Comprehensive answers to everything about DSC in India — types, process, validity, portals, legal standing, and troubleshooting.
Q1.
What is a Digital Signature Certificate (DSC) and why is it mandatory in India?
A Digital Signature Certificate (DSC) is an electronic credential issued by a licensed Certifying Authority (CA) under the Information Technology Act, 2000. It uses Public Key Infrastructure (PKI) technology to bind a person's or organisation's identity to a pair of cryptographic keys — a private key (kept secret on a USB token) and a public key (embedded in the certificate). The DSC enables legally valid digital signing of documents, forms, and communications. In India, DSC is mandatory for: filing Income Tax returns (for companies, LLPs, and tax audit cases), MCA21 company and LLP e-forms, GST registration amendments and specified filings, DGFT import-export portal, e-tendering on government procurement platforms (CPPP, GeM, state e-procurement), EPFO claims, SEBI filings, IRDAI submissions, and Patent/Trademark e-filing. A DSC-signed document carries the same legal standing as a physically signed and stamped document under Indian law.
Q2.
What are the different classes and types of DSC available in India in 2025?
As of the Controller of Certifying Authorities (CCA) notification in 2021, only Class 3 DSCs are issued for signing purposes (Class 1 and Class 2 have been discontinued for new issuance). Class 3 is the highest assurance level, requiring strict identity verification. Types within Class 3: (1) Individual Signing DSC — for natural persons; used for Income Tax, MCA forms, GST, DGFT, e-tender. (2) Individual Signing + Encryption DSC — two certificates on one token; used when portals require both signing and encrypted data exchange. (3) Organisation Signing DSC — issued in the company/firm/trust name; required for MCA company-level forms and corporate filings. (4) Organisation Signing + Encryption DSC — dual certificate for organisations. (5) DGFT DSC — a special-purpose Class 3 DSC specifically for the DGFT online portal; issued only to IEC holders and technically formatted to meet DGFT requirements. (6) Document Signer Certificate — for server-side automated bulk signing. Validity: 1 year, 2 years, or 3 years.
Q3.
What is the difference between Class 1, Class 2, and Class 3 DSC in India?
Class 1 DSC offered minimal assurance, verifying only the email address and name. Class 2 DSC required additional identity verification against a trusted database. Both have been discontinued for new signing DSC issuance since January 2021 per CCA directive. Class 3 DSC (the only current option) provides the highest level of assurance — requiring Aadhaar-based eKYC (OTP or biometric), PAN verification, and sometimes Video KYC — making it suitable for high-stakes transactions such as company filings, government tenders, tax filings, and export-import licencing. If you have an older Class 2 DSC, it will function until its expiry but cannot be renewed in Class 2; you must renew in Class 3.
Q4.
What documents are required to apply for a Class 3 DSC in India?
For Aadhaar eKYC-based DSC issuance (the fastest route): (1) PAN card, (2) Aadhaar card with mobile number linked to it (for OTP), (3) a recent passport-size photograph, and (4) registered email address and mobile number. For Organisation DSC (company/LLP): additionally required are CIN/LLPIN, Board Resolution/Authorisation letter, and authorised signatory details. The Aadhaar eKYC route is entirely paperless — no physical copies need to be submitted. For applicants without Aadhaar linkage, alternate routes (offline eKYC, biometric verification at an authorised centre) are available, which may require physical document submission.
Q5.
How long does it take to get a DSC issued online in India?
For Aadhaar eKYC-based applications where all details are accurate and OTP verification is completed promptly, the DSC can be issued within 1 to 4 hours during business hours. For cases requiring Video KYC, the timeline is typically 4 to 8 hours. For Organisation DSC where the CA verifies corporate documents, the standard processing time is 1 working day. PrecisionTech as an authorised CA partner facilitates same-day processing for most individual DSC applications and next-day delivery for most Organisation DSCs. Bulk corporate DSC requirements (multiple directors) can be processed in batch on agreed timelines.
Q6.
What is the validity of a DSC and what happens when it expires?
