Everything You Need to Know About DSC

A Digital Signature Certificate (DSC) is an electronic credential issued by a licensed Certifying Authority (CA) under the Controller of Certifying Authorities (CCA), Ministry of Electronics & IT, Government of India. It functions as a digital equivalent of your handwritten signature and physical stamp, allowing you to sign electronic documents with legal validity under the Information Technology Act, 2000. A DSC uniquely identifies the signer, ensures document integrity, and prevents tampering — just like a seal on a paper document.

Yes. Digital signatures are fully legally valid under the Information Technology Act, 2000 (IT Act) and the Indian Contract Act, 1872. Section 3 of the IT Act recognises electronic signatures as legally equivalent to handwritten signatures for all purposes except specific instruments like wills, negotiable instruments, and documents requiring registration under the Registration Act. DSCs issued by CCA-licensed Certifying Authorities are accepted across all Indian courts, government departments, and regulatory bodies.

An electronic signature is any electronic method of signing — it could be as simple as typing your name at the bottom of an email or a scanned image of your handwritten signature. A digital signature is a specific, cryptographically secured type of electronic signature. It uses Public Key Infrastructure (PKI) — a private key (stored securely on your USB token) encrypts a hash of the document, and the recipient verifies it using your public key embedded in the DSC. This makes DSC-based signatures far more secure and tamper-evident.

DSCs are issued by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA), Department of Information Technology, Government of India. Licensed CAs include:

• eMudhra Limited
• Capricorn Identity Services
• Sify Technologies
• nCode Solutions (GNFC)
• PantaSign Technologies
• National Informatics Centre (NIC)
• IDRBT (for banking sector)

DSC Express works with multiple licensed CAs to offer you the best options.

DSCs are available in 1-year, 2-year, and 3-year validity periods from the date of issuance. After expiry, the DSC becomes invalid and cannot be used for signing. You must renew or obtain a fresh DSC before it expires. We recommend 2-year or 3-year validity for cost efficiency. Renewing within 90 days of expiry is advisable to avoid any disruption.

Since January 2021, India has standardised to a single class: Class 3 DSC. Previously there were Classes 1, 2, and 3; however, Class 1 and Class 2 were discontinued by CCA as they provided lower levels of identity assurance. Class 3 is now the only class issued, providing the highest level of identity verification through in-person or video-based KYC.

Individual DSC is issued in the name of a natural person (individual). It is used for personal tax filings, MCA director DSC, DGFT filings as a proprietor, etc.

Organization DSC is also issued in the name of an individual (an authorised signatory) but additionally contains the organization's name in the certificate. This is required for: signing on behalf of a company/LLP, e-Tendering, GeM procurement, MCA charge filings, and any portal requiring an organization-branded certificate.

Both are Class 3 and use the same token; the difference is in the certificate attributes.

A Signing DSC (or "Signature" certificate) is used to digitally sign documents, forms, and emails. This is what most users need for government portals.

A Signing + Encryption DSC (combo certificate) includes an additional encryption key that allows you to send and receive encrypted emails or documents. This is typically needed for DGFT exporters, certain banking applications, and encrypted communication workflows. Most standard applications only require the Signing certificate.

These terms refer to the primary identity document used during KYC:

• Aadhaar-based (eKYC): Identity is verified using your Aadhaar number + OTP or biometric. Fastest processing — usually same-day issuance. Aadhaar must have a valid mobile number linked.
• PAN-based: PAN card is used as primary identity proof, supported by additional documents. Used when Aadhaar eKYC is not possible.

For Indian residents, Aadhaar-based eKYC is the recommended and fastest route.

For Aadhaar-based eKYC (fastest): Only your Aadhaar-linked mobile number is required. You will complete OTP-based verification.

For document-based:

• PAN Card (mandatory)
• Aadhaar Card or Passport or Voter ID (identity proof)
• Aadhaar Card or utility bill or bank statement (address proof, if not using Aadhaar eKYC)
• Passport-size photograph

All documents must be self-attested. Originals may be required during video KYC.

