DSC Documents and Application Procedure in India

This checklist explains the common documents and steps for Digital Signature Certificate (DSC) applications. It follows the Controller of Certifying Authorities’ Identity Verification Guidelines (CCA-IVG) version 2.6, dated 16 June 2026. The exact route and evidence depend on the applicant, certificate purpose, selected licensed Certifying Authority (CA), and the portal that will accept the DSC. The CA decides the final requirements and performs verification.

Before you start: the person named in the DSC must complete their own CA enrollment and verification. Do not send OTPs, eKYC PINs, passwords, private keys, or Aadhaar authentication credentials to Alpingo by email or WhatsApp. Submit sensitive identity information only through the selected CA’s designated process.

1. Individual DSC for an applicant in India

For a personal certificate using the PAN eKYC route, prepare:

• PAN details and the original PAN document for CA verification.
• One government-issued identity document with the applicant’s address, such as a passport, driving licence, voter ID, or another CCA-accepted document.
• A mobile number registered in the applicant’s name and an email address that the applicant can access.
• A recent photo and any other information requested in the CA application.

The CA verifies the PAN and mobile number, checks the address document, and completes the required video verification or another permitted method. Keep the originals ready to show during a live CA video session. For Aadhaar eKYC routes, use the CA’s official interface; the CA may require an OTP or biometric step and video/photo matching. The precise steps depend on the selected Aadhaar route.

2. DSC for an authorised person of an organisation

In addition to the applicant’s own identity verification, prepare the following evidence for the organisation and the applicant’s authority:

• Applicant’s personal eKYC details, PAN, mobile number, email, photo, office address, and organisational ID or proof of association with the organisation.
• Organisation authorisation naming the applicant and the authorised signatory. The CA will verify the authorised signatory.
• Proof that the organisation exists, using the category-specific documents required by the CA.

Examples of organisation evidence in CCA-IVG include a business registration document showing the proprietor; relevant partnership deed pages; company or LLP director information with MCA verification and an appropriate resolution where required; a society, association, NGO, or trust resolution; or government-organisation identity/association evidence and the prescribed authorisation letter. These are examples, not a single list that fits every entity. Ask the CA which documents apply to your legal form. The organisation name shown in the certificate must meet the CA’s naming and verification rules.

The CA verifies the original documents during its verification process and checks the applicant’s mobile, email, and PAN as applicable. The applicant must personally complete the CA’s enrollment and verification steps; an organisation’s authorisation does not replace the applicant’s own verification.

3. DSC for a foreign applicant

For an individual applicant whose address or identity document is outside India, prepare:

• Passport, OCI passport, PAN, or another identity document accepted by the CA under CCA-IVG.
• Address evidence such as a passport/OCI document or government ID showing address, bank evidence showing address, a utility bill in the applicant’s name issued within the permitted recent period, or an embassy document showing residential address.
• Applicant’s photo, mobile number, and email address, plus originals for CA review.

The CA performs video verification and verifies the original documents. It also verifies the applicant’s phone and email. For an organisational-person application, the CA may also require organisational ID, organisational email/mobile/address, an organisation authorisation, and public registry evidence or an Indian government organisation’s request letter. Confirm the exact route with the CA before applying.

4. DSC using a bank eKYC route

This route is available only where the bank and CA support it. The applicant gives consent and authenticates with the bank so the bank can send KYC information directly to the CA. Be ready to provide or verify the details requested by the bank and CA, which can include name, address, photo, PAN or Aadhaar last four digits, mobile number, bank account number, and IFSC where applicable. The mobile number must match the bank KYC record. The CA’s bank KYC information must be current for the DSC issuance; CCA-IVG specifies a 24-hour window. Video verification is not mandatory for this bank route under the guideline, though the CA may explain its own supported process.

5. CA-assisted enrollment

CCA-IVG provides a CA-assisted route for specified cases, including applicants without Aadhaar or valid online Aadhaar verification, applicants facing certain PAN-route verification difficulties, and applicants with specified physical, medical, or age-related limitations. In this route, complete the online enrollment in the physical presence of an authorised CA employee. Prepare PAN, email, mobile registered in your name, address proof, photo, and photo identity documents. The CA employee verifies the documents and records the assisted enrollment. Contact the CA first to confirm eligibility and appointment arrangements.

6. Signing, encryption, token, and portal requirements

• Signing and encryption: for an individual, CCA guidance says the signing and encryption certificates should be separate. Confirm whether the application needs signing only or both certificate purposes; do not assume one combined certificate will work for every portal.
• Class and use: select the assurance/class and certificate details accepted by the receiving portal and confirmed by the CA. A portal such as DGFT is a use case, not a separate identity-document route; check its current applicant, organisation, and certificate requirements.
• USB crypto token: use the hardware cryptographic device required by the certificate class and current CCA policy. CCA-CRYPTO v2.4 (14 August 2026) says crypto devices with a historical FIPS 140-2 certificate status that rely on this guideline are to discontinue DSC issuance based on fresh eKYC using those modules after 21 September 2026, except where specifically permitted. This rule does not establish whether a particular token is accepted. Before ordering, ask the selected CA to confirm acceptance and current empanelment for the exact model, hardware/firmware/software version, serial-number series, and application route. Do not infer approval from a model name or “140-2/140-3” label. Follow the CA’s key-generation process and never export private signing keys.
• Special-purpose certificates: certificates such as an organisational Document Signer DSC have additional eligibility, evidence, and declaration requirements. Ask the issuing CA for the specific application checklist.

Application procedure

1. Identify the person or organisation that will own the DSC, its purpose, the receiving portal, and whether signing, encryption, or both are required.
2. Check the portal’s current certificate requirements and select a licensed CA and compatible token, if the certificate requires one.
3. Gather the applicable original documents, PAN/Aadhaar route details, address evidence, photo, verified mobile number, email, and organisation authorisation if relevant.
4. Start enrollment directly through the CA’s official interface. Complete mobile authentication, eKYC, document checks, video verification or other permitted checks, and any CA-specific steps yourself.
5. Review the application information carefully and complete the CA’s subscriber agreement and electronic signature steps.
6. Follow the CA’s instructions about payment and invoices. CCA-IVG restricts advance DSC payment before applicant mobile authentication, subject to specified organisational-person exceptions.
7. After CA verification and approval, download the DSC within the CA’s stated period. CCA-IVG sets a 30-day limit after verification/approval; if it is not downloaded within that period, the CA must carry out the applicable verification again before issuance.
8. Install and test the certificate and token using the CA’s instructions and the receiving portal’s compatibility checks. Keep the token PIN private and secure.

Official references: Current CCA guidelines, including CCA-IVG 2.6 · CCA subscriber FAQs · CCA classes of certificates · CCA-CRYPTO v2.4, 14 August 2026.

Requirements can change and CAs may request additional evidence where needed. Confirm the exact document list, certificate profile, token model, fees, and application steps with the CA named on the Alpingo product before placing an order.