A DSC is issued with a validity of 1 year, 2 years, or 3 years from the date of issuance. Once a DSC expires, it can no longer be used for signing. The Certifying Authority will revoke the certificate as part of normal lifecycle management. Documents signed before expiry with a valid DSC remain legally valid indefinitely — the signature was valid at the time of signing and can be validated against the historical Certificate Revocation List (CRL). To continue signing, you must apply for a new/renewal DSC before the expiry date. PrecisionTech sends advance renewal reminders to its clients to prevent operational disruptions.
Q7.
What is a USB Token and why is a DSC stored on it?
A USB Token (also called a cryptographic token or hardware security key) is a tamper-resistant USB device containing a smart chip (similar to a SIM card) that securely stores the DSC private key. The private key is generated inside the token and never leaves it — making it virtually impossible to copy or extract. When you sign a document, the signing operation is performed inside the token's secure chip, not on your computer. This protects against malware, key theft, and unauthorized signing. Common token brands in India include ePass2003 (Feitian Technologies), WD Token, proxKey, and mToken. A token requires a 6-to-8 digit PIN for access — three failed PIN attempts lock the token. The token also has a Super Admin PIN for unlocking.
Q8.
Can a DSC be used on cloud portals and without a USB token?
Traditional Class 3 DSCs are stored on USB tokens. However, certain Certifying Authorities now offer cloud-based or soft-token DSCs where the private key is stored in an HSM (Hardware Security Module) managed by the CA, and signing is performed remotely — authenticated via OTP or biometric. These are called "paperless" or "cloud DSC" or "eSign" services. For most standard compliance filings (Income Tax, MCA, GST), cloud DSC or eSign using Aadhaar is accepted. For some government e-tender portals, USB token-based DSC is still specifically required for security reasons. PrecisionTech advises on the right format based on your specific use case.
Q9.
What is DGFT DSC and who needs it?
DGFT DSC (Directorate General of Foreign Trade Digital Signature Certificate) is a Class 3 DSC specifically formatted to meet the technical requirements of the DGFT online portal (https://www.dgft.gov.in). It is mandatory for: IEC (Importer Exporter Code) applications and modifications, export-import licence filings, Advance Authorisation applications, EPCG licence applications, SEIS and RoDTEP scrip applications, and Star Export House certification. A regular Class 3 DSC cannot be used on the DGFT portal — the certificate must have the DGFT-specific OID (Object Identifier) embedded by the CA at issuance. Only IEC holders or entities applying for IEC are eligible for DGFT DSC. PrecisionTech has deep expertise in DGFT DSC issuance for exporters and importers.
Q10.
How is a DSC used for MCA21 and company ROC filings?
The Ministry of Corporate Affairs (MCA) requires DSC for all e-form filings on the MCA21 portal. Directors and Professionals (CA, CS, CMA) are required to use their individual Class 3 DSC to authenticate and submit forms such as SPICe+ (company incorporation), DIR-3 KYC, DIN forms, MGT-7 (Annual Return), AOC-4 (Financial Statements), ADT-1, CHG-1, and all LLP forms. For company-level filings requiring the company's own DSC, an Organisation DSC is required. The MCA21 Gen3 portal introduced in 2022 supports both DSC-based signing and OTP-based signing for certain forms, but critical filings still mandate DSC. Professionals file on behalf of companies using their own individual DSC registered on the portal.
Q11.
What are the most common portals that require a DSC in India?
Key portals requiring DSC across India: (1) Income Tax — IT Dept e-filing portal for companies, LLPs, and tax audit cases. (2) MCA21 — Ministry of Corporate Affairs company filings. (3) GSTN — GST Network portal for specific amendments. (4) DGFT — Directorate General of Foreign Trade. (5) CPPP — Central Public Procurement Portal (government tenders). (6) GeM — Government e-Marketplace for vendor and product registration. (7) EPFO — Employee Provident Fund filings. (8) SEBI — Securities and Exchange Board filings for market participants. (9) IRDAI — Insurance Regulatory and Development Authority. (10) State e-procurement portals (MHRD, DPIIT, state PWD, state irrigation departments). (11) Patent Office, Trade Marks Registry. (12) ICEGATE — Customs and Central Excise. (13) IREPS — Indian Railways e-procurement. (14) NIC e-procurement portals.
Q12.
Can multiple users share one DSC or USB token?
