Digital Signature Certificate (DSC): Types, Cost, Renewal & Troubleshooting (2026 Guide)

DSC (Digital Signature Certificate) is the legally valid electronic version of a signature, issued under the IT Act, 2000 by a CCA-licensed Certifying Authority. In 2026, only Class 3 DSCs are issued, valid for 1–3 years, and mandatory for MCA/ROC, GST, and income tax filings is costing roughly ₹800–₹2,000 depending on the provider and validity.

If you've ever tried to file something on the MCA portal, register a company, or submit a GST return and got stuck at "please affix DSC," you already know how important this little USB stick is. And if you're just starting out and someone told you "pehle DSC bana lo," this blog is for you.

We're going to break down what a Digital Signature Certificate actually is, which type you need in 2026, what it realistically costs, how renewal works, and the errors people run into most often on MCA, GST and other portals.

If you are registering a company, this is step zero: every proposed director and subscriber needs a digital signature certificate for company registration before SPICe+ can be filed at all.

DSC at a glance (2026)

What exactly is a DSC, and why does the Government insist on it?

A Digital Signature Certificate is the electronic version of your handwritten signature, except it's cryptographically locked to your identity, so nobody can forge it or tamper with a document after you've signed it. It's issued under the Information Technology Act, 2000, and it's what makes a filing on a government portal legally valid, the same way your signature makes a paper document valid.

The entire system runs under the Controller of Certifying Authorities (CCA), which sits under the Ministry of Electronics and Information Technology (MeitY). The CCA licenses and regulates every agency allowed to issue a DSC in India, think of it as the RBI of digital signatures. If a DSC isn't issued by a CCA-licensed Certifying Authority, it simply won't be accepted for statutory filings, no matter how official it looks.

Where does this show up in real life? Under the Companies Act, 2013 and the MCA's e-filing rules, every director and subscriber has to digitally sign forms like SPICe+, e-MOA and e-AOA at the time of incorporation, and every ROC filing after that annual returns, charge creation (CHG-1), auditor appointment (ADT-1), and so on. Without an active DSC linked to your PAN and DIN, you genuinely cannot move forward on the MCA portal. Same story on the GST portal, the Income Tax e-filing site for companies and LLPs, DGFT for import-export businesses, EPFO, ICEGATE, and government e-tendering portals like GeM.

Who needs a DSC for company registration?

Every proposed director and every subscriber to the memorandum needs their own Class 3 DSC before SPICe+ Part B can be signed. A three-director company therefore buys three DSCs, not one. The practising CA, CS or Cost Accountant certifying the form signs with their own DSC as well.

Two things founders get wrong here. First, a DSC belongs to a person, not to the company, so it stays with the director if they exit. Second, a sole proprietor registering only for GST or Udyam does not need a DSC at all, because those filings can be completed with an Aadhaar OTP.

DSC for director: if you already hold a Class 3 DSC for income tax or GST, you can usually reuse it for MCA, provided the PAN on the certificate matches your MCA profile exactly.

Which type of DSC do you actually need in 2026?

Here's the one thing that trips up almost everyone doing their own research: older blogs and even some CA firms still talk about "Class 2" DSCs. That class was discontinued from 1st January 2021 on CCA's directive. As of 2026, Class 3 is the only class of DSC being issued for any business, professional, or regulatory use MCA/ROC filings, GST, income tax, e-tendering, trademark and patent filing, all of it. So if anyone is trying to sell you a "Class 2 DSC" today, that's outdated terminology at best.

Within Class 3, you'll be asked to pick a few things at the time of application:

• Signing certificate vs Signing + Encryption: a plain "Signing" DSC covers MCA, income tax, GST and TRACES. If you're bidding on e-tenders or e-procurement (GeM, railway tenders, PSU tenders), you'll usually need the combo "Signing + Encryption" variant.
• Individual vs Organisation DSC: an Individual DSC carries your personal name and PAN. An Organisation DSC additionally carries your company or LLP's name, useful for tenders where the entity's identity needs to show up on the certificate.
• USB token vs cloud/paperless DSC: traditionally, a DSC is stored on an encrypted USB token (this is mandatory in most cases, a DSC can't legally just sit as a downloadable file). Several Certifying Authorities now also offer cloud-based signing that's accepted on MCA, GST and DGFT, which is handy if you sign from multiple devices or don't want to carry a token around.