Organization DSC requires documents for both the organization and the authorised signatory:

Organization documents:

• Certificate of Incorporation / Registration Certificate
• GST Registration Certificate (if applicable)
• Authorization letter on company letterhead naming the signatory
• Board Resolution (for companies)

Signatory (individual) documents:

• PAN Card
• Aadhaar Card (for eKYC) or identity + address proof
• Passport-size photograph

Foreign nationals and NRIs should provide:

• Passport (valid, all relevant pages)
• Visa (if applicable) or OCI/PIO card for NRIs
• Foreign address proof (utility bill, bank statement — not older than 3 months)
• Passport-size photograph
• Tax Identification Number (TIN) from the home country, if available

Documents must be notarised or apostilled depending on the applicant's country. Our team will guide you on the exact requirement.

Foreign companies require:

• Certificate of Incorporation from the country of origin
• Memorandum & Articles of Association (or equivalent constitutional document)
• Authorization letter / Board Resolution naming the signatory
• Signatory's passport and address proof
• Indian business registration documents (if any — e.g., liaison office, branch office registration)

All documents must be apostilled or notarised as per the Hague Convention. We provide a detailed checklist specific to your country upon request.

Video KYC (Know Your Customer) is a live video session where you verify your identity with a DSC Express representative or the Certifying Authority's system. During the session you will:

• Show your face clearly on camera
• Display your original identity document (Aadhaar / PAN / Passport)
• Read a randomly generated OTP or phrase
• Confirm your details

The session typically takes 3–5 minutes and can be done from your smartphone. No branch visit is needed. Your session is recorded as per regulatory requirements.

Once your Video KYC is approved and payment is confirmed, the Certifying Authority issues the DSC within 2–4 hours during business hours (Monday–Saturday, 9 AM–6 PM IST). The DSC is then loaded onto the USB token, which is shipped the same or next business day. Total time from application to receiving the token: 24–48 hours for most locations in India. International shipments take 5–7 business days.

Yes. After you apply, you will receive an application number (e.g., EXP######). You can track your order status by contacting our support team via WhatsApp, email, or phone with your application number. We also send SMS and email notifications at each stage — video KYC completion, DSC issuance, and shipment with courier tracking number.

For Indian applicants, we accept:

• UPI (GPay, PhonePe, Paytm, etc.)
• Credit & Debit Cards (Visa, Mastercard, RuPay)
• Net Banking (all major banks)
• PhonePe Payment Gateway

For foreign applicants (USD billing):

• International Credit / Debit Cards (Visa, Mastercard)
• Payeezy / Clover payment gateway

All transactions are SSL-encrypted. We do not store card details.

Yes. GST at 18% is applicable on DSC services in India. All prices displayed on our website are inclusive of GST unless stated otherwise. A GST invoice will be provided with your order for businesses that wish to claim input tax credit.

With Token: Includes a new branded encrypted USB cryptographic token (ePass, SafeNet, or equivalent). If you don't already own a compatible token, choose this option.

Without Token (BYOD — Bring Your Own Device): Your DSC is loaded onto your existing compatible token. Saves ₹400–600 on cost. Your existing token must be a Class 3-compatible hardware token with available slots.

If the DSC application is rejected by the Certifying Authority due to no fault of the applicant, we will process a full refund. If you withdraw the application before video KYC, a partial refund (minus processing charges) is applicable. Once a DSC is successfully issued, refunds cannot be processed as the CA has already completed issuance. For concerns, contact [email protected] within 7 days.

A DSC USB token (also called a cryptographic token or hardware security module) is a tamper-resistant USB device that stores your DSC's private key. When you plug it into your computer and enter your token PIN, your computer can use the private key to sign documents — without the key ever leaving the token. This prevents duplication and unauthorised use. Common brands include ePass 2003 Auto (Feitian), SafeNet 5110, WD Pro, and others.

If your token is lost or damaged, the private key is permanently lost — a new DSC must be issued. You will need to: (1) Submit a fresh application with new documents, (2) Complete video KYC again, and (3) Pay for a new DSC issuance. There is no way to retrieve the private key from a lost token, as it is designed to be irretrievable — this is a security feature. We recommend keeping the token in a safe place and never sharing your PIN.

Steps:

1. Install the token driver (provided on the token or downloadable from our support page)
2. Plug the USB token into your computer
3. Install the eMSigner or Signer software if required by the portal
4. Go to the government portal (MCA21, TRACES, GST, etc.) and select "Digital Signature" login
5. Select your certificate from the token and enter your PIN
6. Your document is now signed

We provide a step-by-step installation guide PDF with every token purchase.

