Overview of Digital Signature Solutions
A Digital Signature Certificate (DSC) is the electronic equivalent of a handwritten signature, backed by asymmetrical public key cryptography (PKI) as prescribed by the Information Technology Act, 2000. It establishes the authenticity, integrity, and non-repudiation of electronic documents submitted to Indian government departments.
Ocean Technovative provides comprehensive procedural assistance for acquiring, renewing, and configuring digital signatures issued by licensed Certifying Authorities (CAs) under the Office of the Controller of Certifying Authorities (CCA).
DSC Categories Available
Class 3 Digital Signature
The standard high-assurance certificate required for corporate e-filing (MCA21), GST returns, Income Tax e-filing, EPFO, and government procurement tenders.
DGFT Digital Signature
Specialized digital certificate embedded with the organization's Importer-Exporter Code (IEC), required exclusively on the Directorate General of Foreign Trade portal.
Certificate Types: Signing vs Combo (Signing + Encryption)
Depending on your intended portal interaction, digital signature certificates are provisioned in two configurations:
- Signing-Only Certificate: Used for signing PDF balance sheets, MCA company annual filings, GST portal logins, and invoice generation.
- Combo (Signing & Encryption): Essential for online procurement tenders. The encryption certificate encrypts commercial financial bids so that tenders cannot be viewed until the official tender opening date.
FIPS-Certified USB Crypto Tokens
In compliance with CCA security guidelines, digital signatures cannot be downloaded to a standard hard drive or flash drive. They must be generated and stored on a tamper-resistant, password-protected cryptographic USB hardware token meeting FIPS 140-2 Level 2 standards (ePass 2003, Watchdata ProxKey, or mToken).
Validity Options: Digital Signature Certificates can be provisioned with a validity duration of 1 year, 2 years, or 3 years. We advise clients to initiate renewal at least 15 days before expiration to maintain uninterrupted access to critical tender deadlines.