Digital Signature Certificate (DSC) Registration

By 2026, almost every interaction between a business and the Government of India is digitally signed. SPICe+ at incorporation, MGT-7 and AOC-4 at the year-end ROC filing window, every Income Tax Return signed by an authorised representative, GST registration and refund applications, IEC application and modification on DGFT, EPFO and ESIC employer-side returns, FEMA forms on the RBI's FIRMS portal, e-tender submissions on GeM and CPP — all of these run on a Class-3 Digital Signature Certificate (DSC) issued by a Certifying Authority licensed by the Controller of Certifying Authorities (CCA) under the IT Act 2000.

The DSC is not a piece of paper or a downloadable file. It is a cryptographic key pair, generated and stored on a FIPS 140-2 Level 2 USB token (ePass2003, mToken, ProxKey, WatchData), issued after a layered KYC sequence: PAN-based or Aadhaar e-KYC for residents, video KYC mandatory across most CAs, and apostilled / consularised KYC for foreign citizens. The CCA licenses five active CAs that the market mostly uses — eMudhra, Sify, Capricorn, NSDL e-Governance, and IDSign — each with slightly different evidence rules, application flows, turnaround times and pricing, but identical legal effect.

Class-2 DSCs were retired by CCA in early 2021. Today, only Class-3 DSCs are issued — for individuals (signing), organisations (corporate / authorised signatory), DGFT (export-import specific), and Document Encryption / Combo (where confidentiality is needed alongside signing). We run the entire DSC lifecycle for clients — issuance, renewal, revocation, USB token replacement, and use-case mapping across portals — so the business never loses a filing window because a signature key was missing or expired.

DSC Variants We Issue

• Class-3 Individual:: For directors, partners, proprietors, professionals and authorised signatories — used on MCA21, IT, GST, DGFT, EPFO, ESIC, FIRMS and e-tendering portals.

• Class-3 Organisation / Corporate:: Issued in the name of the entity with the authorised signatory's particulars — used where the signing role is institutional rather than personal.

• DGFT DSC:: A specific organisational DSC required to log in and sign on the DGFT IEC and FTP portals — IEC modification, EPCG / Advance Authorization applications, eBRC, RoDTEP and SCOMET filings.

• Document Encryption / Combo DSC:: For tendering and confidential contract workflows where bid documents must be both signed and encrypted before upload.

KYC Routes — PAN, Aadhaar e-KYC, Video KYC

PAN-Based KYC: Self-attested PAN, address proof, photograph; the application is approved on document verification. Standard route for entities and for individuals without Aadhaar linkage.

Aadhaar e-KYC: Aadhaar OTP or biometric authentication via UIDAI — fastest route for resident individuals; CA pulls demographic data directly from UIDAI under licensed e-KYC framework.

Video KYC: Mandatory at most CAs by 2026 — applicant joins a scheduled video call, presents original ID, confirms a live OTP, and signs in real-time. Bridges the gap where physical verification is not feasible and replaces in-person Authorised Verifier visits.

Foreign Citizens: Apostilled (Hague) or consularised (non-Hague) passport and address proof, with home-country notary attestation, plus video KYC — full workflow handled separately under our DSC for Foreign Citizens engagement.

Validity, Token & Renewal

Class-3 DSCs are issued with 1-year, 2-year, or 3-year validity. The 3-year option is the most cost-efficient for active directors and signatories. The DSC is loaded onto an FIPS-compliant USB token; without the token in the USB port, the signature cannot be applied. Renewal is done up to 7 days before expiry with a lighter KYC pack where the prior CA's records are intact.

Why DSC Issuance Stalls — and What We Pre-Empt

PAN name mismatch with bank / Aadhaar; mobile number not OTP-active; email bouncing; video KYC where applicant cannot present the original ID; photograph quality below CA threshold; address proof older than 3 months; corporate DSC where authorisation letter is unsigned. We pre-validate every input against the chosen CA's checklist before submission — first-pass approval rate above 95%.