No. A DSC is issued to a specific individual or organisation and is non-transferable. A USB token stores one or more DSCs for that specific person. Sharing a USB token or DSC with another person is: (1) a breach of the IT Act 2000 and CA/Browser Forum requirements, (2) potentially fraudulent since the signature legally represents the person named in the certificate, (3) a breach of non-repudiation — the fundamental legal property of a digital signature. Each director, partner, proprietor, or professional who needs to sign forms must have their own individual DSC. Corporates with multiple signatories must arrange separate DSCs for each authorised person.
Q13.
What is Aadhaar eKYC for DSC and how does it work?
Aadhaar eKYC (Electronic Know Your Customer) leverages the UIDAI's Aadhaar authentication infrastructure to verify identity during DSC application. When you provide your Aadhaar number and consent, the CA sends an OTP to your Aadhaar-registered mobile number. You enter the OTP to authenticate. The CA's system receives your name, gender, and date of birth from UIDAI (no address or biometric data is shared). This is matched with the PAN details you provided to cross-verify identity. The entire process is real-time, paperless, and typically takes 2-3 minutes. Biometric Aadhaar authentication (fingerprint or iris) is used at authorised CA centres when the applicant's Aadhaar-registered mobile number is not available or accessible.
Q14.
What is Video KYC for DSC issuance?
Video KYC (or V-CIP — Video-based Customer Identification Process) is an alternative identity verification method used when Aadhaar OTP eKYC cannot be completed. It involves a short (2-5 minute) video call between the applicant and a CA representative. During the call: the applicant shows their original PAN and Aadhaar, their face is matched with the Aadhaar photograph, and the representative asks a few verification questions. The call is recorded and stored by the CA per RBI/CCA guidelines. Video KYC adds a slight delay (a few hours for scheduling) but is equally legally valid. PrecisionTech helps schedule Video KYC appointments promptly.
Q15.
How do I install the USB token driver and use the DSC on my computer?
Step 1: Download the token driver for your specific token model from the manufacturer's website (e.g., for ePass2003: Feitian Technologies driver). Step 2: Install the driver. Step 3: Insert the USB token — it should appear as a smart card device in Device Manager. Step 4: Open the token management software (e.g., ePass PKI Manager), login with your PIN to verify the certificate is present. Step 5: For MCA21/Income Tax: go to the portal, select DSC-based signing option, the portal's Java/browser plugin will detect your token. Step 6: Select your certificate from the dropdown, enter PIN, and sign. Supported browsers: Chrome and Firefox (with additional plug-ins in some portals). PrecisionTech provides post-issuance setup support including driver installation guidance.
Q16.
How do I digitally sign a PDF document using a DSC?
Method 1 — Adobe Acrobat (Standard/Pro): Open PDF → Tools → Certificates → Digitally Sign → Draw signature field → Select Certificate from USB token → Enter PIN → Save. The signature shows the certificate details and is tamper-evident. Method 2 — emSigner (eMudhra): Upload the PDF to emSigner, select USB token-based signing, choose certificate, enter PIN, download signed PDF. Method 3 — PDF signing via browser plug-in: Some government portals have integrated signing workflows. Method 4 — Batch signing via Document Signer: For organisations processing high volumes, a server-based Document Signer DSC with automated signing scripts. All methods create a PAdES (PDF Advanced Electronic Signature) compliant signature embedded in the PDF.
Q17.
How do I digitally sign a Word document or Excel sheet with a DSC?
In Microsoft Word (2013 and later): File → Info → Protect Document → Add a Digital Signature → Select Purpose → Click OK → Token authentication dialog appears → Select certificate → Enter PIN → Sign. In Excel: same path via File → Info → Protect Workbook → Add a Digital Signature. The signed document will display a signature line with the certificate details. Note: Microsoft Office uses the Windows Certificate Store. If your DSC is USB token-based, Windows automatically recognises it via the smart card middleware. The signature is embedded in the .docx/.xlsx file itself and validates certificate trust chain and document integrity.
Q18.
What is a Bulk DSC or Document Signer Certificate?
