Versions:

  • 1.4

NCALayer is a security utility developed by the National Certification Authority of the Republic of Kazakhstan that embeds national digital-signature functions directly into web applications and restores Java execution inside modern browsers, eliminating the need for standalone signing utilities. The program acts as a local proxy between the user’s operating system and any HTTPS page, intercepting signature requests, unlocking qualified certificates stored on smart cards, USB tokens, or local keystores, and returning PKCS#7 structures that comply with Kazakh legislation. Government portals, e-declaration systems, online banking, corporate procurement sites, and document-management services rely on NCALayer to authenticate citizens, civil servants, and legal entities, enabling paperless submission of tax forms, customs declarations, contracts, and audit reports without exposing private keys to remote servers. Version 1.4, the first public release, ships with support for RSA-2048/4096 and GOST 34.10-2001/2012 algorithms, OCSP revocation checks, automatic card-reader detection, and a signed launcher that verifies module integrity before every session. Third-party developers can extend the core by registering plug-ins that add timestamping, batch signing, or cloud-provider integration, while administrators can distribute centralized configuration files that pre-select TSP and OCSP endpoints for entire agencies. Because the executable is codesigned by the national root CA, Windows SmartScreen and antivirus engines recognize its digital thumbprint and allow silent installation across domain workstations. The software is available for free on get.nero.com, with downloads provided via trusted Windows package sources (e.g. winget), always delivering the latest version, and supporting batch installation of multiple applications.

Tags: