Every government tender in India requires a valid Class 3 Digital Signature Certificate. This comprehensive guide explains what DSC you need, how to get it, certificate types, token options, and how to avoid common pitfalls that can disqualify your bid.
📅 Updated: 29 July 2026 · Author: Tender84 CPIO Intelligence
A Digital Signature Certificate (DSC) is the electronic equivalent of your physical signature — cryptographically secure and legally valid. Every DSC in India is issued by a Licensed Certifying Authority (CA) under the Controller of Certifying Authorities (CCA), Ministry of Electronics & Information Technology, Government of India — the apex body that governs India's entire PKI infrastructure under the IT Act, 2000.
A DSC serves three critical functions in e-tendering:
| Profile | For | Best For |
|---|---|---|
| 🧑 Individual | Proprietorship firms, independent contractors, consultants | Bidding under your own name |
| 🏢 Organisation | Pvt Ltd companies, LLPs, partnerships, trusts | Bidding under company/LLP name |
| 🏛️ Government | Government departments, PSUs, statutory bodies | Govt procurement, inter-dept tendering |
| 🌐 IET (DGFT) | Importers/exporters — DGFT, ICEGATE, customs | Foreign trade docs, IE code, customs clearance |
| 🌍 Foreign Individual | Non-Indian individuals needing Indian DSC | Foreign consultants on Indian tenders |
| 🏭 Foreign Organisation | Non-Indian companies needing Indian DSC | International firms on Indian govt contracts |
| Usage Type | Certificates on Token | Used For |
|---|---|---|
| ✍️ Sign Only | 1 — Digital Signature | e-Tendering, GST, MCA, ITR, IRCTC |
| 🔒 Encrypt Only | 1 — Encryption | Secure document transmission |
| ✍️🔒 Sign & Encrypt (Combo) | 2 — Signature + Encryption | Full e-tendering — Recommended for contractors |
Before the March 2023 CCA mandate, DSCs were issued in Class 2 and Class 3 variants. Today, all DSCs are Class 3 except Document Signer certificates. This table is kept for reference:
| Feature | Class 2 DSC | Class 3 DSC ✅ |
|---|---|---|
| Identity Verification | Basic (PAN + photo) | In-person verification or Video KYC |
| Used For | Income Tax filing, GST returns, MCA RoC filings | e-Tendering (all portals), e-Auction, IPR filing, MCA |
| Accepted on CPPP? | ❌ No — rejected | ✅ Yes — mandatory for all NIC portals |
| Accepted on GeM? | ❌ No | ✅ Yes — seller registration requires Class 3 |
| Validity | 1-2 years | 1-2 years (renewable) |
| Approximate Cost | ₹800 – ₹1,500 | Starting ₹1,130 (Capricorn, 1 year, with token) |
| Processing Time | 1-2 days | ~10 minutes (Individual, Aadhaar OTP) · 10-20 min (Org/Govt with docs) |
Bottom line: If you plan to bid on any Indian government tender, you need a Class 3 DSC. No exceptions.
Within Class 3, there are two sub-types depending on who is bidding:
| Type | Individual (Personal) DSC | Organisation DSC |
|---|---|---|
| Who needs it | Proprietorship firms, individual contractors, consultants | Private Limited companies, LLPs, partnerships, trusts |
| What it contains | Your personal name (e.g., "RAJESH KUMAR") | Organisation name (e.g., "POWER STAR ENTERPRISES") |
| Issuing CA | Sub CA for Individual DSC | Sub CA for Organisation DSC (different CA branch) |
| Tender usage | Signing bids under your own name | Signing bids under company/LLP name |
| Documents needed | PAN, Aadhaar, photo | PAN, Aadhaar, GST certificate, Certificate of Incorporation, Board resolution/authorisation letter |
Pro tip: Many contractors need both — an Individual DSC for their personal e-procurement profile and an Organisation DSC for submitting bids under their company name on different portals. Check each portal's registration requirements.
Every Indian DSC follows a three-level Public Key Infrastructure (PKI) chain of trust:
When you sign a bid, the e-procurement portal verifies your certificate against the CA, which is verified against the CCA root. This chain of trust ensures your signature is legally valid under Indian law.
Licensed Certifying Authorities in India (2026):
💡 Tender84 recommends Capricorn DSC. Cloud84 is a proud Capricorn CA Business Partner — offering the fastest processing, best pricing, and dedicated e-tendering support. 📞 Enquire for DSC → or call +91 83510 91922.
If you purchase a Sign & Encrypt (Combo) DSC, your USB token will contain two certificates — regardless of whether you chose Individual, Organisation, or Government profile. The Encryption certificate is a separate, optional purchase available to all profiles:
| Digital Signature Certificate | Encryption Certificate | |
|---|---|---|
| Purpose | Signing bid documents and forms | Encrypting/decrypting documents |
| keyUsage field | digitalSignature + nonRepudiation | keyEncipherment + dataEncipherment |
| Used for e-tendering? | ✅ Yes — this is what signs your bid | ❌ Not directly — used for encrypted document exchange |
| Present on token? | Always — every DSC includes a signing certificate | Optional — available with Sign & Encrypt Combo. Any profile (Individual, Organisation, or Government) can get both on one token. |
Important: The e-procurement portal's DSC signing component will automatically select the correct signing certificate. You don't need to manually pick — but if you see two certificates listed when plugging in your token, the one with "Digital Signature" in its description is the right one.
