Why does the error “Certificates are not available. Certificates do not meet the criteria"?

Question

System administration

Hello! Please help.
Available:

• Balanced terminal farm on Windows Server 2008 R2 with non-roaming profiles.
  

• CryptoPro 3.6.7777 is running on each farm server.
  

• a certain program that uses the digital signature installed on the servers.
  

• Each user has his own EDS. EDS hang in the register of servers. There are a huge number of users.
  

In order for each user to see only their signature, they are installed in the "local computer" from under the admin, and then permissions were set in the corresponding registry branches "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Crypto Pro\Settings\Keys\%container_name%" for full access only to the EDS owner user.
Everything worked and everyone was happy until I had to install IE11, which refused to install until the necessary Windows updates were installed. After installing the updates, adding the EDS method described above does not work.
The EDS program does not see:

Certificates are not available. Certificates do not meet criteria

But the signatures of users that were installed before the updates were installed work. New signatures have to be manually installed on each server from under each user. It does not bother you yet, but in the future the account will go to hundreds of users. I wrote to the CryptoPro forum, but they are silent there. Tell me how to solve this problem?