Digital Signature Certificate

Digital Signature Certificate: complete guide

Introduction

A Digital Signature Certificate, or DSC, is the electronic equivalent of a physical signature and identity proof. It is a secure digital key, usually stored on a small USB token, that is issued by a licensed Certifying Authority under the Information Technology Act, 2000. When you sign an electronic document or online form with a DSC, it confirms who signed it and that the document has not been changed after signing. Under Indian law, a document signed with a valid DSC is legally recognised in the same way as a document signed by hand.

DSCs are now part of everyday business in India. Directors and designated partners sign company and LLP filings with a DSC. Companies, LLPs and certain other taxpayers verify GST and income tax filings with a DSC. Businesses use DSCs to bid in government e-tenders, to file trademark and patent applications, to apply for import-export codes, to sign invoices and contracts electronically, and to access various government portals. Many professionals, such as chartered accountants, company secretaries and lawyers, also need a DSC to certify forms and sign documents for their clients.

The Certifying Authorities that issue DSCs are licensed and supervised by the Controller of Certifying Authorities. Since 2021, the older Class 2 certificates have been discontinued, and Class 3 certificates are now the standard for individuals and organisations. The process of obtaining a DSC involves identity verification, which is now done mostly online through Aadhaar-based authentication, PAN-based verification and a short video recording.

Our team helps you choose the right type of DSC, completes the application with the Certifying Authority, guides you through verification, and makes sure your DSC is installed and working on your computer. This page explains who needs a DSC, the types available, the process, documents, timelines, our fee and how to use and renew your DSC.

Who Needs It

A DSC is required or useful for:

• Directors of companies and designated partners of LLPs, who must sign incorporation forms, annual filings and event-based filings electronically.
• Founders incorporating a company or LLP, since every proposed director or designated partner must sign the incorporation documents with a DSC.
• Authorised signatories for GST, especially for companies and LLPs, which must sign GST registration and returns using a DSC.
• Taxpayers whose accounts are audited, and companies, which verify income tax returns and audit reports using a DSC.
• Businesses bidding in e-tenders, which typically require both a signing and an encryption certificate.
• Importers and exporters, for applications and filings with the foreign trade authorities.
• Trademark and patent applicants and their agents, for filing applications and responses.
• Chartered accountants, company secretaries, cost accountants and advocates, who certify forms, audit reports and filings.
• Employees authorised to sign on behalf of an organisation, such as finance managers and compliance officers.
• Individuals who want to sign documents electronically, such as agreements, forms or applications on government systems.
• Foreign nationals who are directors in Indian companies, who can obtain a DSC through a separate verification process.

Key Benefits

• Legal validity. Documents signed with a valid DSC are legally recognised under the Information Technology Act.
• Security. A DSC uses encryption to confirm the identity of the signer and protect the document from tampering.
• Saves time and travel. You can sign and file documents online from anywhere, without visiting offices or couriering papers.
• Mandatory for many filings. Company, LLP, GST and many tax filings cannot be completed without a DSC.
• Access to e-tenders. A DSC with signing and encryption functions allows you to participate in government and corporate e-procurement.
• Multiple uses. One DSC can be used across different government systems and for signing electronic documents.
• Reduced paperwork. Electronic signing reduces printing, storage and courier costs.
• Easy renewal. DSCs can be renewed online before expiry.
• Audit trail. Each signature carries the signer's identity and the time of signing, creating a clear record of who approved what and when, which helps in internal controls and in any later dispute.

Understanding the types of DSC. DSCs vary by class, by use and by holder. Class 3 is the current standard, offering a high level of identity assurance, and is accepted on all major government systems. By use, a DSC can be a signing certificate, used to sign documents and forms; an encryption certificate, used to encrypt documents so that only the intended recipient can read them; or a combined signing and encryption certificate, which is often required for e-tenders. By holder, a DSC can be issued to an individual in their personal capacity, or to an individual as an authorised signatory of an organisation, where the certificate shows both the person's and the organisation's name. There are also special certificates for foreign nationals and for specific systems such as foreign trade filings. Choosing the wrong type can mean that the DSC is not accepted where you need it, which is why we confirm your purpose before applying.

