Certifying Authority Licensed DSC — New Delhi

Digital Signature Certificate (DSC) — Class 3 eToken

A Digital Signature Certificate (DSC) is an electronic equivalent of a physical signature — a legally recognised, cryptographically secure credential that verifies the identity of the signer and ensures that the signed document has not been tampered with. Under the Information Technology Act, 2000, a DSC issued by a licensed Certifying Authority (CA) is legally valid and equivalent to a handwritten signature for all purposes.

DSCs are mandatory for a wide range of government filings — MCA (company filings), GST, Income Tax, DGFT, Customs, e-Tendering, Patent & Trademark filings, and more. At Gupta Chandan & Associates, we issue Class 3 DSCs on eToken hardware — the only format currently accepted by government portals — for individuals, directors, partners, and authorised signatories across all entity types.

⚠ Important: With effect from 1st January 2021, only Class 3 DSC is issued in India. Class 1 and Class 2 certificates are discontinued. Additionally, DSC must now be stored on a hardware eToken — the earlier PFX file format is no longer accepted on government portals.
Class 3 DSC Sign DSC Encrypt DSC Sign & Encrypt eToken MCA Filing Income Tax GST e-Tender Customs 1 / 2 / 3 Year Validity
🖌

Sign DSC

For document signing & authentication

🔒

Encrypt DSC

For tender portals & confidential docs

📄

Sign & Encrypt

For government forms & applications

🔗

eToken Hardware

Mandatory from 1st January 2021

📅

1 / 2 / 3 Year

Choose validity as per your need

What is a Digital Signature Certificate?

A Digital Signature Certificate (DSC) is a secure digital key issued by a licensed Certifying Authority (CA) — authorised by the Controller of Certifying Authorities (CCA), Ministry of Electronics & Information Technology (MeitY), Government of India — that electronically authenticates the identity of the holder.

It is based on asymmetric cryptography (Public Key Infrastructure — PKI): the signer uses their private key (stored securely on an eToken) to create the digital signature, and anyone can verify it using the corresponding public key contained in the DSC. This provides two critical guarantees: authentication (the document was signed by the claimed person) and integrity (the document has not been altered since signing).

Under the Information Technology Act, 2000 and the IT (Amendment) Act, 2008, a valid digital signature has the same legal standing as a handwritten signature — making it admissible as evidence in courts and binding for all contractual and statutory purposes.

Key Properties of a DSC

🔐 Authentication

Confirms the identity of the signer — only the person holding the eToken with the private key can create the signature. The Certifying Authority has already verified the signer's identity before issuing the DSC.

📋 Integrity

Any alteration to the document after it has been digitally signed invalidates the signature — giving the recipient certainty that the document they received is identical to the one that was signed.

⛔ Non-Repudiation

The signer cannot later deny having signed the document — the DSC creates an irrefutable cryptographic record of the signature linked to the signer's verified identity.

🔒 Confidentiality (Encrypt DSC)

When used for encryption, a DSC ensures that only the intended recipient can decrypt and read the document — protecting sensitive information transmitted over networks or uploaded to portals.

eToken — The Only Valid Storage Format

❌ Discontinued (before Jan 2021)

PFX / Soft Token File

DSC was earlier issued as a password-protected PFX file stored on a computer. This was vulnerable to theft, copying, and unauthorised use — weakening the security of the digital signature. This format is no longer accepted on any government portal.

✓ Current Standard (from 1 Jan 2021)

Hardware eToken

DSC is now mandatorily stored on a USB hardware eToken (FIPS 140-2 Level 2 certified). The private key never leaves the token — it cannot be copied or exported. The token is protected by a PIN, ensuring that even if the token is lost, the DSC cannot be misused without the PIN.

How Digital Signing Works

01

Insert eToken & Enter PIN

The signer inserts the hardware eToken into a USB port and enters the token PIN to unlock access to the private key stored inside the token.

02

Document Hash is Created

The signing software creates a unique cryptographic hash (a fixed-length fingerprint) of the document content. Even a single character change in the document produces a completely different hash.

03

Hash is Signed with Private Key

The private key inside the eToken encrypts the document hash — creating the digital signature. The private key never leaves the secure hardware token during this process.

04

Signature Appended to Document

The digital signature (encrypted hash) along with the signer's public certificate is embedded in the document — creating a signed file (PDF, XML, or portal submission).

05

Recipient Verifies Signature

The recipient (or government portal) uses the signer's public key to decrypt the hash, recalculates the hash of the received document, and confirms they match — verifying authenticity and integrity.

The eToken hardware is typically a small USB device similar in size to a pen drive — plugged into any computer for signing. It works across Windows, Mac, and Linux with the appropriate token driver software installed. We assist with driver setup and first-use configuration for all DSCs we issue.

Types of Digital Signature Certificate

All DSCs issued in India are now Class 3. Within Class 3, there are three functional types — each suited to a different use case. Choose based on what you need the DSC for:

Type 1

🖌 Sign DSC

A Sign DSC is used exclusively for digitally signing documents and online submissions. It authenticates the identity of the signer and guarantees that the document has not been altered after signing.

This is the most commonly used DSC type — suitable for the majority of government portal filings where a digital signature of an individual or authorised signatory is required.

  • Income Tax e-filing (ITR and audit reports)
  • MCA / ROC filings (company incorporation, annual returns)
  • GST registration and return signing
  • IEC / DGFT portal applications
  • Patent and trademark e-filing (IP India portal)
  • EPFO / ESIC digital filings
  • PDF document signing
  • LLP incorporation and annual filings
  • E-stamping and property registration
Most PopularFor Signing OnlyGovernment Portals
Type 2

🔒 Encrypt DSC

An Encrypt DSC is used exclusively for encrypting documents and data — ensuring that only the intended recipient can decrypt and access the content. It does not perform signing.

Commonly required on e-procurement and e-tender portals where bidders must encrypt their financial bids before upload — ensuring confidentiality of tender documents until the opening date.

  • Government e-tender and e-procurement portals (GeM, CPPP, state portals)
  • Encryption of confidential bid documents before upload
  • Sending classified or sensitive information securely
  • Legal documentation requiring encryption
  • E-commerce platforms with encrypted document exchange
  • Secure sharing of financial or personal data
Encryption Onlye-Tender PortalsConfidential Docs
Type 3 — Recommended

📄 Sign & Encrypt DSC

A Sign & Encrypt DSC combines the functionality of both Sign and Encrypt DSCs in a single certificate — making it the most versatile option for users who need to both authenticate their identity and maintain document confidentiality.

This is the recommended type for businesses and professionals who regularly use government portals and tender systems — it eliminates the need to maintain two separate DSCs.

  • All applications of Sign DSC (government portal filings)
  • All applications of Encrypt DSC (e-tendering, bid encryption)
  • Customs e-filing (ICEGATE) — requires both signing and encryption
  • Ministry of External Affairs (MEA) filings
  • SEBI / stock exchange filings
  • Ministry of Corporate Affairs — company and LLP filings
  • e-Bidding and e-auction portals
RecommendedSign + EncryptAll PortalsBest Value

Not sure which type you need? In most cases, the Sign & Encrypt DSC is the safest choice — it covers all use cases and avoids the need to obtain a separate DSC later. Contact us and we will confirm the exact DSC type required for your specific portal or filing. Ask us →

Class 3 DSC — The Only Valid Class from January 2021

With effect from 1st January 2021, the Controller of Certifying Authorities (CCA) discontinued issuance of Class 1 and Class 2 DSCs. All new DSCs issued in India are now Class 3 Digital Signature Certificates — the highest level of assurance — which require in-person or video-based identity verification before issuance.

⚠ If you hold an older Class 2 DSC that has not yet expired, it will continue to function until its expiry date. However, on renewal or fresh application, only Class 3 will be issued. All government portals that previously accepted Class 2 DSC now require Class 3.

Class 3 DSC — Portal-Wise Usage Reference

Portal / Use CaseDSC RequiredType RequiredWho Needs It
MCA / ROC — Company Filing✓ YesSignDirectors, signatories
MCA — Company Incorporation (SPICe+)✓ YesSignAll proposed directors
Income Tax e-Filing (ITR / Audit Report)✓ Yes (Companies & LLPs)SignDirectors, Partners, CAs
GST Registration & Returns✓ Companies & LLPsSignAuthorised signatory
DGFT / IEC Portal✓ Companies & LLPsSignAuthorised signatory
Customs e-Filing (ICEGATE)✓ YesSign & EncryptCHA, importers/exporters
e-Tendering (GeM, CPPP, State Portals)✓ YesSign & EncryptBidders, contractors
e-Auction / e-Bidding Portals✓ YesSign & EncryptBidders
IP India — Patent Filing✓ YesSignApplicant / Patent Agent
IP India — Trademark e-Filing✓ YesSignApplicant / TM Agent
EPFO Digital Filing✓ YesSignEmployer authorised signatory
LLP Incorporation & Annual Filing✓ YesSignDesignated Partners
SEBI / Stock Exchange Filings✓ YesSignCompliance officers
MEA & Apostille Applications✓ YesSignApplicant / CA
PDF Document Signing (General)✓ YesSignAny individual

Validity Periods — Choose What Suits You

📅 1 Year Validity

Suitable for first-time users or one-time filings. Lower upfront cost but requires renewal annually. Best for those testing whether they need a DSC regularly.