One more thing worth knowing: video-based KYC has now largely replaced the older practice of meeting a verification agent in person. Most applicants complete identity verification through a short video call plus Aadhaar or PAN-based e-KYC, which has cut issuance time down considerably compared to a few years ago.

Not sure which variant fits your business? This is where most people overpay or pick the wrong one. Talk to the One-Startup team and we'll tell you exactly which DSC you need.

Who actually issues a DSC?

You can't just download a DSC from anywhere. It has to come from a Certifying Authority licensed by the CCA. The commonly used ones in India include eMudhra, Sify (Safescrypt), Capricorn CA,  Protean eGov Technologies (formerly NSDL e-Governance) and (n)Code Solutions, among a few others. The legal validity is identical across all of them, the differences are in turnaround time, support quality, and pricing. Most businesses don't apply directly with the CA; they go through a registered partner or a compliance service provider (like us) who handles the paperwork and verification on their behalf.

In Delhi, you'll find plenty of local vendors around Nehru Place and Karol Bagh offering "same-day DSC", the certificate itself is genuine (it has to be, since it's CCA-controlled), but the actual value a good service provider adds is getting your KYC and MCA linking right the first time, so you're not back at their shop the next week fixing an association error.

What documents do you need, and how do you actually apply?

For an Individual Class 3 DSC you need your PAN, Aadhaar, a passport-size photograph, an email ID and a mobile number linked to Aadhaar for OTP. An Organisation DSC adds the company's incorporation certificate, PAN, a board resolution and an authorisation letter for the signatory.

The application runs in six steps:

• Apply on a CCA-licensed CA's portal, or through a service provider. Pick class (Class 3), type (Signing, or Signing plus Encryption) and validity (1, 2 or 3 years).
• Complete PAN and Aadhaar e-KYC.
• Verify mobile and email by OTP.
• Complete live video verification. Keep your original PAN card in hand.
• Download the certificate onto your USB token. You have 30 days from approval to download it, after which the request lapses.
• Associate the DSC on the MCA V3 portal before your first filing.

Realistic timeline: 1 to 3 working days end to end, and a few hours if your Aadhaar e-KYC goes through cleanly. Plan for a week if a filing deadline is involved.

What does a Class 3 DSC cost in 2026?

This is the question we get asked the most, and honestly, there's no single fixed government rate: pricing is market-driven and varies by Certifying Authority, validity period, and whether you already own a USB token. Broadly, your cost has three components: the token (a one-time hardware cost, usually needed only the first time), the issuance fee for the certificate itself, and the renewal fee once it expires.

As a rough, real-world range: a Class 3 Signing DSC for an individual, valid for 2 years, typically falls somewhere between roughly ₹800 and ₹2,000 depending on the CA and whether a fresh token is included. Organisation DSCs and the Signing + Encryption variant used for e-tendering usually cost more. We'd rather be upfront: exact pricing changes from provider to provider and from month to month, so treat any number here as an indicative range, not a quote. We'll give you the actual current price when you reach out.

Note: there is no fixed government rate for a DSC. Pricing is set by each Certifying Authority. Treat every figure above as an indicative range, not a quote.

Want the exact current price?

Skip the guesswork and message One-Startup and we'll quote you the real, current cost for your specific requirement.

DSC not detected on the MCA portal? Here's what's actually wrong.