How a DSC is stored and used. A DSC is stored on a secure USB token that is protected by a PIN. When you sign a document or form, you insert the token into your computer, enter the PIN, and the signature is applied. The private key never leaves the token, which is what makes the signature secure. The token must be kept safe, the PIN must not be shared, and if the token is lost, the certificate should be revoked. Some government systems also need a small signing utility or browser extension installed on your computer, which we help you set up.

Eligibility and Legal Requirements

• Identity verification. The applicant must complete identity verification as required by the Certifying Authority, which can include Aadhaar-based eKYC, PAN-based verification, document-based verification and a video recording.
• PAN. A PAN is required for most individual and organisational DSCs. Foreign nationals use passport-based verification.
• Active mobile and email. The applicant must have a working mobile number and email address, which are verified during the process.
• Organisation documents. For an organisational DSC, documents showing the organisation's existence and the applicant's authority to sign are required.
• Physical token. The DSC must be stored on a compliant cryptographic USB token.
• Validity. DSCs are issued for a validity period, typically one, two or three years, after which they must be renewed.
• Personal use only. The DSC holder must keep the token and PIN secure and must not allow anyone else to use it. Misuse can have legal consequences for the holder.

The guidelines for issuing DSCs are set by the Controller of Certifying Authorities and are updated from time to time. We follow the current guidelines at the time of application.

Step-by-Step Guide

1. Consultation. We confirm what you need the DSC for, such as company filings, GST, income tax, e-tenders or trademark filings, and recommend the right type and validity.
2. Choosing the type. We select the class, the use (signing, encryption or both), the holder type (individual or organisation) and the validity period.
3. Application. We create the application with the Certifying Authority using your details.
4. Identity verification. You complete Aadhaar eKYC or PAN-based verification online. Where document-based verification is used, we upload the required documents.
5. Mobile and email verification. You verify your mobile number and email address through one-time passwords.
6. Video verification. You record a short video following the on-screen instructions, usually by showing your face and reading out a displayed code.
7. Approval by the Certifying Authority. The Certifying Authority reviews the application and verification and approves the certificate.
8. Token dispatch or setup. If you need a new USB token, it is dispatched to you. If you already have a compatible token, we guide you on using it.
9. Download and installation. The certificate is downloaded onto your token, and we help you install the token driver and any signing utilities on your computer.
10. Testing. We help you check that the DSC works on the system you need it for, such as registering it on the company, GST or income tax system.

Documents Checklist

For an individual DSC:

• PAN card
• Aadhaar card linked to an active mobile number, for eKYC
• Passport-size photograph
• Email address and mobile number

For an organisational DSC, in addition:

• PAN of the organisation
• Certificate of incorporation, partnership deed or registration certificate of the organisation
• Authorisation letter or board resolution authorising the applicant
• Identity proof of the authorised signatory
• GST certificate or other proof of organisation address, where required

For a foreign national:

• Passport
• Address proof from the country of residence
• Visa or residence permit, where applicable
• Documents attested, apostilled or notarised as required by the Certifying Authority

How Long It Takes

• Application and verification: usually completed on the same day, once you complete eKYC and video verification.
• Approval: typically within a few hours to one working day after verification.
• Token delivery: if a new token is needed, delivery time depends on your location, usually one to three working days.
• Installation and setup: usually completed in a short guided session.

Foreign national DSCs take longer because of document attestation and additional verification. If you need the DSC urgently, for example for a filing deadline, let us know so we can prioritise your application.

Pricing

Our professional fee for Digital Signature Certificate is ₹ 1,299.

