From 1 September 2026, new QES certificates will be generated using the hash function DSTU 7564:2014 «Kupyna». To work with such a QES in a software RRO, you need Torgsoft 2026.0.5 or newer and IIT cryptographic libraries dated 27.02.2024 or later.
You can use your current QES until the certificate expires. Before connecting a new key, update Torgsoft and the cryptographic libraries, register the new cashier certificate with the tax service using form No. 5-PRRO, and replace the key in the program.
What «Kupyna» is and who the transition concerns
«Kupyna» is a national hash function under the DSTU 7564:2014 standard. It is used in cryptographic operations when creating and verifying electronic signatures. The new standard replaces the outdated GOST 34.311-95.
From 1 September 2026, new QES certificates will be generated according to the new standard. Programs used to sign documents or receipts must recognize new certificates and also verify signatures created earlier.
Certificates created using the previous algorithm remain valid until their expiry date. The key must be replaced after the certificate expires or is revoked early.
What changed in Torgsoft
Version Torgsoft 2026.0.5 supports work with new QES certificates that use «Kupyna». For private keys, the program has the directory Settings → Private key (QES/EDS).
The key is replaced in this directory. Torgsoft applies the new data to the related software RRO, employee, or company settings where the previous key was used.
What to do before connecting a new QES
- Close the open software RRO shift with the old key and generate a Z-report. Do this before the certificate expires.
- Update Torgsoft to version 2026.0.5 or newer on every workstation where the software RRO is used.
- Close Torgsoft and install the current IIT cryptographic libraries. For «Kupyna», libraries dated 27.02.2024 or later are required. It is recommended to install the latest available version.
- Obtain a new QES from a qualified provider of electronic trust services.
Do not try to close the shift with an expired key. Use the procedure for an unclosed shift from the article «Replacing the QES for the software RRO in Torgsoft» or contact technical support.
How to replace a file QES for the software RRO
1. Save the key file on the computer
Create a permanent folder for the key on the local drive, for example C:\TORGSOFT\PROGRAM\Keys\Cashier_name\, and copy the private key file there. The Windows account under which Torgsoft runs must have access to this folder.
Do not change the file name or path after setup. Do not give the key file and its password to other people.
2. Register the new cashier certificate with the tax service
When replacing the cashier's QES, submit to the tax service notification form No. 5-PRRO J/F1391802. It specifies the identifier of the new public key certificate.
The form can be submitted through the taxpayer electronic cabinet or from Torgsoft, using the current QES of the sole proprietor or company manager. In Torgsoft, cashier registration is available in Settings → Software RRO → Software RRO registration.
Wait for a positive receipt from the tax service confirming that the notification has been accepted. After acceptance, the new cashier data may appear in the Torgsoft register with a delay.
Form No. 5-PRRO registers the cashier certificate for the business entity. A registered cashier can work with different software RROs of this entity at different business units.
3. Replace the key in Torgsoft
- Open Settings → Private key (QES/EDS).
- Find the previous key and click Edit.
- Select the new private key file from the permanent folder.
- Enter the password and click Read.
- Check the owner and certificate validity period.
- Click Install and save the changes.
Torgsoft will apply the new key in the related settings where the previous one was used. If the owner or validity period is not displayed in the key record, use the action Read key again.
4. Check the software RRO operation
- Restart Torgsoft.
- Open the Sales mode.
- Open the software RRO shift with the new key.
- Make sure the program does not show a key error or a message about no available software RROs.
- During the next sale, check that the receipt received a fiscal number from the tax service.
Registration of the new certificate, key replacement, and actions in case of an unclosed shift are described in the article «Replacing the QES for the software RRO in Torgsoft».
What to check if the new key does not work
- Torgsoft 2026.0.5 or a newer version is installed on the computer.
- The IIT cryptographic libraries are dated 27.02.2024 or later.
- The private key file is available at the path specified in Torgsoft.
- The password is entered correctly, and the certificate is valid and not revoked.
- The tax service accepted form No. 5-PRRO with the identifier of the new certificate.
- After the form was accepted, cashiers and software RRO data were updated from the tax service register.
- The shift opened with the old key was closed with that key and a Z-report was generated.
If the tax service returns the message «No available software RROs», check whether form No. 5-PRRO was completed correctly for the new cashier certificate. After receiving a positive receipt, update the data from the tax service register again.
Frequently asked questions
Do I need to change my current QES before 1 September 2026?
No. The current QES certificate works until it expires or is revoked.
Will the new key work in a previous version of Torgsoft?
For keys with new certificates generated from 1 September 2026, Torgsoft 2026.0.5 or newer is required. Compatible IIT cryptographic libraries are also required.
Do I need to submit form No. 5-PRRO after replacing the cashier's QES?
Yes. The identifier of the new cashier certificate must be submitted to the software RRO Register using form No. 5-PRRO J/F1391802.
Do I need to submit «Termination of work» for the old key?
If the old certificate has expired or has been revoked, the tax service does not require a separate No. 5-PRRO notification with the signature type «Termination of work».
Do crypto libraries need to be updated on all cash registers?
Yes. Cryptographic libraries are installed on the computer. Update them on every workstation where Torgsoft signs software RRO documents.
Sources
- Central Certification Authority: planned transition to DSTU 7564:2014 «Kupyna».
- Ministry of Digital Transformation: how the transition to the new electronic signature standard will take place.
- Tax service: current questions and answers about software RRO registration and use.
- Tax service: cashier actions when replacing the QES for software RRO.
- IIT cryptographic libraries installer.
Go back to the previous step