How to Get a Digital Signature Certificate
A Digital Signature Certificate (DSC) is the electronic equivalent of a physical signature, cryptographically binding your identity to a document so that any tampering after signing is detectable. In India, a Class-3 DSC is mandatory for filing documents on the MCA portal, income tax e-filing for companies and LLPs, GST enrolment and returns, DGFT applications, EPFO and ESIC filings, and participation in government e-tenders and e-auctions. It is issued only by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000 — DSCs from unlicensed vendors have no legal standing. Most applicants now complete the entire process online through Video-Based Identity Verification (VBID) or Aadhaar-based eKYC, with the physical USB token (if required) arriving by courier within a couple of days. Company directors, LLP designated partners, GST-registered proprietors, and authorised signatories of any entity that files electronically will all need one at some point.
Before you start
- Aadhaar Card with the linked mobile number active for OTP authentication
- PAN Card matching the name and details on Aadhaar
- Passport-sized photograph in the format specified by the chosen Certifying Authority
- Valid, personally accessible email address and mobile number for OTPs and token dispatch tracking
- A device with a working camera and stable internet connection for Video-Based Identity Verification (VBID)
- Organisational documents (Certificate of Incorporation, GST certificate, or authorisation letter) if applying for an Organizational DSC
- Payment method for the CA's application fee
- USB port availability if opting for a hardware token rather than a downloadable software DSC
Step-by-step
Choose a Licensed Certifying Authority
Select a CCA-licensed CA such as eMudhra, Sify, Protean eGov Technologies (the CA formerly operating as NSDL e-Governance Infrastructure Limited, rebranded in 2023), Capricorn, or another empanelled provider. Compare application fees, token cost, turnaround time, and whether they offer fully paperless VBID or require a physical token courier.
- Check the CA is currently listed on the CCA's website as licensed — licenses occasionally lapse or transfer
- Confirm they support the specific portal you need the DSC for (MCA, GST, DGFT, e-tender platforms sometimes have empanelment lists)
Select DSC Class, Type, and Validity
For MCA, GST, income tax, and most e-tender filings, choose a Class-3 DSC (Class-2 was phased out by CCA guidelines some years ago and is no longer issued for most purposes). Decide between Individual (personal filings, director e-filing) and Organizational (entity-level signing authority) type. Validity is available in 1-year or 2-year terms — a 2-year certificate costs a little more upfront but halves the renewal administrative burden.
Complete the Online Application Form
Fill in the CA's online application with your legal name (as per PAN/Aadhaar), address, email, and mobile number. Upload your PAN and Aadhaar (or accept Aadhaar e-KYC consent) along with the photograph. Double-check spelling against your PAN card exactly — mismatches are the single most common cause of application rejection.
Complete Identity Verification (VBID or eKYC)
Most CAs now offer Video-Based Identity Verification: a short live video call where you display your original Aadhaar and PAN to the camera and answer a couple of verification questions. Alternatively, Aadhaar OTP-based eKYC lets you skip the video call entirely for a fully self-service application. Keep both original documents on hand, ensure good lighting, and complete this step in one sitting — abandoned sessions sometimes require restarting the KYC.
Pay the DSC Fee
Pay online via the CA's payment gateway. Typical Class-3 individual DSC fees run roughly ₹1,500–₹3,000 for a 2-year validity, though exact pricing varies by CA and token requirement — confirm the current fee schedule directly with the provider before paying. A confirmation email with an order reference is issued once payment clears.
Receive and Set Up the DSC
For hardware-token DSCs, the CA courier-ships a USB cryptographic token to your registered address, typically within 1–2 working days after KYC approval. For software-based or cloud DSCs (increasingly common with eKYC applications), you instead receive a download link and activation code by email. Either way, install the CA's token driver or signing utility before first use.
Set a Strong Token PIN
On first use, set a token PIN of your choosing. Choose something memorable but not guessable, and record it somewhere secure. Most tokens lock permanently after 5–10 failed PIN attempts, forcing a costly replacement rather than a simple reset.
Register the DSC on the MCA Portal
Log in to the MCA portal and locate the DSC registration option under your director/user profile (the exact menu label has shifted between MCA21 versions, so look for wording such as 'Register DSC' or 'Associate DSC'), plug in the token (or authenticate the software DSC), and complete the registration. This step must be redone whenever you renew or replace your DSC, since the portal binds to the specific certificate serial number.
Register on Other Relevant Portals
Separately register the same DSC on the Income Tax e-filing portal (Profile → Register DSC) if you sign company/LLP tax returns, on the GST portal if you sign GST returns digitally, and on DGFT or specific e-tender portals as your filings require. Each portal requires its own registration step even though the underlying certificate is the same.
Test a Sign-Off Before Relying on It
Before a filing deadline, do a low-stakes test signature (e.g., a draft form save or a minor filing) to confirm the token driver, browser plugin, and portal integration all work correctly on your machine. Browser and Java plugin compatibility issues are common and best discovered outside of deadline pressure.
Common mistakes to avoid
- Assuming a Class-2 DSC will work — Class-2 certificates are no longer issued by most CAs, and MCA and other government portals require Class-3 exclusively.
- Letting name spelling on the application differ even slightly from PAN or Aadhaar — this is the most frequent cause of KYC rejection and re-submission delays.
- Forgetting the token PIN or entering it wrong repeatedly — tokens typically lock permanently after 5–10 failed attempts and must be replaced at full cost.
- Not renewing before expiry — an expired DSC causes immediate, hard failure of electronic filings with no grace period; renew at least 30 days ahead of the expiry date.
- Sharing the token or PIN with staff or colleagues — a DSC is legally equivalent to your personal signature under the IT Act, and sharing it makes you liable for anything signed with it.
- Buying from an unlicensed or reseller-only vendor — always verify the issuing CA appears on the current CCA-licensed list before paying.
- Skipping the portal-specific registration step — installing the token alone does not make it usable on MCA, GST, or DGFT; each portal needs its own DSC registration.
- Leaving DSC setup until the filing deadline — VBID slots, courier delivery, and portal registration can each take a day or more, so first-time applicants should start at least a week ahead.
Frequently asked questions
Can I get a DSC if I am an NRI?
Yes. NRIs can obtain a DSC using a valid passport and overseas address proof. Some CAs support international video KYC directly; others require an apostille-attested or notarised identity document couriered or scanned in, so check the specific CA's NRI process before applying.
What is the difference between a signing DSC and an encryption DSC?
A Signing DSC authenticates your identity on a digital document and detects tampering. An Encryption DSC encrypts a document so only the intended recipient can decrypt and read it. Most regulatory filings (MCA, income tax, GST) need only a Signing DSC; a few procurement or tender portals ask for a combo certificate that bundles both.
Do I need a separate DSC for each company I am a director of?
No. A single individual DSC issued in your name can be linked to your DIN and used to sign filings across every company or LLP where you hold a directorship or designated partnership, as long as it is correctly registered against each entity's filing on the relevant portal.
Can the same token be used on multiple computers?
Yes. The USB token can be plugged into any computer that has the CA's token driver installed, since the private key stays on the hardware and never leaves it. You do need to reinstall the driver software on each new machine.
How long does it take to get a DSC?
With Aadhaar eKYC or VBID, approval can happen within hours to a day. If a hardware token needs to be couriered, add 1–2 working days for delivery, so budget roughly 2–3 days end-to-end for a first-time application; delays are usually caused by document mismatches, not the issuance process itself.
What happens if my DSC token is lost or stolen?
Report it to the issuing CA immediately so the certificate can be revoked — a revoked DSC cannot be used to sign anything. You will then need to apply for a fresh DSC, which typically requires the full KYC process again since the original hardware and key pair cannot be recovered.
Is a DSC the same as an e-signature or Aadhaar eSign?
No. Aadhaar eSign is a one-time, OTP-based signing method suitable for some simpler filings, while a DSC is a persistent, hardware- or software-backed cryptographic certificate valid for one or two years. Many statutory filings, especially for companies and LLPs, specifically require a DSC and will not accept Aadhaar eSign.
Can a proprietorship or partnership firm get an Organizational DSC?
Organizational DSCs are generally issued to registered entities (companies, LLPs, government bodies) with an authorised signatory. Sole proprietors and partners typically use an Individual DSC in their own name for the firm's filings, unless the specific CA and portal support a firm-level organizational certificate.
Do I need a DSC for GST registration or only for GST returns?
For companies and LLPs, DSC is mandatory both at GST registration and for filing subsequent GST returns. Proprietorships and individuals can typically use Aadhaar-based e-verification (EVC) instead of a DSC for many GST filings, though a DSC remains an accepted alternative.
What should I do as my DSC nears expiry?
Most CAs allow renewal starting roughly 30–60 days before expiry using a simplified KYC process if your details are unchanged. Renewing early avoids a gap where you cannot file anything electronically, since an expired DSC is rejected outright by every portal with no short grace period.
Can I use a DSC issued for MCA filings on the income tax or GST portal too?
Yes, the underlying certificate is the same regardless of which portal issued the initial use case for it. You do, however, need to separately register that same DSC on each portal (MCA, income tax e-filing, GST) before it will be accepted there.
Prefer we handle Digital Signature Certificate (DSC) – including DGFT DSC?
Our team in India & UAE completes every step above for clients daily — accurately and on time.