CA India logo
Rabi Agrawal & AssociatesChartered AccountantsRaipur & Kalahandi (Odisha)
Class 3 Digital Signature Certificate (DSC) Issuance & USB Token Services in Raipur

Class 3 Digital Signature Certificate (DSC) Issuance & USB Token Services in Raipur

Practice Overview

Class 3 Digital Signature Certificate (DSC) Issuance & USB Token Services in Raipur— Overview & Compliance

Chartered Accountancy advisory and audit services in Raipur, Chhattisgarh & Kalahandi, Odisha. Partner-led verification ensuring full statutory compliance under applicable laws.

A Class 3 Digital Signature Certificate (DSC) is the highest level of cryptographic identity assurance mandated by the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology (MeitY), Government of India, under the Information Technology Act, 2000.

Following the deprecation of Class 2 certificates, Class 3 DSCs with dual-factor video verification have become mandatory for corporate directors, tax audit filers, government contractors, exporters, and business entities executing filings on the MCA V3 Portal, Income Tax E-Filing Portal, GST Portal, and Central/State E-Procurement Tenders.

At Rabi Agrawal & Associates, our Raipur Head Office provides paperless, same-day Class 3 DSC issuance, cryptographic USB token supply (HYP2003 / ePass2003), driver configuration, and portal PKI middleware setup for companies, LLPs, firms, and contractors across Chhattisgarh and Odisha.

Class 3 DSC Framework under Information Technology Act, 2000

Digital Signature Certificates carry legal recognition under Section 5 and Section 15 of the IT Act, 2000, making a digitally signed electronic document as legally binding as a handwritten physical signature. Modern Class 3 certificates utilize 2048-bit RSA encryption and SHA-256 hashing algorithms to ensure message integrity, non-repudiation, and sender authentication.

  • CCA Compliance: Issued strictly through licensed Certifying Authorities (CAs) including eMudhra, Capricorn, Pantagon, Vsign, and SignX.
  • Mandatory Video Verification: Verification requires a brief video recording by the applicant holding original identity documents and stating a unique OTP.
  • Paperless Issuance: Processed using Aadhaar Offline XML, PAN-based verification, or organizational document validation, eliminating physical paper submissions.
  • Hardware Token Mandate: Cryptographic private keys must reside inside an approved hardware USB token and cannot be exported or copied.

Class 3 DSC Variants: Signing vs Combo (Signing & Encryption)

Digital signatures are issued in distinct technical configurations tailored to specific statutory and commercial applications:

Class 3 Digital Signature Certificate Configuration Matrix

DSC Type / Variant: Class 3 Individual (Signing)

Cryptographic Component: Signing Only (2048-bit RSA)

Primary Portal & Statutory Usage: ROC MCA filings, Income Tax ITR & Tax Audit, GST returns, Provident Fund portal.

Target Audience / Filers: Company Directors, Partners, Proprietors, CAs, Taxpayers.

Hardware Token Required: FIPS 140-2 Level 2 USB Token (ePass2003 / HYP2003)

DSC Type / Variant: Class 3 Individual (Combo)

Cryptographic Component: Signing + Encryption

Primary Portal & Statutory Usage: E-Tendering (CPPP, GeM, CG e-Procurement), Railway Tenders, PWD/PHE bids.

Target Audience / Filers: Government Contractors, Bidders, Sole Proprietor Vendors.

Hardware Token Required: FIPS 140-2 Level 2 USB Token (Dual Certificate)

DSC Type / Variant: Class 3 Organization (Signing)

Cryptographic Component: Signing with Entity Name

Primary Portal & Statutory Usage: Corporate ROC filings, Foreign Remittance 15CA/15CB, Customs IceGate.

Target Audience / Filers: Authorized Signatories of Companies, LLPs, Trusts.

Hardware Token Required: FIPS 140-2 Level 2 USB Token

DSC Type / Variant: Class 3 Organization (Combo)

Cryptographic Component: Signing + Encryption with Entity Name

Primary Portal & Statutory Usage: High-value e-Procurement, Public Sector Tenders, Global Bidding, GeM Portal.

Target Audience / Filers: Corporate Vendors, EPC Contractors, Infrastructure Firms.

Hardware Token Required: FIPS 140-2 Level 2 Cryptographic USB Token

Key Portal Integration: MCA, Income Tax, GST & E-Procurement

Our CA practice ensures seamless registration and PKI driver configuration across all major government and regulatory portals:

  • ROC & Ministry of Corporate Affairs (MCA V3 Portal): Mandatory for director DIN KYC (Form DIR-3 KYC), company incorporation (SPICe+), annual return filing (Form AOC-4 & MGT-7), charge creation, and LLP Form 11 / Form 8 signatures.
  • Income Tax E-Filing Portal: Essential for signing Tax Audit Reports (Form 3CD), Transfer Pricing Reports (Form 3CEB), Form 15CA/15CB international remittance certificates, and corporate/LLP ITR filings.
  • Goods and Services Tax (GST) Portal: Required for corporate GST registration, authorized signatory verification, GSTR-1 / GSTR-3B return filing for companies and LLPs, and GST refund application signing.
  • Government E-Tendering & GeM Portals: Required for participating in Chhattisgarh e-Procurement (eproc.cgstate.gov.in), Central Public Procurement Portal (CPPP), Indian Railways (IREPS), PWD/PHE/REES tenders, and Government e-Marketplace (GeM) seller bids.
  • Directorate General of Foreign Trade (DGFT) & IceGate: Class 3 Organization DSCs configured for import-export filing, customs clearance, and EPCG / MEIS incentive claims.

