Digital Signature Certificate (DSC) — Apply Online in India
A Digital Signature Certificate is the cryptographic identity you use to sign filings electronically. It is issued by a Certifying Authority licensed by the Controller of Certifying Authorities under the Information Technology Act, 2000, and a document signed with it carries the same legal effect as a signature on paper. Every MCA filing, most income-tax and GST filings for entities, EPFO and ESIC employer actions, DGFT filings, and all government e-tendering run on it.
For practical purposes there is now only one class. Class 2 certificates were discontinued and Class 3 is what is issued for all transaction types, differentiated instead by usage — signing, encryption, or both — by whether the holder is an individual or an organisation representative, and by validity of one, two, or three years.
This guide covers the certificate types and the usage matrix, who needs which one, the documents and the mandatory video verification, how the token works, indicative cost, validity and renewal, how to register the DSC on each government portal, and what to do when a token is lost or a password is forgotten.
What is a Digital Signature Certificate?
A DSC is an electronic credential binding your verified identity to a public key. When you sign a filing, the private key held on your token produces a signature that anyone can verify against the certificate — proving who signed, that the content has not changed since, and that the signer cannot credibly deny having signed it.
Legal effect comes from the Information Technology Act, 2000, which gives a digital signature affixed with a licensed Certifying Authority’s certificate the same standing as a handwritten signature for most purposes. That is why MCA, the Income Tax Department, GSTN, DGFT, EPFO, and tender portals accept it without any paper counterpart.
A DSC is personal. It identifies the human being who holds it, even when the certificate also names their organisation. Sharing a token with an accountant or an office administrator means someone else can sign statutory documents in your name — which is a governance problem, not a convenience.
What are the classes and types of Digital Signature Certificates?
Class 3 is the operative class for all Indian statutory and commercial e-filing. What actually varies is usage type, holder type, and validity.
| Certificate | Usage | Typical holder | Validity options |
|---|---|---|---|
| Class 3 — Signing | Signing filings and documents | Directors, partners, proprietors, professionals | 1, 2, or 3 years |
| Class 3 — Encryption | Decrypting tender documents and confidential data | Bidders on e-procurement portals | 1, 2, or 3 years |
| Class 3 — Combo (both) | Signing plus encryption on one token | e-tendering and e-auction participants | 1, 2, or 3 years |
| Class 3 — Organisation | Signing on behalf of an entity, entity name in the certificate | Authorised signatories of companies, LLPs, firms | 1, 2, or 3 years |
| DGFT DSC | Foreign trade filings on the DGFT portal | Organisations holding an IEC | 1, 2, or 3 years |
| Document Signer Certificate | Automated bulk signing by an application | Systems issuing invoices, certificates, statements | As issued |
Class 2 was withdrawn and is no longer issued, so any guidance that tells you to buy a "Class 2 DSC for MCA filings" is stale. For most founders the answer is a Class 3 signing certificate; you only need the combo if you bid on tenders, and a DGFT certificate only if you file on the foreign trade portal.
Who needs a Digital Signature Certificate?
- Every subscriber and director signing incorporation forms (company registration)
- Designated partners of an LLP, for incorporation and annual filings (LLP registration)
- Every director completing annual DIR-3 KYC
- Authorised signatories filing company annual filings and event-based ROC forms
- Companies and LLPs filing income-tax returns, where DSC signing is mandatory (ITR-6 filing)
- Entities required to file TDS returns and issue certificates
- GST registration applicants that are companies or LLPs (GST registration)
- Employers acting on EPFO and ESIC employer portals (PF registration, ESI registration)
- IEC holders filing on the DGFT portal (import export code)
- Importers and exporters filing on ICEGATE (ICEGATE registration)
- Agents and applicants filing trademark, patent, and design applications
- Any business bidding on a government e-procurement or e-auction portal
Individuals filing personal income-tax returns generally do not need one, because Aadhaar OTP e-verification is available. The requirement bites for entities and for anyone signing on an entity’s behalf.
What documents are required to apply for a DSC?
The document set depends on the verification route. Aadhaar-based eKYC needs very little; a PAN-based application needs identity and address proof that the Certifying Authority verifies against the source or during the video call.