No. For security reasons, a DSC private key cannot be copied or transferred from one token to another. The private key is generated inside the token at issuance and is non-exportable. If you need to use your DSC on a new token, you must apply for a fresh DSC. However, you can use the same DSC on any computer by simply plugging in the token — the DSC travels with the token, not the computer.

DSC is mandatory or commonly used for:

• MCA21 — Company/LLP incorporation, ROC annual filings, charge registration, director appointments
• Income Tax — e-filing of returns for companies, auditors, and individuals with audit obligation
• GST — GSTIN registration, GSTR filings, refund applications
• DGFT — Import-Export Code applications, SION filings, advance authorizations
• e-Tendering & GeM — Government procurement, NIC, CPPP, and state tendering portals
• EPFO — Employer digital signing for PF filings and KYC approvals
• ICEGATE / Customs — Import/export customs clearance
• Patents & Trademarks — IP India online filing
• SEBI & Exchanges — Corporate disclosures, broker filings
• RERA — Real estate project registrations

A Class 3 DSC is mandatory for: companies, firms required to get accounts audited under Section 44AB, political parties, and individuals filing ITR-3 with audit report. For other individuals and salaried employees, DSC is optional — they can e-verify using Aadhaar OTP or net banking instead. However, if you wish to sign your return with a DSC for extra security, that is also accepted.

Yes. A single Class 3 DSC can be used across all government portals that accept DSC — MCA21, Income Tax, GST, DGFT, EPFO, GeM, e-Tendering, and more. You do not need a separate DSC for each portal. The token stores your certificate, and you simply plug it into whichever computer you're using to access the portal.

Yes. NRIs (Non-Resident Indians) can apply for a DSC through our Foreign Individual DSC product. You'll need your Indian passport (or valid foreign passport), OCI/PIO card if applicable, foreign address proof, and PAN card if available. The application, document submission, and video KYC are all done online. The USB token is shipped to your international address, or you can arrange to receive it at an Indian address.

Yes. When a foreign company registers a subsidiary, branch office, or liaison office in India (via MCA21), the authorised signatory — typically a foreign director — requires a Class 3 DSC. Our Foreign Organization DSC product handles exactly this use case. We guide you through apostille/notarisation requirements for your country's documents and manage the entire issuance process remotely.

Apostille is an authentication stamp issued by a country's competent authority to validate official documents for international use, under the Hague Convention of 1961. For DSC applications from foreign applicants, incorporation documents, director passports, and authorisation letters typically require apostille if your country is a signatory to the Hague Convention. For countries not in the Hague Convention, notarisation + Indian embassy attestation is required. Contact our team for a country-specific document checklist.

DSC renewal is essentially applying for a new certificate — you cannot "extend" an existing DSC. Start the renewal process at least 30–60 days before expiry to avoid any disruption. The process is similar to a fresh application: fill the form, complete video KYC (some CAs offer a simplified renewal KYC), and pay. The new DSC is loaded onto the same token (if it has a free slot) or onto a new token. We notify registered customers by email 90 days before expiry.

Yes, in most cases. A standard USB token has 2–4 certificate slots. After renewal, the new DSC is loaded into a fresh slot on the same token. The old (expired) certificate remains on the token and can be used to verify old documents you signed before expiry, but cannot be used to sign new ones. Once all slots are full, a new token is needed — we'll inform you if this applies to your token.

Common reasons:

• Token driver not installed — Download and install the correct driver for your token model
• Java not enabled — Some older portals require Java. Install the latest version and enable browser plug-in
• Browser compatibility — Use Internet Explorer / Edge in compatibility mode for legacy portals. Modern portals work with Chrome/Firefox with the eMSigner tool
• eMSigner not running — Ensure the eMSigner or emsigner-desktop app is running as administrator
• DSC expired — Check your certificate expiry date in the token management software
• Wrong PIN — Three failed PIN attempts may lock the token. Contact support for unlock

DSC (Digital Signature Certificate) uses a hardware token (USB) to store your private key. Signing requires the physical token. Legally the strongest option; required by most government portals.

eSign is an Aadhaar-based online signing service introduced by the Government of India. It is performed via OTP or biometric at the time of signing — no hardware token needed. eSign is legally valid but not accepted on all government portals (primarily used for private e-contract platforms and some newer government services). For MCA21, Income Tax audit, e-Tendering, etc., a hardware DSC is still required.