Step-by-Step Issuance & Verification Workflow

We deliver rapid, paperless Class 3 DSC issuance at our Raipur office or remotely:

01
Identity & Document Selection: Verifying applicant PAN, Aadhaar, email address, mobile number, and organization authorization documents (Board Resolution & Certificate of Incorporation for entity DSCs).
02
Online Application Initiation: Registering the application on the Certifying Authority portal (eMudhra / Capricorn / Pantagon / Vsign).
03
Mobile OTP & Aadhaar Authentication: Executing instant Aadhaar e-KYC or PAN e-KYC authentication via automated OTP sent to the applicant's mobile.
04
Video Verification Recording: Assisting the applicant in completing a 30-second online video recording using smartphone or webcam.
05
Cryptographic Certificate Download: Downloading the verified Class 3 Signing and Encryption certificates directly onto a pre-formatted FIPS 140-2 cryptographic USB token.

Hardware USB Tokens & PKI Middleware Setup (HYP2003 / ePass2003)

Security regulations prohibit storing digital signatures directly on computers or standard flash drives. They must reside on secure cryptographic USB tokens:

  • FIPS 140-2 Level 2 Tokens: We supply genuine, tamper-evident cryptographic tokens including HYP2003 (Auto-run), ePass2003, and Watchdata PRO, featuring hardware-level PIN protection.
  • Token Driver & CSP Installation: Installing requisite Token CSP (Cryptographic Service Provider) drivers and PKI middleware on Windows 10/11 environments.
  • Java & Browser Middleware Alignment: Configuring Java Security Settings, WebSign utilities, and emBridge / emSigner services required by MCA V3 and e-Tendering portals.
  • Token PIN Management: Setting up custom, secure User PINs and Admin PINs, and guiding clients on pin lockout recovery.

Validity Period, Renewal & Security Guidelines (IT Act 2000)

Important compliance, renewal, and security rules governing Class 3 Digital Signatures:

  • Validity Options: Available in 1-year, 2-year, or 3-year validity periods. Renewal can be initiated up to 30 days prior to expiry.
  • Token Reusability: Existing FIPS 140-2 USB tokens can be re-used for DSC renewal, reducing electronic waste and issuance costs.
  • Revocation Protocol: Immediate certificate revocation is initiated in the event of token loss, compromise of PIN, or change in organizational authorization.
  • Confidentiality & PIN Protection: Under the IT Act, 2000, the DSC owner is personally responsible for signatures executed using their certificate. Token PINs must never be shared or disclosed.
Direct Advisory

Schedule Consultation

Speak directly with our partner-led audit team for tax audit, compliance, or regulatory assistance.

Office Locations:

Raipur: Shyam Plaza, Pandri

Kalahandi: Main Road, Jayapatna

Clear Answers

Frequently Asked Questions

What is the difference between Class 2 and Class 3 DSC?
Class 2 DSCs have been completely discontinued by the Controller of Certifying Authorities (CCA). All statutory portals (MCA, Income Tax, GST, e-Tendering) now exclusively accept Class 3 DSCs, which require dual-factor video verification and identity validation.
What is the difference between Class 3 Signing and Class 3 Combo (Signing + Encryption)?
Class 3 Signing certificates are used for signing documents and return filings (MCA, Income Tax, GST). Class 3 Combo certificates include both Signing and Encryption keys, which are mandatory for government e-Tendering (CPPP, GeM, Railway, PWD bids) where tender documents must be encrypted prior to submission.
How long does it take to issue a Class 3 DSC in Raipur?
With our paperless e-KYC and online video verification process, Class 3 DSCs are typically issued within 15 to 30 minutes at our Raipur head office, and the cryptographic USB token is delivered configured and ready for immediate portal filing.
Can I re-use my existing USB token when renewing my DSC?
Yes! If you possess an active FIPS 140-2 compliant USB token (such as HYP2003 or ePass2003) in good working condition, new digital certificates can be downloaded directly onto your existing token, saving token hardware costs.
Why am I receiving a signature error on the MCA V3 or GST Portal?
Signature errors on MCA V3 or GST portals usually occur due to missing token CSP drivers, outdated Java/emBridge/emSigner middleware, or incorrect web browser PKI settings. Our technical team configures your system drivers to ensure seamless error-free signing.
Chartered Accountants

Discuss your tax, audit or compliance requirements with our partners.

Connect directly with Rabi Agrawal & Associatesfor statutory audit, taxation & corporate advisory.