Documents Required for Digital Signature Certificate in India
A Digital Signature Certificate (DSC) is the foundational key that allows your business to engage with India's most critical governmental and corporate portals electronically. This Class 3 DSC enables seamless e-filings for income tax, GST, Ministry of Corporate Affairs (MCA) ROC forms, and crucial export compliance through DGFT and the ICEGATE customs platform. Obtaining this certificate correctly is essential because it legally validates every document you submit online under the Information Technology Act, ensuring that your company's transactions are recognized as authentic and legally binding by regulatory bodies and banks. The process is largely paperless today, with most licensed certifying authorities offering video-based identity verification instead of an in-person biometric visit, though timelines still hinge on how quickly directors complete e-KYC and Aadhaar-based verification. We simplify the entire process end to end, making sure your digital identity is robust for both domestic and international filing needs.
Before you start
- Valid PAN Card of all directors/partners/authorized signatories (mandatory, name must match exactly with company records)
- Aadhaar-linked mobile number for OTP-based e-KYC or Aadhaar eSign verification
- Address proof such as Aadhaar, passport, voter ID, or utility bill not older than 2-3 months (check the specific authority's current list)
- Company/LLP Registration Certificate (CIN/LLPIN) and Board Resolution or authorization letter if applying on behalf of a firm
- Passport-size photograph in the prescribed format (some authorities auto-capture this during video verification)
- Active email ID and mobile number registered in the applicant's own name for OTP and link-based verification
- GST registration certificate if the DSC will be used for GST return filing or e-way bill generation
- For foreign nationals or NRIs: attested passport copy, visa/OCI card, and apostilled address proof where applicable
Step-by-step
Select the DSC Authority and Class
Choose a Controller of Certifying Authorities (CCA)-licensed issuer such as eMudhra, Capricorn, or Protean (formerly NSDL e-Gov) for MCA and DGFT filings. Confirm you are requesting a Class 3 certificate — this is the only class currently issued for organisational and high-security use, since Class 2 certificates were phased out by CCA guidelines a few years ago.
- For company/LLP filings: Class 3 Organisation or Individual signing certificate
- For DGFT/ICEGATE (import-export): Class 3 with organisation encryption where required
- Validity is typically offered in 1-, 2-, or 3-year terms depending on the issuer; longer validity reduces renewal friction but costs more upfront
Gather Identity Documents
Collect scanned copies of PAN cards and Aadhaar (front/back or the masked e-Aadhaar) for all designated signatories. Ensure the names, date of birth, and spellings on these documents match exactly with those registered in MCA/GST records — even minor mismatches (e.g., initials vs. full name) are a leading cause of rejection during KYC review.
Prepare Address Proof
Submit a recent Aadhaar, passport, voter ID, driving licence, or utility bill as address proof, dated within the window specified by the certifying authority (commonly 2-3 months for utility bills; identity documents like Aadhaar/passport are usually accepted regardless of issue date). This verifies residential address and is required before the video verification step is scheduled.
Complete Online Application and e-KYC
Visit the chosen authority's portal to create an application using your PAN and email. Fill in personal details, upload scanned documents, and select the Class 3 DSC option along with the required validity period.
Most applicants now complete identity proofing via one of two routes:
- Aadhaar-based eSign/OTP verification — fastest, fully online
- PAN-based video verification — a short recorded video call where you display your PAN/Aadhaar and read a random code shown on screen
Some authorities still offer an in-person biometric option at authorized enrollment centres for applicants who cannot complete video verification (e.g., connectivity issues or foreign nationals).
Complete Video/Biometric Verification
Schedule and complete the video verification slot, or visit an enrollment centre if biometric verification is required. The operator or automated system checks your live appearance against the submitted photograph and documents, and confirms the randomly generated verification code — this step typically takes under 10-15 minutes.
Payment and Certificate Issuance
Pay the applicable certifying authority fee for the selected validity period. Once KYC is approved (usually within 1-3 working days for video verification), the certificate is generated and either downloaded to a cryptographic USB token or issued for download to a compatible token you already own, depending on the authority's process.
Receive and Install the Token
If a new FIPS-compliant USB token is required, it is couriered within a few working days of KYC approval. Install the token driver software on your computer, download the DSC using the reference/application number provided, and set a PIN — the default PIN should be changed immediately for security.
Register the DSC on Relevant Portals
Log into the MCA V3 portal, the income tax e-filing portal, GST portal, and/or ICEGATE/DGFT as applicable, and register the DSC against the authorized signatory's profile. Each portal requires a separate registration step even though the underlying certificate is the same.
- MCA: Register DSC under 'My Profile' before filing any e-form
- Income Tax: Register under 'My Profile' > 'Register DSC'
- GST: Register under 'Register/Update DSC' in the dashboard
Verify With a Test Transaction
Before relying on the DSC for a live statutory filing, run a low-stakes test — such as digitally signing a draft document or a non-critical form — to confirm the token, driver, and browser plugin all work correctly together. Java or emSigner-based signing utilities are commonly required by government portals and should be tested in advance of a filing deadline.