A Document Signer Certificate (also called Bulk DSC or Server-Based DSC) is a Class 3 DSC installed on a software/server rather than a USB token. It is used for automated, high-volume document signing without human intervention per document. Use cases include: (1) Invoice signing — thousands of GST-compliant invoices signed daily. (2) e-Way Bill auto-signing. (3) Delivery challan and contract auto-signing. (4) Certificate of origin, insurance certificates. The Document Signer DSC is integrated with the organisation's ERP (Tally, SAP, Oracle, custom) or document management system. Signing requests are processed programmatically via PKCS#11 or CSP (Cryptographic Service Provider) APIs. PrecisionTech provides implementation services for document signing automation using Tally and custom ERP integrations.
Q19.
Can I use a DSC for GST filing and GST registration?
Yes. DSC is accepted on the GST portal (https://www.gst.gov.in) for: (1) GST registration (GSTR-1 application) — a DSC is required for company, LLP, and certain other applicants; individuals and proprietorships can use EVC (Electronic Verification Code) instead. (2) Amendment of core fields in GST registration. (3) GSTR-9 annual return for select categories. (4) LUT (Letter of Undertaking) filing for zero-rated supplies without payment of tax. (5) Cancellation of GST registration. For day-to-day GSTR-1 and GSTR-3B filing, registered users can use EVC (OTP to registered mobile/email) as an alternative, but DSC provides the highest assurance and non-repudiation for critical filings.
Q20.
What is the role of a Certifying Authority (CA) in DSC issuance?
A Certifying Authority (CA) is a licensed entity authorised by the Controller of Certifying Authorities (CCA), Ministry of Electronics & Information Technology (MeitY), Government of India, under the IT Act 2000 to issue Digital Signature Certificates. Licensed CAs in India include eMudhra, Sify, NSDL e-Governance, (n)Code Solutions, IMC, and others. CAs are responsible for: identity verification of applicants, issuance and digitally signing DSCs with the CA's root/sub-CA certificate, maintaining Certificate Revocation Lists (CRL) and OCSP (Online Certificate Status Protocol) servers, and revoking compromised or expired certificates. PrecisionTech operates as an authorised Registration Authority (RA) partner for licensed CAs, enabling fast local issuance while the CA's trust infrastructure backs every certificate issued.
Q21.
What is Certificate Revocation and when does it happen?
Certificate Revocation is the process by which a CA invalidates a DSC before its natural expiry. Reasons for revocation: (1) Private key compromise (token lost or stolen). (2) Applicant requests revocation. (3) Change in information (name, PAN, company status). (4) Employee termination. (5) Legal order or regulatory requirement. Once revoked, the certificate appears on the CA's Certificate Revocation List (CRL) and OCSP responder — any relying party checking the certificate will immediately see it is no longer valid. Documents signed after revocation are invalid; documents signed before revocation (when the certificate was valid) retain their legal validity. If your USB token is lost or stolen, immediately contact PrecisionTech to initiate revocation to prevent misuse.
Q22.
What is the difference between eSign and a DSC?
DSC (Digital Signature Certificate) on a USB token: the private key is stored on your hardware token, signing requires physical token + PIN. You have full control and custody of the private key. Legally equivalent to handwritten signature under IT Act 2000. eSign: an Aadhaar-based online electronic signature service where UIDAI generates a temporary one-time DSC for a specific signing request and signs the document in real-time using Aadhaar authentication. The private key is generated by UIDAI and not stored or controlled by the user — it is destroyed after the signing event. eSign is faster (no token required) and accepted for many government services (DigiLocker, MCA forms, GST), but some portals still require the traditional USB-token DSC. Both are legally valid under the IT Act.
Q23.
How do I renew an expiring DSC before it expires?
DSC renewal is essentially a new application — there is no "rollover" of the old certificate. Steps: (1) Contact PrecisionTech at least 30 days before expiry. (2) Provide your existing USB token (if the token has free space, the new certificate can be loaded onto the same token; otherwise a new token is required). (3) Complete fresh eKYC or Video KYC — the renewal requires identity re-verification. (4) Pay the renewal fee for the selected validity (1, 2, or 3 years). (5) New certificate is issued and loaded onto your token. (6) Register the new DSC on the relevant portals (MCA, Income Tax, DGFT, etc.) before the old certificate expires. PrecisionTech sends advance renewal reminders to its clients typically 60 and 30 days before expiry.
