1C Update: 1C:Standard Subsystems Library 3.1.12.268 — What Changed and What an Accountant Should Check After Installation

In brief: 1C:Standard Subsystems Library (SSL) 3.1.12.268 is a technical component built into 1C application configurations; it is not installed separately but is updated together with the configuration. The exact list of changes for this specific version is not available in the accessible database — please check the official release page. Below is a complete practical checklist: what an accountant should check after any update that includes a new SSL version in 2026.

What SSL is and why it matters to an accountant

The Standard Subsystems Library (SSL / BSP) is the "engine under the hood" of all standard 1C configurations: 1C:Accounting for Kazakhstan, 1C:Integrated Automation, 1C:Trade Management, and others. It is responsible for:

• user and access rights management (including RLS — record-level restrictions);
• print forms and document templates;
• bulk attribute changes and duplicate search;
• password recovery;
• classifier updates (KATO, KBK, banks, currencies);
• cryptography and electronic signatures (ESF, SNT, EAVR, ETD).

When SSL is updated, all these mechanisms change at once across all configurations. The accountant is not directly involved in installing SSL, but is usually the first to notice if something goes wrong after the update.

⚠️ For the exact list of changes in SSL 3.1.12.268, check the official source: https://releases.1c.ru/version_files?nick=SSL31&ver=3.1.12.268

What exactly changed in the SSL mechanisms (relevant for 2026)

Access rights

• Added the "Access Rights Analysis" report — shows who has access to what, with a breakdown down to access groups and RLS restrictions. Path: Master Data and Administration → User and Rights Settings → Users → "Reports" button.
• Added two new roles:
• "Add/change counterparty tax regimes" — for the "Accountant" and "Person responsible for partner maintenance (additional)" profiles;
• "Read counterparty tax regimes" — automatically added to all profiles with read access to the counterparties catalog.
• Redundant inherited access group profiles (e.g., "International Accounting Accountant") are marked for deletion automatically.

Electronic signature and cryptography

• A single configuration point for cryptography across all services (ESF, SNT, EAVR, ETD): Master Data and Administration → Administration → General Settings → Cryptographic Library.
• Only the new GOST2015 standard (unified electronic key of the NCA RK) is supported. The old GOST2004 is no longer supported.
• Cryptographic operations are performed on user computers, not on the 1C server. Switching back after the change is blocked.
• Added support for cryptography in the web client via Chrome + NCALayer.
• The "Cryptographic Library" form has a provider switch: NCALayer or Kalkan.

Exception: "1C:Labeling for Kazakhstan" still uses its own cryptography settings.

Password recovery

Users can reset their password themselves without contacting an administrator. Activation path: Master Data and Administration → User and Rights Settings → Password Recovery → "Show 'Forgot password?' link".

Classifier updates

Automatic updates of KATO, banks, KBK, and currency classifiers via internet support. KATO must be updated no earlier than 06/18/2026.

Step-by-step checklist: what the accountant should do after installation

Step 1. Make sure the update completed without errors

• Open Help → About — check the configuration version number.
• Make sure the database completed automatic update procedures without error messages.
• Before updating — a database backup is mandatory.

Step 2. Check VAT rates

Under Article 503 of the Tax Code of the RK (Law No. 214-VIII dated 07/18/2025), from 01/01/2026 the following VAT rates apply: 16% (standard), 10%, 5%.

1. Go to: Main → Settings → VAT Rates (or Master Data and Administration → Tax Settings).
2. Make sure the catalog contains the 5%, 10%, 16% entries.
3. Set 16% as the standard rate.
4. Use Administration → Maintenance → Bulk Attribute Change to update the VAT rate in item cards.

⚠️ Do not delete the 12% rate — it is needed for historical documents. Just make sure it is not applied in new documents.

Step 3. Check NCT codes in the item catalog

From 01/01/2026, specifying the item code from the National Catalog of Goods (NCT) in ESF and SNT is mandatory:

1. Go to: Warehouse and Delivery → Service → NCT Data Entry Assistant.
2. For each item, specify: - NTIN (permanent code) — starts with "02"; - XTIN (temporary code) — starts with "004", 13 digits long.
3. Manually run the "Deactivated NCT Codes Check".
4. Make sure that Administration → General Settings → ESF Fill-in Settings has the "Fill in item code in documents based on NCT data" option enabled.

Step 4. Check IIT deductions and payroll settings

Under the 2026 Tax Code of the RK: MCI = 4,325 tenge, the basic IIT deduction is 30 MCI/month (instead of the previously applicable 14 MCI), the IIT rate is 10%, the social tax rate is 6%, and the mandatory occupational pension contribution rate is 3.5%.

1. Go to: Taxes and Contributions → IIT Deductions.
2. Make sure the old deduction types (14 MCI, 1 MW) are marked as unused.
3. Check that the "Basic 30 MCI" deduction exists.
4. Use the "Generate IIT Deduction Applications" processing to batch-enter new applications from employees.

Step 5. Set up cryptography for electronic signatures

1. Go to: Master Data and Administration → Administration → General Settings → Cryptographic Library.
2. Make sure the "Unified key (new-format digital signature)" mode is enabled — the GOST2015 standard.
3. Select a provider: NCALayer or Kalkan.
4. Make sure the operation mode is "On user computers" (not "On server").
5. If employees work through the web client, test ESF signing via Chrome + NCALayer.

Step 6. Check user access rights

1. Go to: Master Data and Administration → User and Rights Settings → Users.
2. Run the "Access Rights Analysis" report.
3. Make sure accountants have the "Read counterparty tax regimes" role, and responsible persons have the "Add/change counterparty tax regimes" role.
4. Open "Access Group Profiles" — if there are profiles marked for deletion that are genuinely not used, delete them.

Step 7. Check VAT offset notifications

From 01/01/2026, a VAT payer is required to reflect information on VAT offset for received ESFs in the ESF information system.

1. Go to: Procurement → VAT Offset Notification.
2. Make sure the "Use VAT offset notifications" parameter is enabled.
3. Generate notifications for ESFs received in 2026.

Step 8. Check the organization card and print forms

1. Master Data and Administration → Organizations — check the "VAT registration date" attribute.
2. Print a test document (invoice, ESF, payment order) — make sure the currency name is displayed as "tenge", in accordance with the Constitution of the RK dated 03/15/2026.

Step 9. Run the accounting check

Go to: Administration → Accounting Check Rules. Run:

• "Check formatting of receipt documents from counterparties on the simplified declaration" — from 01/01/2026, expenses under such documents are not accepted as CIT deductions; receipt documents must have the "Not subject to CIT deductions" attribute.
• "Check correctness of VAT accounting policy parameters under the simplified tax regime."

Deadlines and key risks

Additionally: always make a backup before updating. If the database has extensions connected, check their compatibility with the new configuration version after updating. It is better to install the update before the start of the reporting period rather than in the middle of it.

Frequently asked questions

Q. Do I need to install SSL 3.1.12.268 separately? No. SSL is not installed separately by the user — it is part of the application configuration. When you update 1C:Accounting (or another configuration), the required version of the library is already included inside.

Q. After the update, several users lost access to counterparty data — what should I do? Check the assignment of the "Read counterparty tax regimes" role — it should have been added automatically to all profiles with read access to the counterparties catalog. If this did not happen, assign the role manually via "Access Group Profiles".

Q. Do I need to reissue the digital signature after the update? If you are already working with the unified GOST2015 key (NCA RK), no additional action is required. If you previously used the old GOST2004 standard, it is no longer supported, and you need to obtain a new key from the NCA RK.