- PAN card of the applicant
- Aadhaar, or an alternative identity proof such as passport, voter ID, or driving licence
- Recent photograph of the applicant
- Address proof — recent utility bill, bank statement, or the address on the identity document
- Mobile number and email address, both of which are verified by OTP
- For an organisation certificate: entity PAN, incorporation or registration certificate, and GST certificate
- For an organisation certificate: an authorisation letter from the entity naming the applicant
- For a foreign national: apostilled or notarised passport and address proof, and an attested application form
- For a DGFT certificate: the IEC and details of the authorised signatory on the DGFT profile
Names must match across PAN, Aadhaar, and the application. A middle name present on one document and absent on another is enough to fail organisation-level verification, and it is the most common reason a DSC application is sent back.
How to apply for a Digital Signature Certificate online?
- 1.Choose a Certifying Authority licensed by the Controller of Certifying Authorities
- 2.Select the certificate type — signing, encryption, or both — the holder type, and the validity term
- 3.Complete the online application with PAN, name, address, mobile, and email
- 4.Verify mobile and email by OTP
- 5.Complete identity verification by Aadhaar eKYC or, for a PAN-based application, upload the supporting documents
- 6.Record the mandatory video verification, reading the random text the CA displays on camera
- 7.For an organisation certificate, submit the authorisation letter and entity documents for attestation
- 8.Pay the certificate fee and the cost of the cryptographic token where you do not already hold one
- 9.Wait for CA approval after electronic and manual review of the video and documents
- 10.Download the certificate directly onto the USB crypto token using the CA’s download utility
- 11.Set a strong token password and test a signature on the portal you intend to file from
The video step is not a formality. The Controller’s identity verification guidelines require interactive video conducted by the Certifying Authority, with a photo match and a review for any sign of alteration in the recording. Reading the on-screen text in poor light or in a noisy room is the usual cause of a rejected verification.
Why does a DSC need a USB token?
Because the private key is not allowed to sit on your laptop. The Controller’s guidelines require Class 3 signing keys to be generated and stored inside a validated hardware cryptographic module — the USB token — which never exports the key. Signing happens on the token; the document goes in and a signature comes out.
That design has a hard consequence: a token cannot be copied or backed up. Lose the token or forget the token password beyond the retry limit and the certificate is gone, not recoverable. You buy a fresh certificate. Encryption certificates are the exception, because CAs run a key-escrow facility so encrypted data can still be recovered later.
Tokens need the manufacturer’s driver and middleware installed, and each government portal has its own signing utility — emSigner for GST, the MCA signing component, the income-tax portal’s DSC utility. Most "my DSC is not working" problems are driver, Java, or browser problems rather than certificate problems.
How much does a Digital Signature Certificate cost?
A DSC is a priced private-sector product, not a government fee, so quotes differ between Certifying Authorities and their partners. Cost scales with usage type and validity term, and a longer term is almost always cheaper per year.
| Component | Charged by | Indicative position |
|---|---|---|
| Class 3 signing certificate, 2-year | Certifying Authority | Lowest-cost common option for directors and partners |
| Class 3 combo (sign + encrypt) | Certifying Authority | Higher than signing-only; needed for e-tendering |
| Organisation certificate | Certifying Authority | Higher, because entity documents are attested |
| DGFT certificate | Certifying Authority | Priced separately from a standard Class 3 |
| USB crypto token | Token vendor | One-time; reusable for later certificates |
| Application handling and troubleshooting | CA / consultant | Scoped after a short discovery call |
Prices move and vary by CA and channel, so treat this as indicative and confirm the exact figure before ordering. One useful economy: the token is reusable, so a renewal is only the certificate cost if you still have the original token in working order.
How long does it take to get a DSC?
An Aadhaar eKYC individual application that clears video verification first time is typically issued within a few hours to a couple of working days. Organisation certificates take longer because entity documents and the authorisation letter go through attestation.
Foreign-national applications are the slow case. Notarisation or apostille abroad, courier time, and attestation review commonly add a week or more, which is worth planning for when a foreign director is on the critical path for an incorporation.
How long is a DSC valid and how do you renew it?