⏱️ Processing Time: Individual DSC — ~10 minutes (Aadhaar OTP + Video KYC) | Organisation/Government DSC — 10-20 minutes (once documents are ready) | 💰 Starting from ₹1,130 (incl. GST, with token)
Tender84 recommends Capricorn CA — we are a Capricorn Business Partner. Select your DSC type:
📞 Enquire for DSC → or call +91 83510 91922 for assistance.
For Individual DSC:
Additional for Organisation DSC:
Class 3 DSC requires mandatory verification. The fastest method is Online Aadhaar OTP mode: enter the OTPs sent to your Aadhaar-linked mobile and email, then record a short selfie video (takes ~2 minutes). Other modes available: Aadhaar Biometric, Aadhaar Face Match, PAN-based, and offline Aadhaar XML. This step takes just a few minutes — once complete, your DSC is approved almost instantly.
Your DSC is stored on a cryptographic USB token. The CA ships it to your address via courier. Cloud84 stocks and recommends: ⭐ Watchdata ProxKey (our top pick — caches PIN for the session), InnaITKey (new, budget-friendly), Feitian ePass (reliable cross-platform), and M-Token CryptoID (compact). All tokens support similar certificate capacity. See token comparison →
Plug the USB token into your computer. Download and install the token driver and DSC signing component from your CA's website. You'll also need Java 8 (32-bit) installed if you're using older CPPP portals (eprocure.gov.in, etenders.gov.in). Newer portals work with the browser-based signer component.
Each e-procurement portal (CPPP, state portals, GeM) requires separate registration with your DSC. During registration, the portal will ask you to sign a challenge string using your DSC to verify it. After registration, your DSC is mapped to that portal. You'll need to repeat this for each portal you want to bid on.
Cloud84 (parent of Tender84) is a Capricorn CA Business Partner — licensed by CCA, Govt of India. We've issued 5,000+ DSCs since 2016.
Individual DSC → ~10 minutes (Aadhaar OTP + selfie video) | Organisation/Govt DSC → 10-20 minutes (once documents ready)
Capricorn Class 3 · Individual & Organisation · Starting ₹1,130 · Pan-India · Call +91 83510 91922
All USB crypto tokens in the Indian market support a similar number of certificates — typically up to 5-7 on a single token. The key differentiators are build quality, PIN caching behaviour, and driver compatibility.
| Token Brand | Model | Key Feature | Best For |
|---|---|---|---|
| ⭐ Watchdata ProxKey | PROXKey USB Token | Caches PIN for session — no repeated PIN entry during bid document uploads. Smoother e-tendering workflow. | Our top recommendation — e-tendering, multi-portal users, frequent bidders |
| 🔑 InnaITKey | InnaITKey DSC Token | New entrant in Indian market. Available through Cloud84. All tokens priced similarly (₹50-100 difference). | New DSC buyers, multi-token setups |
| Feitian ePass | ePass2003 / FTI | Widely used, reliable, good driver support across Windows/Mac/Linux | Individual DSC, cross-platform users |
| M-Token CryptoID | CryptoID USB | Compact form factor, easy to carry | Individual users who travel frequently |
The ProxKey caches your PIN for the entire session. When you're uploading multiple bid documents (technical bid, financial bid, BOQ, annexures), each requiring DSC signing, you enter the PIN once — not 10-15 times. This saves significant time and frustration during bid submission. Other tokens may prompt for PIN on every signing operation.
Never store multiple people's certificates on one token. If the token is lost or stolen, ALL certificates are gone. If the PIN is entered wrong 10 times, the token permanently locks and ALL certificates are destroyed. Keep one token per person — it's a small cost for security.
DSCs are valid for 1, 2, or 3 years from the date of issue (you choose at purchase). The expiry date is embedded in the certificate and cannot be extended — you must renew (get a new certificate).
Renewal process:
Cause: Token driver not installed or outdated.
Fix: Download the latest driver from your CA's website (not from third-party sites). Restart your browser after installation. For Watchdata ProxKey, install the Watchdata CSP driver. For Feitian ePass, install the Feitian PKI Manager.
Cause: Certificate validity period has ended.
Fix: There is NO workaround — you must renew your DSC. Contact your CA immediately. In the meantime, you cannot submit any new bids. Plan renewal 30-45 days in advance.
Cause: Older NIC portals (eprocure.gov.in, etenders.gov.in) require Java 8 (32-bit) for the DSC signing applet.
Fix: Install Java 8 Update 202 (32-bit) specifically. Add the portal URL to Java's Exception Site List in the Java Control Panel. Clear your Java cache. Newer portals use browser-based signers that don't need Java.
Cause: Each portal maps your DSC separately during registration. A DSC valid on one portal may not be registered on another.
Fix: Register your DSC on each portal individually. Check if the portal requires Class 3 specifically (some older portals may accept Class 2 for viewing but Class 3 for bidding). Verify the DSC is in the name that matches your portal registration.
Cause: PIN entered incorrectly multiple times (usually 10 attempts). The token permanently locks as a security measure.
Fix: There is no recovery. The token and all certificates on it are permanently destroyed. You must purchase a new DSC on a new token. This is why the "One Token = One Person" rule matters — a locked token with 7 certificates means 7 people lose their DSCs simultaneously.
Cloud84 is developing Flash Turbo Signer v4 — a high-performance PDF signing tool for Indian DSC tokens. Insert your USB token → auto-detected → one click SIGN. Supports Capricorn, Watchdata ProxKey, Feitian ePass, M-Token CryptoID, and more. 6 professional stamp styles with multi-placement and batch signing.
Stay tuned — launching soon. In the meantime, browse 68,000+ live tenders and get your DSC ready.
🔍 Browse Live Tenders → 📞 View Services →