Digital Signature Certificate (DSC) for MCA Filings — Classes, Validity and How to Apply
A Digital Signature Certificate (DSC) is the electronic equivalent of a physical/handwritten signature, used to authenticate documents filed electronically. Every e-form filed on the MCA portal — from incorporation to annual returns to charge filings — requires the DSC of one or more authorised signatories (directors, designated partners, or certifying professionals). This guide covers what a DSC is, its legal basis, the current class structure, validity, and how to obtain one.
Legal Basis
A DSC is issued under the Information Technology Act, 2000, by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology (MeitY). A digital signature affixed using a valid DSC carries the same legal validity as a handwritten signature under Section 3A of the IT Act, and is mandatory for electronic filings with the MCA, Income Tax Department, GST Network, and other government portals.
Class 3 Is Now the Only Class Issued
Digital Signature Certificates were historically issued in three classes (Class 1, Class 2, Class 3), differing in the level of identity verification performed before issuance. Effective 1st January 2021, the Controller of Certifying Authorities discontinued Class 1 and Class 2 DSCs and merged their use cases into Class 3. Since that date, only Class 3 DSCs are issued in India, for all purposes including MCA filings, income tax e-filing, GST, e-tendering, and e-procurement.
A Class 3 DSC involves the highest level of identity verification (in-person or video-based verification against government-issued ID) and is available as:
| Type | Use |
|---|---|
| Signing certificate | Used to digitally sign documents/forms |
| Encryption certificate | Used to encrypt documents/information (relevant for e-tendering, not typically for MCA filings) |
| Combo (Signing + Encryption) | Both certificates issued together on the same token |
For MCA filings, a Class 3 Signing Certificate is what’s required.
Who Needs a DSC for MCA Filings
- Every proposed director/subscriber at the time of company incorporation (to sign SPICe+ and linked e-forms — see SPICe+ Part B: Company Incorporation)
- Every designated partner at the time of LLP incorporation (to sign FiLLiP — see Form FiLLiP: LLP Name Reservation and Incorporation)
- At least one director/designated partner for ongoing annual and event-based filings (AOC-4, MGT-7, Form 8, Form 11, and all other e-forms)
- The certifying professional (Chartered Accountant, Company Secretary, or Cost Accountant in practice) who certifies e-forms, wherever professional certification is mandatorily or optionally required
A DSC is issued to an individual, not to a company or LLP — each director/designated partner/professional must obtain their own DSC in their personal capacity.
Validity Period
Class 3 DSCs are issued with a validity of 1, 2, or 3 years, at the applicant’s choice (subject to what a given Certifying Authority offers). A 2-year validity is the most commonly opted period, balancing cost against the inconvenience of frequent renewal. An expired DSC cannot be used to sign any e-form — the MCA portal (and other government portals) will reject the filing, so tracking DSC expiry for all directors/designated partners is an important, easily overlooked compliance task, particularly ahead of the annual filing season.
How to Obtain a Class 3 DSC
- Choose a licensed Certifying Authority — CAs currently licensed by the CCA include eMudhra, (n)Code Solutions, Capricorn, Sify, and Protean (formerly NSDL e-Governance), among others.
- Choose signing-only or combo (signing + encryption) certificate, and the validity period (1/2/3 years).
- Complete identity verification — this is typically done via:
- Aadhaar-based e-KYC with OTP/biometric authentication, or
- Video-based identity verification (a live video call where the applicant shows original ID documents), or
- Physical/in-person verification through an authorised registration authority, in some cases.
- Submit supporting documents — typically PAN card and Aadhaar (or passport, for foreign nationals/NRIs who cannot use Aadhaar-based verification), along with a recent photograph.
- Receive the DSC on a USB token (the most common form factor for MCA filings) — the private key is generated and stored on a small, FIPS-compliant cryptographic USB device; DSCs are not typically issued as downloadable soft files for MCA-grade filings, since the token provides hardware-level key protection.
- Install the DSC token driver and the MCA-specific signer utility (emSigner) on the system used for filing, and register the DSC against the relevant DIN/PAN on the MCA V3 portal before it can be used to sign e-forms.
Foreign Nationals and NRIs
Foreign nationals and Non-Resident Indians who do not have an Aadhaar number can still obtain a Class 3 DSC, using their passport (apostilled/notarised as required by the Certifying Authority) in place of Aadhaar-based e-KYC, generally through video-based verification or attested documents. This is relevant for foreign directors being appointed to Indian companies or foreign LLP designated partners.
Common Practical Issues
- Token driver/browser compatibility — DSC tokens require a specific driver and typically work best with specific browsers; mismatches are a common cause of “DSC not detected” errors on the MCA portal.
- emSigner not running — the MCA V3 portal uses a local signer utility (emSigner) that must be running in the background for signing to work; see the dedicated guide linked above if signing fails.
- Expired DSC blocking filing deadlines — since annual filings cluster around AGM season, a DSC quietly expiring a few weeks before a filing deadline is a frequent, avoidable cause of last-minute compliance stress; renewing 4-6 weeks before expiry is good practice.
- Form size increasing after DSC attachment — a known MCA V3 quirk; see Why Form Size Increases After Attaching DSC if you encounter this.
Key Takeaways
- A Class 3 DSC is the only class of Digital Signature Certificate issued in India since 1st January 2021, and is mandatory for signing MCA e-forms.
- DSCs are issued to individuals (not entities), are valid for 1-3 years, and are typically delivered on a USB cryptographic token.
- Every director, designated partner, or certifying professional involved in MCA filings needs their own valid DSC — tracking expiry across all signatories is an easily missed but important compliance task.
- Foreign nationals/NRIs without Aadhaar can still obtain a Class 3 DSC using passport-based verification.