Digital Signature Certificate (DSC) – Step-by-Step FAQs
What is a Digital Signature Certificate (DSC)?
A DSC is a PKI-based, legally recognized (IT Act 2000) electronic signature that authenticates identity, protects document integrity, and provides non-repudiation for online filings and e-signing in India.
Where is a DSC commonly required?
Income-tax e-filing, MCA filings, e-tendering/e-procurement, DGFT/IEC, GST, EPFO, TRACES/TDS, GeM/CPPP, ICEGATE, PDF/contracts, and secure email signing.
Classes, Validity & Issuance
What are the DSC classes and current status?
- Class 3 – Highest level; used for e-tenders, MCA, IT e-filing, DGFT, etc. (Active)
- Class 2 – Discontinued for statutory/regulatory filings from Jan 1, 2021; old ones valid till expiry.
- Class 1 – Email-only validation; not issued/accepted now.
How long is a DSC valid?
Typically 1, 2, or 3 years, depending on plan/provider.
How long does issuance take?
30 Minutes
Applying for a DSC
What are the exact application steps?
- Mobile OTP verification & email link verification
- e-KYC via Aadhaar or PAN
- Upload documents (PAN, Aadhaar, photo, etc.)
- Live video recording (≥20 seconds) via webcam/app
- Pay the DSC fee
- Certifying Authority (CA) final approval
- Download/install the DSC to your USB token
Is physical presence required?
No. Identity is verified through e-KYC + mandatory real-time live video (no pre-recorded clips).
What documents are needed?
Aadhaar (paperless mode) or PAN, a recent photo, and a valid email ID & mobile (linked to Aadhaar/PAN). Org DSCs also need entity proofs/authorizations (see portal/entity sections below).
Common reasons for rejection?
Incomplete form, document mismatches (name/DOB), or poor/non-compliant live video.
Managing, Renewal & Revocation
How do I renew a DSC?
Renew on your CA’s portal (same process as new application). Do it before expiry.
Can my DSC be revoked? When and by whom?
Yes—if private key is compromised, token lost, or details changed. The subscriber/authorized representative/CA can request revocation. Usually no fee; the certificate is added to the CRL.
Can I revoke someone else’s DSC?
No. Only the subscriber, their authorized representative, or CA officials can request it.
Downloading & Installing After Issuance
How do I download and install my issued DSC?
- Install your token driver (e.g., ePass2003, ProxKey, Watchdata)
- Insert the USB token into your PC
- Visit your CA portal (e-Mudhra/Capricorn/PantaSign/(n)Code, etc.) → Download Certificate
- Enter Application/Order ID or Challenge Code → verify via OTP
- Select token type (if prompted) → Install/Download Certificate to token
- On success, the DSC is stored securely on the token (usable like a .pfx inside the token)
Live Video Guidance
How do I record the required 20-second video properly?
Use the CA’s live capture tool; ensure good lighting, clear face, plain background; look at the camera; speak your name/Application ID if asked; record one continuous clip ≥20 seconds; do not upload pre-recorded video
USB Tokens
What is a USB token and why is it mandatory?
A secure hardware device that stores your DSC/private key to prevent copying/misuse. It’s mandatory for Class 3 DSC and for portals like e-tendering, GST, MCA, DGFT.
Which USB tokens are popular in India? What’s the difference?
HYP2003, ProxKey (Watchdata), and MToken (Aladdin/Safenet/MTech).
| Feature | HYP2003 | ProxKey | MToken |
|---|---|---|---|
| Security | Standard (RSA 2048) | High (FIPS, EAL4+) | High (FIPS) |
| Speed | Fast | Very Fast | Fast |
| Durability | Medium | Very High | High |
| OS Support | Win/Linux/macOS | Win/Linux/macOS | Win/Linux/macOS |
| Best For | ITR, MCA (basic) | e-tenders, bulk signing | DGFT/enterprise |
| Approx Cost | ₹600–850 | ₹750–1000 | ₹800–1100 |
First-Time Use & Troubleshooting
What do I need to use a DSC?
Class 3 DSC in a USB token, token driver, portal signer/Java (as required), internet (for web portals), and your portal logins.
How do I install and use a DSC for the first time?
- Insert token → install token driver (from brand site)
- Install portal signer/Java if required
- Open target portal (MCA/GST/IT/DGFT, etc.)
- When prompted, choose your DSC from token → enter token password → sign/submit
DSC not showing in browser/portal—what to check?
Token connected, correct driver installed, portal requires Java/emSigner (install), certificate not expired, system date/time correct; try a compatible browser (some gov portals need IE/legacy Edge).
Can I use the same DSC on multiple computers?
Yes—install the token driver on each machine and plug in the same USB token.
Do I need internet to use a DSC?
Yes for web portals; no for purely offline PDF signing.
Can I sign unlimited documents within validity?
Yes, subject to token/software limits and certificate validity.
Forgot token password—what now?
You must reset the token (this erases the DSC); you will need to reapply/renew the DSC.
