DSC
What DSC means, how it works, a worked example, the mistakes we see and the questions founders ask.
DefinitionA Digital Signature Certificate (DSC) is a USB token that lets a person sign government e-forms; every director signs MCA filings, and authorised signatories sign GST and income tax filings, with one.
The MCA, GST and income tax portals accept only digitally signed forms, so a DSC is the first thing an incorporation needs. Each director and each subscriber to the MOA holds a Class 3 DSC, issued by a licensed certifying authority after video verification of PAN, Aadhaar and a photo, and valid for one to three years. You meet it at incorporation, on every AOC-4, MGT-7A, DIR-3 KYC and DIR-12, and on GST and TDS filings that require a signature rather than an OTP. What it means for you: keep the token safe and renew before expiry, because an expired DSC stops filings at the worst moment, usually a September deadline. The DSC is registered on the MCA portal against your DIN, so a new token needs re-registration.
How DSC works
A Digital Signature Certificate is the cryptographic identity used to sign government e-forms. Indian portals accept Class 3 certificates only, issued by a licensed certifying authority after video or Aadhaar-based verification, stored on a USB token and valid for one, two or three years. The MCA, GST, income tax (for companies and audit cases), DGFT, EPFO and trademark portals all require it; individuals filing their own income tax returns can use Aadhaar OTP instead.
Every director and subscriber signs incorporation forms with their own DSC, and the DSC is registered against the person's DIN or PAN on each portal before first use. A DSC belongs to the person, not the company, so a director who leaves takes the token with them, and the company registers the new director's signature.
Renewal is a fresh certificate, re-registered on each portal. The certificate carries the holder's name as on PAN, and the organisation name for a certificate issued in an organisational role, which some portals need for authorised signatories.
Three subscribers to a new Ahmedabad company each buy a two-year Class 3 DSC in the first week, verified by a short video call with the certifying authority. The incorporation forms are signed with all three tokens, and the professional's own DSC certifies them. Two years later the tokens expire in the same month as the annual filing season; the company renews them in August so that AOC-4 and MGT-7 are not held up in October.
Mistakes we see with DSC
- Buying a Class 2 or a signing-only certificate from an old supplier; only Class 3 has been accepted since 2021.
- Letting the DSC lapse mid-filing season and finding that renewal plus re-registration on the MCA portal takes several days.
- Keeping all the directors' tokens with one office assistant, which defeats the point of a personal signature and is a governance risk.
Last updated 19 October 2026. Checked against the MCA, GST, Income-tax and Trade Marks rules in force for October 2026.
Where you will meet this term
- Private Limited CompanyFounders who plan to raise money or hirefrom ₹4,999
- Company Annual FilingsPrivate Limited Companies, OPCs and LLPs that want every ROC filing done on time, with the AGM and audit coordinated.from ₹9,999/year
- Limited Liability PartnershipFor two or more partners running a services or professional firm who want limited liability with light compliance.from ₹4,999
Questions founders ask about DSC
Which class of DSC do I need?
Class 3, the only class issued since 2021. A signature and encryption combination certificate covers every portal, including DGFT and GST, so buy that rather than a signature-only one.
How long is a DSC valid?
One, two or three years from issue, at the holder's choice. A renewal is a new certificate that must be registered afresh on each portal where it is used.
Can a company share one DSC among directors?
No. Each director signs with their own certificate, registered against their own DIN. Using someone else's token to sign is a forgery under the IT Act.