Keeping your access to NSD services

Foreign certificate authorities are revoking NSD TLS certificates. NSD services are moving to Russian certificates. What you need to do depends on how you connect to NSD services — choose your case below.

What happens if you do nothing

When you open NSD websites and services, your browser will show a warning such as “Your connection is not private” or “The certificate is not trusted”, and API integrations will start returning certificate verification errors.

How do you connect to NSD services?

This determines which certificate you need. Choose your case — the relevant instructions will open.

Case 1. Over the internet

You open NSD websites and services in a browser over an ordinary internet connection. This is the most common case.

You need to install the NCA certificates.

Case 2. Via the universal connection scheme

Your organisation is connected to NSD through the universal connection scheme — over dedicated communication channels.

You need to install the Moscow Exchange CA certificate.

Not sure which case is yours?

If you simply open the NSD website in a browser, it is Case 1. If your IT team set the connection up and you work over dedicated channels, check with them or contact NSD technical support.

Certificate installation instructions

Install the NCA certificates

The NCA certificates of the Russian Ministry of Digital Development go into the system store, so every browser and application on your computer starts trusting them. It takes about 5 minutes.

Open the Gosuslugi page. gosuslugi.ru/crt — the official source of certificates issued by the National Certification Authority (NCA) of the Russian Ministry of Digital Development. The page is in Russian; the download buttons are grouped by operating system.
Select your operating system. Download both files: the root certificate and the issuing (intermediate) certificate.
Install the certificates. Follow the steps for your system — expand the relevant section below.
Restart your browser. Close it completely, open it again and go to the NSD website. You should see no warnings.

Step by step, by operating system

Windows

macOS

iPhone and iPad (iOS / iPadOS)

Android

Linux

For IT teams

If you have integrations with NSD (APIs, trading and information systems, server-to-server connections), a browser alone is not enough. See the section “For IT teams and integrations” below.

For IT teams and integrations

If your systems connect to NSD programmatically, install the NCA root and issuing certificates into the trust stores of your servers and applications, not just on user workstations.

What to check

Windows servers

Import into the machine’s “Trusted Root Certification Authorities” and “Intermediate Certification Authorities” stores. For a fleet of machines, deploy via Group Policy (GPO).

Linux servers

update-ca-certificates / update-ca-trust — see the commands above.

Java applications

Import into the cacerts store of the JDK/JRE in use — separately for every installed version.

Containers and images

Add the certificates to your base images and rebuild; make sure CI/CD publishes the updated images.

Proxies, load balancers, gateways

Update the trusted root bundle on any device that terminates or inspects TLS.

Java: importing into the trust store

keytool -importcert -trustcacerts \
  -alias russian-trusted-root \
  -file russian_trusted_root_ca.cer \
  -keystore "$JAVA_HOME/lib/security/cacerts" \
  -storepass changeit

Then repeat for the issuing certificate with a different -alias and restart the application.

Verifying the result

openssl s_client -connect www.nsd.ru:443 -servername www.nsd.ru </dev/null 2>&1 | grep -i "verify"

Verify return code: 0 (ok) means the chain of trust is built correctly.

Some internal NSD services use certificates issued by Moscow Exchange’s own certification authority. If you work with those services, install the Moscow Exchange CA root certificate as well — the file and instructions are provided by NSD technical support.

Frequently asked questions

Is this safe?

I already see a certificate warning — what should I do right now?

Does every employee need to do this?

My corporate policy does not allow me to install certificates

I installed Russian certificates earlier

When exactly will the switch happen?

Need help

If your access is still not restored after installing the certificates, write or call us — we will help.

Technical support

Phone+7 (495) 956-09-34

E-mailsoed@nsd.ru

Working hoursBusiness days, 07:00–24:00 Moscow time

TopicsCertificate installation, connection errors, API integrations

Your personal manager

Phone+7 (495) 956-27-90
+7 (495) 956-27-91

Working hoursBusiness days, 8:30–21:00 Moscow time

TopicsAny questions about your company’s service at NSD

Official source of the certificates — gosuslugi.ru/crt. This page is updated as NSD services move to NCA certificates.

NSD and MOEX cabinets

Solutions

For whom

NSD

MOEX Group

Information disclosure

Repository stats

Compliance

Site map

Non-bank credit institution joint-stock company National Settlement Depository (NKO JSC NSD) is the central securities depository of the Russian Federation. The status of the central securities depository was assigned by the Russian Federal Financial Markets Service by its order No. 12-2761/PZ-I dated November 6, 2012. License No. 045-12042-000100 dated February 19, 2009 for a professional participant in the securities market to carry out depository operations, issued by the Russian Federal Financial Markets Service. License No. 3294 for banking operations, issued on August 4, 2016 by the Bank of Russia. License No. 045-00004-000010 dated December 20, 2012 for clearing operations, issued by the Russian Federal Financial Markets Service. License No. 045-01 dated December 28, 2016, for repository operations, issued by the Bank of Russia. Location: Moscow, Spartakovskaya Street, Building 12. Personal data processing on the website is carried out in accordance with "Personal Data Processing Policy". By continuing to work on the website, you hereby confirm that you have read the Personal Data Processing Policy of JSC NSD, give your consent to JSC NSD to process your personal data in accordance with the terms of this policy, and also give your consent to the automated processing of your personal data (cookies, information about the actions you perform on the website, information about the devices used for this, date and time of the session), including using the Yandex.Metrica metric programs, by performing the following actions: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, blocking, deletion, destruction, transfer (provision, access) to third parties providing JSC NSD with the service using metric programs. Data is processed to improve the website, enhance NSD's products and services, identify user preferences, and provide targeted information on NSD's products and services. This consent is valid from the moment it is provided and for the entire period of use of the website. If you refuse data processing by metric programs, you are informed of the need to stop using the website or disable cookies in your browser settings.