📅 2 Year Validity

The most popular option — balances cost and convenience. Ideal for professionals and businesses that use DSC regularly for government filings throughout the year.

📅 3 Year Validity — Best Value

Lowest annual cost. Recommended for companies, directors, and professionals who know they will need a DSC on an ongoing basis. Reduces the administrative burden of frequent renewals.

A DSC cannot be extended or renewed after expiry — a fresh DSC must be obtained. We proactively remind clients before their DSC expiry and arrange the renewal in advance to prevent any filing disruption. Contact us for renewal →

How to Get a Class 3 DSC — Process & Documents

Obtaining a Class 3 DSC requires identity verification by the Certifying Authority (CA). The process involves document submission and either a video-based verification (VKYC) or Aadhaar OTP-based verification — making the process quick and fully online in most cases.

Step-by-Step Process

01

Select DSC Type & Validity

Choose between Sign, Encrypt, or Sign & Encrypt, and select the validity period — 1 year, 2 years, or 3 years. Confirm the entity type (individual, company director, partner, etc.).

02

Submit Documents & Application Form

Fill the DSC application form with personal / entity details. Submit identity proof, address proof, and PAN — either physically or by uploading scanned copies depending on the Certifying Authority's process.

03

Identity Verification — VKYC or Aadhaar OTP

Class 3 DSC requires verified identity. Verification is done via: (a) Aadhaar OTP — applicant's Aadhaar is linked to mobile and OTP is entered during the online process; or (b) Video KYC (VKYC) — a short video call with the Certifying Authority's RA where the applicant shows their original ID documents.

04

Payment

DSC fee is paid online. The fee varies by type (Sign / Encrypt / Sign & Encrypt) and validity (1/2/3 years). Fee includes the eToken hardware, DSC certificate, and our professional charges. Contact us for current pricing.

05

DSC Issued on eToken

On successful verification, the Certifying Authority issues the DSC and it is loaded onto the eToken hardware. The eToken along with its PIN mailer is delivered to the applicant's registered address or collected in person from our Delhi office.

06

Driver Installation & Setup

We assist with installing the eToken driver software on your computer (Windows / Mac) and configuring the DSC for use on the required portals — including DGFT, MCA, Income Tax, and e-Tender portals.

Documents Required

For Individual / Proprietor
  • PAN Card (mandatory)
  • Aadhaar Card (for OTP verification) or Voter ID / Passport / Driving Licence
  • Proof of address (if different from Aadhaar)
  • Passport-size photograph
  • Mobile number linked to Aadhaar (for OTP)
  • Email ID
For Company / LLP Director / Partner
  • PAN Card of the individual applicant (director / partner)
  • Aadhaar Card of the individual (for OTP) or valid photo ID
  • Proof of address of the individual
  • Certificate of Incorporation / LLP Agreement
  • Board Resolution authorising the signatory (for companies)
  • Passport-size photograph
  • Mobile and email ID
For Foreign Nationals / NRIs
  • Passport (mandatory — primary ID document)
  • Visa / OCI Card (as applicable)
  • Overseas address proof
  • PAN Card (if applicable)
  • Apostilled or embassy-attested copies may be required
  • Passport-size photograph
  • Active mobile number for OTP

Turnaround Time

Aadhaar OTP Route

Same Day

DSC issued on the day of application upon successful Aadhaar OTP verification

Video KYC Route

1–2 Days

DSC issued within 1–2 working days after the video verification call is completed

Physical Document Route

2–3 Days

For applicants not using Aadhaar OTP — processing takes 2–3 working days after document submission

eToken Delivery

2–5 Days

Courier delivery of the physical eToken to your registered address after DSC issuance

If you need the DSC urgently — for a filing deadline or immediate e-tender submission — let us know and we will prioritise same-day processing and arrange for express eToken delivery or in-person collection. Contact us for urgent DSC →

Frequently Asked Questions

Common questions about Digital Signature Certificates, eTokens, and DSC usage:

