Electronic signature: how to renew certificates in 5 minutes without leaving home

Press service of the State Tax Service of Ukraine, published 24 March 2026 at 16:01 Chapter: News

If your qualified public key certificates are about to expire, it is not needed to visit the Qualified provider of electronic trust services of the State Tax Service of Ukraine again. It is possible to renew them remotely in a few minutes.

Main condition: person’s registration data (full name, patronymic, address, etc.) has remained unchanged, current key is still active and the person remembers password to it.

Remote renewal does not apply to certificates that:

- were generated using international RSA algorithms or ECDSA;

- private key stored in the "Cloud Storage" of the Qualified Provider of Electronic Trust Services of the State Tax Service.

It is possible to update certificates online:

- on website of the Qualified Provider of Electronic Trust Services of the State Tax Service.  

It is needed to:

- Go to website of the Qualified Provider of Electronic Trust Services of the State Tax Service.                            

- In the left menu, select "Repeated (remote) generation of certificates by the electronic request".

- Select the "On-line" section.

- Go to the "Read valid key" option.

- Click "Select" and select key file (for example: "key-6.dat or .pfx") or protected medium (for example: Almaz-1K or Kristal-1).

- Enter security password and click "Read".

- Click "Next".

- Sign automatically generated Agreement on the provision of qualified electronic trust services by selecting "Sign and send".

- Create the new key, enter password for accessing the new key and confirm it.

- Click "Generate" and save the file;

- through the program "IIT User CSK-1.3.1".

Procedure consists of several simple steps:

- Open program "IIT User CSK-1.3.1" and click "Generate keys" button.

- Select "Generate new certificates in the CSK based on existing valid keys".

- Select the key file, enter password and click "Read".

- Read Agreement on the provision of qualified electronic trust services and click "Sign".

- Check relevance of personal data.

- Select "Generate on current device" and click "Next".

- Set and confirm the password.

- After the "New certificates received" window opens, click "OK" and "Finish".

 

As soon as you generate new certificates – old keys will automatically become invalid.

Service works only for clients of the Qualified Provider of Electronic Trust Services of the State Tax Service.

Digitalization makes interaction with the Tax Service fast and comfortable!

More details – follow the link – https://tax.gov.ua/baneryi/onlayn-navchannya/nadannya-elektronnih-dovirchih-poslug/povtorne--distantsiyne--formuvannya-sertifikativ/