them of this issue.
In English versions of Firefox the error sounds like this:
Secure Connection Failed
The connection to www.site.ru was interrupted while the page was loading.
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
At the same time, this site opens normally in other browsers (Chrome, Edge)
This problem is due to the fact that site owners use an outdated version of the certificate, which, when trying to establish an HTTPS connection with the site, requires the use of an old insecure version of the TLS protocol. In this case, you need to contact the site administration and ask them to update the TLS version. It is clear that this is not always possible.
You can check the supported version of TLS for a site using the online tool https://www.ssllabs.com/ssltest/. Just enter the name of the site (domain) whose certificate you want to check and start scanning.
After the scan is completed (takes a few minutes), go to the section Configuration.
As you can see, in my case the certificate does not support the TLS 1.3 protocol.
To open such a site in new versions Mozilla browser Firefox, you will have to lower the security level required to establish a secure connection.
Advice. Possible meaning parameters and their corresponding protocol versions:
0 - obsolete SSL 3.0
1 - also deprecated TLS 1.0
You can check the TLS protocol version your browser is using at https://www.howsmyssl.com/. With security.tls.version.max = 4, it should display the caption.
Your client is using TLS 1.3, the most modern version of the encryption protocol. It gives you access to the fastest, most secure encryption possible on the web.
If you change the value of security.tls.version.max to 3, the verification page will indicate that your browser is using TLS 1.2.
In order not to switch to a less secure version of the TLS protocol for all sites, you can add the desired sites to the security.tls.insecure_fallback_hosts list.