Since 1st January 2021, only Class 3 DSCs are issued in India. If you hold a Class 2 DSC that has not yet expired, it will continue to work on portals that accept it until its expiry. However, upon renewal or if you need a new DSC, only Class 3 will be issued. Many portals have already stopped accepting Class 2 DSCs. We recommend upgrading to Class 3 at the time of your next renewal.
Yes — since the DSC is stored on the hardware eToken, you can use it on any computer by inserting the USB eToken into that machine. You will need to install the eToken driver software on each computer where you intend to use the DSC. The driver software is freely downloadable and we assist with installation. The eToken PIN ensures security even if used on multiple devices.
If the eToken is lost or damaged, the DSC certificate stored on it cannot be recovered or transferred — since the private key exists only inside the hardware token and cannot be exported by design. You will need to apply for a fresh DSC. We recommend keeping the eToken in a safe place and noting down the PIN securely. If lost, report the loss to the Certifying Authority to revoke the certificate and prevent misuse.
Yes — most eTokens have sufficient storage capacity to hold multiple DSC certificates. For example, you may store both a Sign DSC and an Encrypt DSC on the same token, or DSCs of different individuals (if the token is managed by an organisation). Each certificate is password-protected by the token PIN. We can configure multi-certificate eTokens on request.
An electronic signature is a broad term that includes any electronic method of indicating consent or authorship — such as typing your name, clicking "I agree", or inserting a scanned signature image in a document. A digital signature is a specific type of electronic signature that uses Public Key Infrastructure (PKI) cryptography and a DSC issued by a licensed Certifying Authority. Digital signatures are legally stronger, tamper-evident, and provide full non-repudiation — making them mandatory for government filings. Not all electronic signatures are digital signatures, but all digital signatures are electronic signatures.
A DSC cannot be renewed — there is no extension of an existing certificate. When your DSC expires, you must apply for a fresh Class 3 DSC with a new validity period. The process is the same as a new application. We recommend initiating the process at least 2–3 weeks before your DSC expires to avoid any gap in filing capability. We proactively contact clients before expiry.
For companies and LLPs, DSC is mandatory for GST registration and return filing on the GST portal. For proprietorships, partnerships, and individuals, GST filings can be done using Aadhaar OTP-based e-signing (EVC) — a DSC is not mandatory in these cases. However, many professionals prefer to use a DSC for all filings due to the higher level of security and authentication it provides.
Yes — foreign nationals and NRIs can obtain an Indian Class 3 DSC using their Passport as the primary identity document. Since Aadhaar OTP verification is not available to foreign nationals, verification is done via the Video KYC (VKYC) route or physical document submission with apostilled copies. An Indian DSC is often required for NRI directors of Indian companies to sign MCA filings. We handle DSC applications for NRIs and foreign nationals regularly.
Most eTokens issued in India are compatible with Windows, Mac, and Linux — with appropriate driver software available for each platform. However, compatibility with specific government portals on non-Windows operating systems may vary — some older portals are optimised for Internet Explorer / Windows. We advise on platform compatibility for your specific use case and assist with driver installation on Mac and Linux systems where supported.

Have a specific question about DSC for your portal or filing? Contact us — we respond within one business day.

Why Get Your DSC from Gupta Chandan & Associates?

We are a New Delhi-based Chartered Accountancy firm that issues Class 3 DSCs as an authorised Registration Authority (RA) — providing fast, hassle-free, fully guided DSC issuance for individuals, directors, partners, and organisations.

⚡

Same-Day Issuance

For applicants using Aadhaar OTP verification, DSC can be issued on the same day. We process applications immediately upon receiving complete documents.

🔒

eToken Included

The FIPS-certified hardware eToken is included — you receive a complete, ready-to-use DSC kit. No need to separately purchase or manage the token hardware.

🛠

Setup & Configuration Support

We assist with eToken driver installation, portal configuration, and first signing — ensuring your DSC works on all required government portals from day one.

📅

Renewal Reminders

We track DSC expiry dates and proactively remind clients before expiry — so you are never caught with an expired DSC on a critical filing day.

🌎

NRI & Foreign Nationals

We handle DSC applications for NRI directors of Indian companies and foreign nationals — including VKYC coordination and apostille document guidance.

💳

Transparent Pricing

Clear pricing based on DSC type and validity — no hidden charges. Contact us for a quote and we will confirm the exact fee before you proceed.

Get Your Class 3 DSC — Fast & Hassle-Free

Whether you need a DSC for MCA filings, GST, Income Tax, e-Tendering, Customs, or any other government portal — we issue and configure your Class 3 eToken DSC quickly. Contact us today.