Certificates are issued for one, two, or three years. On expiry the certificate simply stops working — filings fail signature validation with no warning beyond the portal error, which is how most people discover the expiry on a due date.
- 1.Check the expiry date on the token utility well before your next filing deadline
- 2.Apply for a fresh certificate with the same CA or another licensed CA
- 3.Complete verification again — renewal is a fresh issuance, not an extension of the old certificate
- 4.Download the new certificate onto the existing token if it has capacity
- 5.Re-register the new certificate on every portal where the old one was registered
- 6.Update the signatory mapping on MCA V3, the income-tax portal, GST, EPFO, ESIC, and DGFT as applicable
- 7.Delete or retire the expired certificate from the token to avoid signing with the wrong one
The step people miss is re-registration. A valid new DSC that has not been mapped to your PAN or DIN on a portal will still be rejected there, and the error message rarely says so clearly.
How do you register a DSC on government portals?
- MCA V3 — associate the DSC to the user role and DIN or PAN before filing any form
- Income-tax portal — register the DSC against the PAN of the entity and of the authorised signatory
- GST portal — register the DSC of the authorised signatory and install the signing utility
- EPFO employer portal — register the authorised signatory’s DSC or e-sign for establishment actions
- ESIC employer portal — map the signatory before filing employer declarations
- DGFT portal — link the DSC to the IEC profile and the named authorised signatory
- ICEGATE — register the certificate for customs document filing
- e-procurement portals — enrol the signing and encryption certificates separately
Each portal keeps its own mapping, so a certificate registered on MCA is unknown to GST until you register it there too. Keep a simple record of which certificate is registered where, with its expiry date — it turns a scramble into a checklist.
What is the difference between a DSC and an eSign or Aadhaar e-sign?
A DSC is a certificate you hold on a token for a fixed term. eSign is an online service in which a licensed provider issues a single-use certificate after authenticating you through Aadhaar, signs the document, and discards the key. Both are legally valid electronic signatures.
The difference is where it is accepted and what it costs. eSign is convenient and needs no hardware, and several portals accept Aadhaar-based e-signing — the DGFT annual IEC update, for instance. MCA filings, e-tendering, and most entity-level statutory filings still require a token-held DSC, so a director cannot rely on eSign alone.
What are the common DSC problems and how are they fixed?
- Token not detected — install the correct manufacturer driver and middleware, then reconnect
- Signature fails on GST — the signing utility is not running or the browser is blocking it
- MCA form rejects the signature — the DSC is not associated with the user role or the DIN
- Name mismatch error — the certificate name differs from the portal record; a fresh DSC may be needed
- Certificate expired mid-filing — apply for a new one and re-register on every portal
- Token password locked after repeated wrong entries — the certificate is unrecoverable, so re-apply
- Two certificates on one token and the wrong one selected — retire the expired certificate
- Video verification rejected — re-record in good light, reading the random text clearly
A DSC should also be revoked, not merely abandoned, when a signatory resigns or a token is lost. Leaving a live certificate in circulation after a resignation of director leaves someone able to sign in the company’s name.
How should a business manage DSCs across its team?
- 1.Keep one register of every certificate: holder, type, CA, portals registered, expiry date
- 2.Set a calendar reminder 45 days before each expiry, not on the expiry date
- 3.Issue one token per person and never share tokens or passwords
- 4.Store tokens securely and treat loss as a security incident, not an inconvenience
- 5.Revoke and replace on resignation, role change, or suspected compromise
- 6.Align DSC renewals with the annual compliance calendar — DIR-3 KYC, annual filings, tax audits
- 7.Keep the appointment of director paperwork and the DSC record consistent
- 8.Order a replacement early where a foreign signatory is involved, because attestation adds weeks
Why choose Arjun Filings for digital signature certificate (DSC)?
Arjun Filings runs digital signature certificate (DSC) as a checklist-first engagement: a qualified CA or CS scopes the work, tells you exactly which documents are needed, and reviews every form before it is signed and submitted. You get a named specialist, a status update at each stage, and a compliance calendar for whatever comes next.
- End-to-end help for digital signature certificate (DSC)
- Department-ready document pack
- Application tracking updates
- Renewal calendar starter