Set Up Renewal Reminders
Note the certificate's expiry date (1, 2, or 3 years from issue depending on the term chosen) and set a calendar reminder 30-45 days before expiry. Renewal requires repeating KYC verification, so starting early avoids a lapse in signing capability during a filing window.
Common mistakes to avoid
- Submitting blurry or cropped scans of PAN/Aadhaar where text or photo cannot be read clearly.
- Using an address proof outside the authority's accepted validity window, leading to rejection at review.
- Mismatching the name, spelling, or date of birth on the DSC application with the authorized signatory details in MCA/GST records.
- Attempting video verification in poor lighting or with a weak internet connection, causing repeated failed attempts and delays.
- Applying for a Class 2 certificate out of habit — Class 2 has been discontinued for new issuance; only Class 3 is valid for MCA/GST/DGFT filings.
- Forgetting to register the newly issued DSC separately on each government portal (MCA, income tax, GST) before attempting to file.
- Losing or not backing up the token PIN, resulting in a costly and time-consuming certificate revocation and reissuance process.
- Leaving renewal until after expiry, which can block time-sensitive statutory filings like ROC annual returns or GST returns.
Frequently asked questions
Can I get a Class 3 DSC for myself personally, or must it be tied to a company?
Individuals can obtain a personal Class 3 DSC using their own PAN and Aadhaar, independent of any company. However, for company or LLP filings on the MCA portal, the certificate must be issued in the name of a director, partner, or other authorized signatory and that individual then uses their personal DSC to sign on the entity's behalf.
How long is an Indian DSC valid, and can I choose the term?
The CCA permits Class 3 DSCs to be issued for 1, 2, or 3 years, and certifying authorities typically offer all three terms. Choose the term based on how frequently you expect to file — a longer certificate reduces renewal overhead but costs more upfront. The certificate must be renewed before expiry to avoid an interruption in signing capability.
Is a biometric visit mandatory in 2026, or can I do everything online?
Most applicants can now complete KYC entirely online via Aadhaar-based eSign/OTP verification or a short video verification call, without visiting a physical enrollment centre. In-person biometric verification remains available as a fallback for applicants who cannot complete online verification, such as certain foreign nationals or those facing connectivity constraints — check your chosen authority's current process.
What happens if my token gets lost or the certificate is compromised?
You must immediately request revocation of the certificate through your certifying authority's portal or helpdesk to prevent misuse. You will then need to apply for a fresh DSC, repeating KYC verification, which typically incurs the standard issuance fee again since a lost token cannot simply be reissued with the same key pair.
Which DSC class is needed for GST registration and return filing?
GST portal filings — including registration, GSTR-1/3B returns, and e-way bill generation for companies and LLPs — require a Class 3 DSC issued by a CCA-licensed certifying authority. Proprietorships and individuals may alternatively use Aadhaar-based e-signature (EVC) for many GST actions instead of a DSC, where the portal permits it.
Can a foreign director based outside India obtain an Indian DSC?
Yes, foreign nationals and NRIs can obtain a Class 3 DSC, but the document requirements differ — typically an attested/apostilled passport copy, visa or OCI card, and address proof from the country of residence, often notarized by the Indian embassy or a local notary. Processing usually takes longer than for resident applicants due to additional verification steps.
Do I need a separate DSC for each portal (MCA, income tax, GST, DGFT)?
No — a single Class 3 DSC can be used across multiple government portals, but each portal requires you to separately register the certificate against your profile before it can be used to sign filings there. The underlying certificate and token remain the same.
What is the difference between a signing certificate and an encryption certificate?
A signing certificate authenticates and digitally signs documents (used for most MCA/GST/income tax filings), while an encryption certificate is used to encrypt data, most commonly required for DGFT/ICEGATE import-export filings. Some applicants need both, issued as a combined token.
Can I use the same DSC token on multiple computers?
Yes, since the DSC resides on a portable USB cryptographic token, you can use it on any computer where the token driver software is installed, simply by plugging in the token and entering your PIN. The certificate itself is not tied to a specific machine.
What if the DSC application is rejected during KYC review?
The certifying authority will typically specify the reason — commonly a document mismatch, unclear scan, or failed video verification — and allow you to resubmit corrected documents without starting a fresh application in most cases. Persistent mismatches (e.g., name spelling differences between PAN and Aadhaar) should be corrected at the source database first.
How much does a DSC cost in 2026?
Certifying authority fees vary by issuer, validity period, and certificate type (signing-only vs. signing plus encryption), and authorities periodically revise their pricing. Rather than quoting a fixed figure that may be outdated, confirm the current fee schedule directly with your chosen CCA-licensed authority or your service provider before applying.
Prefer we handle Digital Signature Certificate (DSC) – including DGFT DSC?
Our team in India & UAE completes every step above for clients daily — accurately and on time.