Q24.
What happens if I forget my USB token PIN or the token gets locked?
Each USB token has a User PIN (for daily signing) and a Super Admin PIN (also called PUK — PIN Unblock Key). If the User PIN is entered incorrectly 3 consecutive times, the User PIN is locked. You can unlock it using the Super Admin PIN via the token management software (e.g., ePass PKI Manager → Change PIN or Unblock PIN). If the Super Admin PIN is also forgotten or entered incorrectly too many times, the token is permanently locked and cannot be unlocked. In this case, the DSC on the token is lost — you will need to apply for a new DSC. Important: record and store your Super Admin PIN securely when you first receive the token.
Q25.
Is a Digital Signature Certificate legally valid for court submissions and contracts in India?
Yes. Under Section 5 of the Information Technology Act, 2000, a digital signature authenticated by means of a Digital Signature Certificate is accorded the same legal recognition as a handwritten signature for the purposes of any law requiring a signature. Under Section 10A, contracts entered into electronically are valid and enforceable. Under Section 65B of the Indian Evidence Act, 1872 (now replaced by the Bharatiya Sakshya Adhiniyam, 2023), electronically signed documents are admissible as evidence. Courts have upheld the legal validity of DSC-signed documents in numerous judgements. PrecisionTech's issued DSCs use certificates from CCA-licensed CAs, ensuring full legal standing.
Q26.
What is the cost of a DSC in India — what factors affect pricing?
DSC pricing in India varies based on: (1) Type — Individual Signing vs. Organisation DSC vs. DGFT DSC. (2) Whether a USB token is included (token hardware adds cost). (3) Validity — 1, 2, or 3 years (longer validity = lower annual cost). (4) Certifying Authority. (5) Service level — standard or expedited processing. Additionally, there may be a separate charge for configuration support and post-issuance assistance. PrecisionTech provides transparent, competitive pricing for all DSC types. Contact PrecisionTech for current pricing tailored to your specific type and quantity requirements — bulk pricing is available for organisations needing multiple DSCs for directors, partners, or signatories.
Q27.
Can I use my DSC from India on international portals or for international document signing?
Indian DSCs are issued under the Indian IT Act framework and are trusted within India's national trust infrastructure. International recognition depends on the jurisdiction: (1) EU — Indian DSCs are not on the EU Trusted List (EUTL) and therefore not automatically recognised as "Qualified Electronic Signatures" under eIDAS. However, for contractual purposes (not regulated eIDAS use cases), they may be accepted. (2) USA — no federal electronic signature law mandates a specific technical standard; Indian DSCs can be used and accepted depending on counterparty agreement. (3) DGFT and Indian trade documents signed with Indian DSCs are recognised by Indian customs and trade authorities. For international contracts requiring locally recognised DSCs, consult PrecisionTech on jurisdiction-specific requirements.
Q28.
What is the process for getting DSC for a startup or newly incorporated company?
For a newly incorporated company via MCA21 SPICe+ process: (1) The proposed directors must each have a valid Class 3 Individual DSC before filing the incorporation forms (SPICe+ Part B, INC-9, DIR-2 etc. require director DSCs). (2) PrecisionTech can process Director DSCs on an accelerated basis for startup incorporation timelines — typically 2-4 hours per DSC with Aadhaar eKYC. (3) After incorporation, if the company requires an Organisation DSC for company-level MCA forms, apply with the CIN and Board Resolution. (4) For startups registered on DPIIT Startup India portal, the founders' DSCs also enable Startup India filings. PrecisionTech regularly supports CA/CS firms and incubators with batch DSC processing for new startups.
Q29.
Can I get a DSC issued online in Thane without visiting any office?
Yes. PrecisionTech issues Digital Signature Certificates for applicants in Thane fully online using Aadhaar-based eKYC — no physical document submission or office visit required. The OTP is sent to your Aadhaar-registered mobile, identity is verified electronically with UIDAI in real-time, and the DSC is issued and dispatched to you digitally. For USB token delivery, the loaded token is couriered to your Thane address. Typically, Class 3 Individual DSC for Thane applicants is ready within 4 hours of completing the online application and OTP verification.
