By Manu Rao | Updated March 2026
What Is a Digital Signature Certificate?
A Digital Signature Certificate (DSC) is the electronic equivalent of a physical signature. It verifies the identity of the person signing an electronic document. In India, DSCs are required for filing any document on the MCA portal — company incorporation, annual returns, director KYC, and every other form.
The Information Technology Act 2000 (Section 3) provides the legal framework for digital signatures. The Controller of Certifying Authorities (CCA), operating under the Ministry of Electronics and IT, licenses Certifying Authorities (CAs) to issue DSCs.
Legal Framework
- Information Technology Act 2000, Section 3 — Authentication of electronic records using digital signatures
- Section 35 — Certifying Authority to issue Digital Signature Certificates
- IT (Certifying Authorities) Rules 2000 — Operational rules for CAs
- Companies Act 2013, Section 7(1)(a) — MOA and AOA must be signed using DSC
- Companies (Registration Offices and Fees) Rules 2014, Rule 8 — Electronic filing requires DSC
Types of DSC
DSCs come in three classes, though the classification system was updated in 2021:
| Earlier Classification | Current Standard | Use Case |
|---|---|---|
| Class 1 | No longer issued separately | Email verification only |
| Class 2 | Merged into single class | MCA filings, Income Tax, GST |
| Class 3 | Merged into single class | E-tendering, high-security applications |
Since January 2021, the CCA discontinued the class-based system. All DSCs now follow a single standard. For MCA filings, the DSC must be issued by a CCA-licensed Certifying Authority and contain the PAN of the applicant (for Indian residents) or passport number (for foreign nationals).
Why Foreign Investors Need a DSC
Every director and subscriber of an Indian company must have a valid DSC to:
- Sign the MOA and AOA during incorporation
- File the SPICe+ incorporation form
- Apply for DIN
- Sign annual filings (AOC-4, MGT-7)
- File DIR-3 KYC annually
- Sign board resolutions submitted to MCA
Without a DSC, no document can be filed on the MCA portal. It is the first step in any company registration process.
How Foreign Nationals Obtain a DSC
Foreign nationals can obtain DSCs from Indian Certifying Authorities that serve international applicants. The process differs from Indian residents:
- Choose a Certifying Authority — Licensed CAs include eMudhra, Sify, (n)Code, Capricorn, and CDAC. Not all CAs serve foreign applicants — confirm before applying.
- Submit documents — Passport copy (notarized), address proof (foreign address), and a passport-sized photograph
- Video verification — Since 2021, CCA mandates video-based identification for DSC issuance. The applicant must complete a live video call with the CA's verification team.
- Receive the DSC — Issued on a USB token or as a soft token (PFX file). USB tokens require physical shipping to the foreign applicant's address.
Timeline and Validity
| Aspect | Indian Residents | Foreign Nationals |
|---|---|---|
| Processing time | 1-2 days | 3-7 days |
| Validity | 1 or 2 years | 1 or 2 years |
| Video KYC | Required | Required (time zone coordination needed) |
| Token delivery | Domestic courier | International courier (5-10 days) |
DSCs must be renewed before expiry. An expired DSC cannot sign documents — any filing attempted with an expired DSC is rejected by the MCA portal.
DSC Registration on MCA Portal
After obtaining the DSC, it must be registered on the MCA V3 portal:
- Log in to mca.gov.in
- Go to "My Profile" and select "Associate DSC"
- Upload the DSC and verify using the token
- The portal validates the DSC against the director's DIN or DPIN
The DSC must match the name and identity number on the MCA profile. Mismatches (e.g., name on DSC differs from name on passport by even one character) cause association failures.
Common Issues for Foreign Applicants
- PAN vs. Passport number — Indian residents use PAN as the identifier in their DSC. Foreign nationals without an Indian PAN use their passport number. If the foreign director later obtains a PAN, the DSC may need to be re-issued with the PAN as the identifier.
- Name format differences — Many passports list names in a different order (family name first vs. given name first). The DSC must match the name format used in the MCA profile exactly. A mismatch of even one space or initial causes rejection.
- USB token compatibility — Some DSC USB tokens do not work on Mac operating systems. Foreign directors using Mac computers should request a soft token (PFX format) or use a Windows virtual machine for MCA filings.
- Video KYC timing — The video verification call must happen during Indian business hours. For applicants in the Americas, this means scheduling calls late at night or early morning their time.
- Token delivery to remote locations — USB token shipping to countries with unreliable postal services can take 2-3 weeks. Plan ahead.
DSC for Company Incorporation — Step-by-Step
Here is how the DSC fits into the incorporation workflow:
- Foreign director applies for DSC from an Indian CA (Day 1-3)
- Completes video KYC (Day 3-5)
- Receives USB token or soft token (Day 5-12)
- Registers DSC on MCA portal (Day 12-13)
- Uses DSC to sign SPICe+ form, MOA, and AOA (Day 13-14)
- MCA processes the application and issues Certificate of Incorporation (Day 17-24)
Practical Example
A Japanese entrepreneur based in Tokyo wants to incorporate a Private Limited Company in India. She applies for a DSC through eMudhra, which accepts international applicants. She submits her Japanese passport copy (notarized by a Tokyo notary), her Tokyo apartment utility bill, and a passport photo.
The video KYC call is scheduled for 2:30 PM IST (6 PM JST) — a workable time for both sides. The verification takes 10 minutes. eMudhra processes the application and ships the USB token via DHL to Tokyo. She receives it in 5 days.
She registers the DSC on the MCA V3 portal. Her passport name reads "TANAKA YUKI" — she ensures her MCA profile uses the same format, not "Yuki Tanaka." The DSC association succeeds on the first attempt.
She signs the SPICe+ application, MOA (INC-33), and AOA (INC-34) using the DSC. The company is incorporated within 7 working days of filing.
Revocation and Renewal
A DSC can be revoked if the private key is compromised, the information on the certificate becomes inaccurate, or the holder requests revocation. Revocation takes effect immediately — the CA publishes the revocation in its Certificate Revocation List (CRL).
Renewal should be initiated 2-3 weeks before expiry. Directors who let their DSC lapse cannot file DIR-3 KYC, which leads to DIN deactivation — a cascading compliance failure.
For help obtaining a DSC as a foreign national, visit our services page.