Since MCA moved fully to the V3 portal, we've seen a fresh wave of DSC-related complaints and most of them come down to a handful of repeat issues:

A few MCA V3 quirks catch people out. If you're seeing "Only Business Users can associate a DSC," the problem isn't your certificate at all: a Registered User account simply can't associate a DSC on V3, so you'll need to upgrade to a Business User profile first. If it worked on V2 and doesn't now, that's because V2 associations were never carried over to V3, so anyone who filed before the migration has to re-associate the same certificate from scratch. And if you've already tried the basics — reinstalling drivers, restarting the utility, switching browsers, since Chrome and Edge tend to be the most reliable for V3 — and it still won't sign, it's usually faster to have someone who deals with this daily take a look than to lose a filing day to it.

Validity and Renewal of DSC —Don't Wait for the Expiry Email

A Class 3 DSC is typically issued for 1, 2, or 3 years, depending on what you select at the time of purchase. Once it expires, that's it. It cannot be used to sign anything, and government portals will simply reject the filing. There's no grace period built into the system.

A few practical points on renewal:

• Start the renewal process about 2–4 weeks before expiry, especially if you have a filing deadline coming up around GST or ROC due dates leaving it to the last day is the single biggest cause of missed deadlines we see.
• Renewal isn't automatic. The CCA guidelines require fresh identity verification each time, usually the same Aadhaar/PAN e-KYC or video verification you did originally, not a full paper-document exercise.
• You cannot change the name on the certificate during renewal. Any change of name, company, or designation is treated as a fresh DSC application, not a renewal.
• If you are renewing before 21 September 2026 and your token still works, most CAs will let you reuse it instead of buying a new one. If your renewal falls after that date, budget for a new FIPS 140-3 token as part of the cost (see the section below).
• Once expired, technically you're applying afresh rather than "renewing" in the strict sense but in practice, the process and documentation needed are very similar.

What Most Providers Won't Tell You

Three things worth knowing before you pay anyone. The certificate itself is identical whichever CA issues it, so nobody is selling you a "better" DSC. Tokens issued for DSC download are required to have no user PIN reset option, which means a forgotten token PIN is not recoverable and the certificate has to be reissued. And a same-day DSC is genuinely possible on Aadhaar e-KYC, so a provider quoting a week is usually just batching applications.

One-Startup Insight

While supporting founders across India, we see the same pattern again and again: the DSC gets treated as a one-day errand and left till the end. It's usually the cheapest line on the invoice, so it feels trivial. But it's the only step in the whole registration that depends on live video verification and a physical token reaching you, and neither can be hurried. Founders then stall at document submission, the incorporation slips by a week or more, and we've seen work lost while the paperwork waits. Apply for your DSC in the same week you start name reservation, not after it.

What changes on 21 September 2026

If you are renewing a DSC in the last quarter of 2026, this affects your cost. Under the CCA's Security Requirements for Crypto Devices (version 2.4, dated 14 August 2026), Certifying Authorities must stop issuing DSCs on fresh e-KYC into FIPS 140-2 tokens after 21 September 2026, except where specifically permitted.

In plain terms: a FIPS-validated token was already mandatory, so nothing about that is new. What changes is which generation of token qualifies. Certificates already downloaded onto a FIPS 140-2 token keep working until they expire. But if your renewal or fresh application lands after 21 September, assume a new FIPS 140-3 token is part of the bill rather than reusing the one in your drawer.

The other shift worth watching is cloud-based and paperless signing, now accepted on MCA, GST and DGFT. Useful if you sign from more than one machine.

Want someone to handle the DSC and the MCA association for you?

At One-Startup, we make DSC-related work simple for founders and small businesses. We'll tell you which variant you actually need, get the KYC and MCA linking right the first time, and flag your renewal before it costs you a filing day.

Setting up a company, applying for your first DSC, or need to renew an existing one? Connect with us on WhatsApp us and we'll tell you whether your problem is a ten-minute fix or a reissue.

Official resources

Disclaimer: compliance requirements and Certifying Authority pricing change. Verify the latest position on the official portal or consult a CA or CS before acting on this article.

Last updated: August 2026