Digital Signature Certificates (DSC) in India: What They Are, Who Needs One, and How to Get It

If you are starting a company in India, the first thing you'll be asked for, often before anything else, is a Digital Signature Certificate (DSC). It is small, inexpensive, and easy to overlook, and it is one of the most common reasons incorporation and filings get stuck.

This guide explains what a DSC is, who needs one, and how to get it right the first time.

What is a Digital Signature Certificate?

A DSC is a secure digital key issued by a licensed Certifying Authority (CA) that lets you sign electronic documents and forms with the same legal validity as a handwritten signature. Its legal basis is the Information Technology Act, 2000.

It is stored on a password-protected USB token, and it does three things:

• Authenticates that the person signing is who they claim to be
• Ensures integrity, so a signed document can't be altered without detection
• Provides non-repudiation, so the signer can't later deny having signed

Who needs a DSC?

Person

Why they need it

Proposed directors and subscribers

To sign incorporation forms such as SPICe+, AGILE-PRO and the eMoA/eAoA

Existing directors

For annual MCA filings, DIR-3 KYC, and board-approved forms

Authorised signatories

For GST returns, Income Tax e-filing, and e-tenders

Professionals (CA, CS, CMA)

To certify forms filed on behalf of clients

Importers and exporters

For DGFT and customs filings

If you are forming a private limited company, every proposed director and subscriber needs their own DSC. It cannot be shared or borrowed.

Which class of DSC do you need?

You will see three "classes" mentioned online, but in practice:

• Class 3 is the one you need for MCA (company law) filings, e-tenders, GST and most government portals. It requires stronger identity verification.
• Class 2 was widely used earlier, but the MCA now requires Class 3 for its filings.
• Signing only, or signing + encryption: for most filings, "signing" is enough. Encryption is needed mainly for e-tenders.

When in doubt, apply for a Class 3 signing DSC.

Documents required

Requirements vary slightly by Certifying Authority, but expect the following for an individual:

1. PAN card
2. Aadhaar (or another valid address proof)
3. Passport-size photograph
4. Active email ID and mobile number linked to the applicant
5. Video or in-person verification, or Aadhaar-based eKYC, depending on the CA

Foreign nationals applying as directors follow a different process. They typically need a passport, address proof, and attestation or apostille of the documents, which adds time. Start this early.

How to get a DSC, step by step

1. Choose a licensed Certifying Authority. Only CAs licensed by the Controller of Certifying Authorities (CCA) can issue valid DSCs.
2. Submit the application with your identity documents.
3. Complete verification through video KYC or Aadhaar eKYC.
4. Receive the USB token with your certificate loaded, or activate a cloud-based option if your CA offers one.
5. Install the driver and set your PIN, then register the DSC on the portal where you'll use it (for example, MCA).

Once documents are in order, the process can often be completed in about one to two working days.

Validity and cost

• Validity: typically 1, 2 or 3 years. A longer validity is usually cheaper per year.
• Cost: generally a few thousand rupees at most, including the USB token. Prices vary by CA and validity period.
• Renewal: DSCs expire, and an expired DSC blocks filings. Renew before the expiry date rather than after.

Common mistakes that cause delays

• Name mismatch. The name on the DSC must match the PAN and the details you'll use on the portal, character for character.
• Wrong email or mobile number. Verification messages and OTPs go to these, so use ones you can access.
• Applying for the wrong class. A Class 2 certificate won't work for MCA filings.
• Forgetting to register the DSC on the MCA portal after receiving it.
• Losing the token or forgetting the PIN. Keep the token safe. A lost token means revocation and a fresh application.

Keeping your DSC secure

Treat your DSC like a signed blank cheque:

• Never share your token or PIN, including with employees or consultants.
• If it is lost or compromised, contact your CA immediately to revoke it.
• Use the token only on trusted devices.

How we help

We handle DSC applications for directors and authorised signatories as part of company incorporation and ongoing compliance. That covers choosing the right class, preparing the documents, coordinating verification, and registering the DSC on the relevant portals, so it never becomes the bottleneck for your filing.

Need DSCs for your directors? Get in touch and we'll take care of it.

This article is for general information and isn't legal advice. Fees, procedures and requirements change, so please confirm current details with the Certifying Authority or a qualified professional.