Digital Signature Certificate (DSC Class-3)

In modern India's paperless corporate and governance infrastructure, physical ink signatures, wet-stamped affidavits, and manual document submissions have been permanently replaced by asymmetric cryptography.

Under Section 4 and Section 5 of the Information Technology Act, 2000 (IT Act), an electronic document authenticated by a valid Digital Signature Certificate (DSC) possesses the exact same legal validity, evidentiary enforceability, and binding statutory force as a physical handwritten signature witnessed on judicial stamp paper.

A Digital Signature is not a scanned image of your handwritten signature pasted onto a PDF. It is an advanced mathematical mechanism utilizing public-key infrastructure (PKI) governed by the Controller of Certifying Authorities (CCA) under the Ministry of Electronics and Information Technology (MeitY).

When you digitally sign an e-Form or tender document, a unique cryptographic hash is generated using a private key embedded inside a secure hardware microchip. If a single character, date, or decimal point in the signed document is altered post-signing, the mathematical hash breaks instantly, invalidating the signature. This guarantees three inviolable legal pillars: Authentication (verifying signer identity), Non-Repudiation (signer cannot deny signing), and Integrity (proving document was not tampered with).

Historically, the Certifying Authorities issued three classes of digital signatures:

• Class 1 DSC: Basic email-level verification with zero legal validity for statutory filings (long discontinued).

• Class 2 DSC: Identity verified against database records without video authentication (permanently decommissioned by CCA on January 1, 2021).

• Class 3 DSC (The Sovereign Gold Standard): Requires the highest level of identity assurance, incorporating mandatory video liveness verification and multi-factor biometric/OTP authentication.

Today, any business executive, company director, Chartered Accountant, or government contractor applying for a digital signature is issued a Class 3 DSC. Attempting to use an old Class 2 token on modern government portals results in instant authentication rejection.

When obtaining a Class 3 Digital Signature, selecting the correct cryptographic capability based on your intended usage is critical:

Holding an active Class 3 DSC is compulsory across India's premier regulatory and financial platforms:

Under strict security guidelines enforced by the CCA, a Class 3 Digital Signature CANNOT be downloaded onto a generic computer hard drive, mobile phone, or standard commercial pen drive.

It must be provisioned inside a specialized FIPS 140-2 Level 2 or Level 3 certified USB Hardware Cryptographic Token (such as ePass2003, ProxKey, WatchData, or mToken):

How Hardware Security Protects You:

1. Non-Exportable Private Key: The mathematical algorithm generates the private key directly inside the token's cryptographic smart chip. The private key can NEVER be copied, duplicated, or exported out of the physical device.

2. Brute-Force Attack Defense: The token is protected by a customizable User PIN. If an unauthorized individual attempts to guess the PIN and enters incorrect codes consecutively (typically 5 to 8 attempts), the token automatically locks down permanently, destroying the internal key to prevent identity theft.

3. Zero Virus Vulnerability: The cryptographic chip operates on an independent operating system immune to trojans and spyware.

Gone are the days of physically attesting paper passport photos, notarizing photocopies, and waiting 5 days for a courier. Today, VyapTax issues your Class 3 DSC in under 30 minutes via paperless digital eKYC:

The 4-Step Paperless Issuance Workflow:

1. Aadhaar / PAN eKYC Data Extraction: The applicant inputs their Aadhaar or PAN number, generating an encrypted XML paperless file authenticated via one-time password (OTP).

2. Demographic Validation: Name, date of birth, gender, and photograph are matched in real-time against UIDAI and Income Tax servers.

3. 30-Second Liveness Video Recording: The applicant records a 20-to-30 second video using their smartphone or webcam, holding their original PAN card and Aadhaar card, and clearly reciting a randomized 3-digit verification code displayed on screen.

4. Instant CA Approval & Token Burning: Once the Certifying Authority's automated video liveness algorithm approves the recording, the digital certificate is cryptographically burned onto your secure USB token.

Foreign investors, multinational executives, and non-resident directors serving on the boards of Indian subsidiaries or joint ventures must also hold an active Indian Class 3 DSC to sign MCA filings and tax returns.

Documentation Protocol for Foreign Citizens:

1. International Passport: Notarized and Apostilled copy of the valid foreign passport (or consular legalized by the Indian Embassy in non-Hague Convention countries).

2. Address Proof: Notarized and Apostilled driving license, bank statement, or government residence ID.

3. Global Video eKYC: Foreign directors complete a secure online video verification from anywhere in the world (USA, UK, Singapore, Dubai, Germany) using their international mobile number and passport.

VyapTax ships the programmed, encrypted USB token directly to overseas corporate offices via DHL Express, or provides secure remote signing infrastructure.

Even with an active DSC, users frequently encounter frustrating portal errors: 'Failed to establish connection to the server', 'Token not detected', or 'Certificate not found'. These errors stem from local computer driver configurations.

VyapTax's technical IT support resolves these issues instantly:

1. Token Driver Installation: Every USB token (ePass2003, ProxKey) requires its proprietary PKI driver software installed to enable Windows/Mac OS to communicate with the cryptographic chip.

2. The emSigner Utility: Portals like GST and MCA utilize specialized background gateway software (emSigner). The utility must be configured with administrative permissions and matched to the correct port (Port 8080/1585).

3. Registering DSC on Portal Profiles: Before signing documents, the digital certificate must be formally registered under your user profile on the portal (Services -> Register/Update DSC on GST or MCA).

Here are answers to the practical questions business executives and tender bidders ask our certification practice: