Yes, NCA Layer can be configured on a terminal server to work in parallel with CryptoPro (used for the Russian signature service), without conflicts between them.
How it is done
NCA Layer is installed and configured on the terminal server for signing documents — while CryptoPro remains functional and is not disabled, so both signature services operate simultaneously.
The key point of the setup is creating a rule in Windows Firewall for automatic selection of the NCA Layer port (TCP port). This rule is needed so that NCA Layer works correctly on the server and is not blocked by the firewall, ensuring a stable connection when signing documents.
Frequently Asked Questions
Can NCA Layer and CryptoPro be used simultaneously on the same server?
Yes, this is a confirmed working configuration — both services are configured in parallel, each performing its own document signing task.
Why is a firewall rule specifically needed for the NCA Layer port?
Without an open and correctly configured TCP port, NCA Layer may fail to establish a connection on the terminal server, which will lead to errors when signing.