This covers:

• Consultation on the right type of DSC
• Application with a licensed Certifying Authority
• Guidance through eKYC and video verification
• Download of the certificate
• Help with installation and setup on your computer
• Support registering the DSC on the system you need

Organisational, combined signing and encryption, foreign national and longer-validity certificates may be quoted differently. The cost of the USB token, if a new one is needed, is quoted separately.

Common Mistakes to Avoid

• Choosing the wrong type. A signing-only DSC may not work for e-tenders that need encryption, and an individual DSC may not be accepted where an organisational DSC is required.
• Mismatched name. The name on your DSC must match your PAN. Mismatches cause rejection when registering the DSC on government systems.
• Letting the DSC expire before a filing. An expired DSC cannot be used to sign. Renew before expiry, especially near filing deadlines.
• Sharing the token and PIN. The DSC holder is responsible for every document signed with it. Never hand over your token and PIN to someone else.
• Not registering the DSC on the relevant system. Many systems require you to register or associate your DSC before you can sign.
• Losing the token without revoking. If your token is lost or stolen, request revocation immediately.
• Ignoring driver and utility updates. Signing may fail if the token driver or signing utility on your computer is outdated.

What Happens After

• Register your DSC on the systems where you will use it, such as company filings, GST or income tax.
• Keep your token safe and do not share your PIN.
• Note the expiry date and plan renewal in advance.
• Update registrations on government systems when you renew your DSC.
• Revoke the DSC if the token is lost, if you leave an organisation for which an organisational DSC was issued, or if your details change.
• Keep the token driver updated on your computer.
• Use a secure computer for signing, with up-to-date security software, especially when signing important filings or financial documents.

We can remind you before your DSC expires and handle the renewal for you.

FAQs

What is a Class 3 DSC?

Class 3 is the current standard for DSCs in India, offering a high level of identity verification. Class 2 certificates have been discontinued.

How long is a DSC valid?

DSCs are usually issued for one, two or three years. You choose the validity at the time of application.

Can I use one DSC for company filings, GST and income tax?

Yes. A Class 3 individual signing DSC can generally be used across these systems, provided it is registered on each of them.

Do I need a separate DSC for e-tenders?

Many e-tender systems require both signing and encryption functions. A combined certificate covers both.

Can a foreign national get a DSC?

Yes. Foreign nationals can obtain a DSC through a separate process that involves passport-based verification and attested documents.

What happens if I lose my DSC token?

You should request revocation immediately so that no one can misuse it, and then apply for a new DSC.

Can I use my existing USB token for a new DSC?

In many cases, yes, if the token is compatible. We will check and guide you.

Is a DSC legally valid?

Yes. Documents signed with a valid DSC are legally recognised under the Information Technology Act, 2000.

Can someone else sign using my DSC?

No. The DSC is personal to the holder. Allowing someone else to use it can expose you to legal consequences for documents they sign.

Can I renew my DSC instead of applying for a new one?

DSC renewal generally follows a process similar to a fresh application, with verification. We can handle renewal for you before expiry.

Do I need a DSC to register a company?

Yes. Every proposed director and subscriber needs a valid DSC to sign the incorporation forms.

Can I use a DSC on a mobile phone?

USB token-based DSCs are designed to be used on a computer. Some systems also offer other forms of electronic signing, such as Aadhaar-based signing, for certain documents, but these are different from a token-based DSC and are not accepted everywhere.

What if my name or details change after the DSC is issued?

If your name changes, or if you move to a different organisation for which an organisational DSC was issued, the existing certificate should be revoked and a new one obtained with the correct details.

Can I get a DSC without Aadhaar?

Yes. Where Aadhaar-based eKYC is not possible, document-based or PAN-based verification can be used, subject to the Certifying Authority's process. This may take slightly longer.

Related Business Setup services

• Dubai Incorporation
• FSSAI Registration Online
• Hallmark Registration
• Hong Kong Incorporation