Digital Signature Certificate (DSC)

The Controller of Certifying Authorities (CCA), India, has phased out Class 2 DSCs to enhance security. Class 3 DSCs offer a higher level of security and assurance of the holder's identity. They are now the standard and mandatory for most secure online applications, including GST filings, Income Tax filings (for companies and audit cases), MCA/ROC filings, e-tendering, e-procurement, EPF, Trademark filings, etc.

Yes, as per CCA guidelines in India, the private key associated with your Digital Signature Certificate must be stored on a FIPS 140-2 Level 2 (or higher) certified cryptographic hardware device. This is typically a USB Token (like ePass2003 Auto, Watchdata Proxkey, Alladin mToken, etc.). Storing the DSC on a hardware token ensures the security of the private key and prevents its unauthorized copying or misuse.

The eKYC process for DSC is a completely paperless method of identity verification. It typically involves: 1. Providing your Aadhaar number for OTP verification. 2. Providing your PAN number. 3. Completing a short, live video verification using your mobile phone or webcam, where you display your original PAN card and Aadhaar card (or other address proof) and answer a few simple questions. This process is quick, secure, and allows for faster DSC issuance.

Yes, generally a Class 3 Individual DSC (Signing) can be used for multiple purposes such as filing GST returns, Income Tax Returns, MCA/ROC forms, EPF portal, and other government portals that require digital signatures. However, some specific applications like DGFT (for import/export) require a special DGFT DSC. If you need to encrypt documents for e-tendering, you would need a Class 3 Sign & Encrypt (Combo) DSC.