Which DSC Do I Need? (By Entity Type)
Entity vs. DSC type quick guide
- Proprietorship: Class 3 Individual, Signing-only
- Partnership / LLP / Pvt Ltd / Ltd: Class 3 Organization, Signing + Encryption for tenders; Signing-only for many other portals
- Government Dept/Official: Class 3 Official/Org, Signing + Encryption as per portal
- DGFT/IEC: Class 3 DGFT-category (Signing-only)
- CA/Professionals: Class 3 Individual, often Signing + Encryption
Documents Checklist (By DSC Type)
Proprietorship (Class 3 Individual)
Aadhaar or PAN of proprietor, photo, email & mobile (linked). Optional business proof (GST/Udyam/Shop License).
Partnership / LLP (Class 3 Organization)
Firm/LLP PAN; Partnership Deed/LLP Agreement; Authorization letter; PAN & Aadhaar of signing partner; photo, email, mobile.
Pvt Ltd / Ltd (Class 3 Organization)
Company PAN; Certificate of Incorporation; Board Resolution/Authorization; PAN & Aadhaar of director; DIN; director’s email & mobile.
Government Department
Govt ID (Aadhaar/PAN/Service ID), gov.in/nic.in email, department letter/authorization, officer mobile.
DGFT (Class 3 DGFT-category)
IEC copy, Company PAN, Authorization letter, Aadhaar/PAN of signatory, company email (matching IEC).
Portal-Wise Requirements (What to Use Where)
GeM (Government e-Marketplace)
- Proprietor: Class 3 Individual (Signing-only)
- Partnership/LLP/Pvt Ltd/Ltd: Class 3 Organization (Signing-only)
- Docs per entity as above (incl. PAN, deed/COI, authorization, DIN/DPIN where applicable)
NSWS (National Single Window System)
Class 3 Individual (Proprietor) or Organization (firms/companies), Signing-only; docs mirror GeM.
MCA21 (ROC)
Class 3 Individual (Director/DP with DIN/DPIN) or Organization; used for ROC filings, DIR KYC.
eTender / eProcurement / CPPP / NIC/PSUs
Class 3 Organization with Signing + Encryption (encryption often mandatory); Proprietor may use Class 3 Individual with Signing + Encryption. Some portals require mapping DSC to vendor ID.
GST
Class 3 Individual or Organization (Signing-only). Authorization letter needed for firms/companies.
Income Tax / TRACES (TDS/TAN)
Class 3 Individual; PAN-matched. TRACES typically needs Java + emSigner setup
EPFO/ESIC/Labour
Class 3 Individual (Owner/Partner/Director); PAN & Aadhaar; authorization for firms.
PFMS / eOffice / Health (ABDM/NDHM) / SEZ Online / NCS
Class 3 Organization or Official/Individual as portal demands; NIC/gov email for eOffice; SEZ Online prefers Org DSC; Health portals accept Individual/Official.
DGFT & ICEGATE – Focus Guides
DGFT (IEC) – Which DSC do I need by entity?
- Proprietor: Class 3 Individual, DGFT-category, Signing-only
- Partnership/LLP/Pvt Ltd/Ltd: Class 3 Organization, DGFT-category, Signing-only
- Encryption: Not required
- Aadhaar OTP: Often works for some actions, but DSC is mandatory for specific filings/modifications
- Tip: Ensure DSC details match IEC records
ICEGATE – What is required?
- Class 3 Signing-only DSC (Org DSC for firms/companies; Individual DSC for proprietors)
- Encryption: Not required
- You can register multiple users under one IEC; one Class 3 Org DSC can often work across DGFT/ICEGATE/MCA if issued for “All Usage” and entity/PAN match
- Registration steps: New Registration → choose user type → fill form/upload docs → plug token → sign with DSC → activation
Using DSC for PDFs & Email
How do I sign a PDF with my DSC?
Acrobat Reader → Tools > Certificates > Digitally Sign → draw signature box → choose DSC from token → enter token password → apply → save.
Can I use DSC for secure email?
Yes—configure the certificate in your email client (Outlook/Thunderbird) for signing.
Class 1 & 2: Why Not Issued Now
Why are Class 1 & Class 2 DSCs not issued now?
- Class 1: Minimal validation and not accepted for official transactions.
- Class 2: Discontinued for statutory/regulatory filings from Jan 1, 2021 by CCA. Existing ones (issued on/before Dec 31, 2020) remain valid until expiry.
- Now: Official filings require Class 3 DSC (stronger verification/encryption standards).
Quick Picks & Best Practices
Which token should I pick for my use case?
- e-Tenders/Bulk signing: HYP2003
- Basic ITR/MCA/GST: HYP2003/ProxKey
- DGFT/Enterprise: MToken or ProxKey
Any best practices to avoid issues?
Keep details consistent across PAN/Aadhaar/IEC; use good lighting & a steady camera for live video; install the correct token drivers/signer; renew before expiry; keep token password safe; revoke promptly if token is lost or key is compromised.