Differences
This shows you the differences between two versions of the page.
| — | practical-guides:digital-signature-certificate-application-renewal-revocation-stuck [2026/07/10 20:38] (current) – created - external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | {{htmlmetatags> | ||
| + | ====== DSC stuck? Match your symptom to the fix before you escalate ====== | ||
| + | |||
| + | **Reviewed on:** 2026-06-12. | ||
| + | |||
| + | {{: | ||
| + | |||
| + | A Class 3 Digital Signature Certificate from a licensed Certifying Authority (CA) normally issues within one to two working days for Indian nationals once video KYC is done. When it stalls, the cause is almost always one of a handful of things. Find your symptom in this table first, fix the root cause, then contact the CA with your application reference. Class 3 is the only class now issued, legacy Class 1 and Class 2 are gone. | ||
| + | |||
| + | ^ Symptom on the CA portal ^ Most likely cause ^ First fix ^ | ||
| + | | "Video KYC pending" | ||
| + | | Stuck at "Under Processing" | ||
| + | | " | ||
| + | | Status " | ||
| + | | Renewal not carrying over | A DSC does not auto-renew, it just stops working at expiry | Start a fresh application with video KYC at least 30 days before expiry | | ||
| + | | Revocation request not moving | CA has not updated the Certificate Revocation List | Press the CA grievance officer and, for misuse risk, escalate to CCA in parallel | | ||
| + | |||
| + | ===== Who this guide is for ===== | ||
| + | |||
| + | Company directors and LLP partners filing on MCA21 (SPICe+, FiLLiP, AOC-4, MGT-7), GST authorised signatories signing returns or appeals, audit-mandatory income tax filers, GeM vendors and e-tender bidders who need a valid Class 3 DSC, DGFT and ICEGATE filers, and anyone needing to revoke a DSC after a token was lost or a signatory changed. | ||
| + | |||
| + | ===== Use only a licensed CA ===== | ||
| + | |||
| + | Before troubleshooting, | ||
| + | |||
| + | ===== Clear the four common blockages ===== | ||
| + | |||
| + | * **Video KYC.** It is the standard verification for fresh and renewal applications. If a session failed, reschedule from the portal. Some CAs run Saturday slots. If your CA offers OTP-based Aadhaar eKYC for individuals, | ||
| + | * **Name mismatch.** The name must match your PAN exactly. If your PAN says " | ||
| + | * **Payment not confirmed.** If money was debited but the portal shows pending, send the bank transaction screenshot with your application reference to the CA's support team. | ||
| + | * **Token or driver issue.** If the certificate is issued but undetected, reinstall the token driver and the **correct emsigner version for that portal**, use a direct USB port, update Java where needed, and add the portal URL to Java's exception list. Tokens lock after several wrong PIN attempts, so do not keep guessing. | ||
| + | |||
| + | ===== Registering the issued DSC, the half-finished step ===== | ||
| + | |||
| + | Getting the certificate from the CA is only half the job. You must register it on each portal you use: | ||
| + | |||
| + | * **Income tax:** log in at incometax.gov.in, | ||
| + | * **GST:** gst.gov.in, My Profile, Register / Update DSC, install the emsigner. The DSC must match the authorised signatory' | ||
| + | * **MCA21:** MCA has its own emsigner, attached during form submission rather than a separate registration. | ||
| + | * **GeM and e-tender portals:** each has its own signing utility, test it before a live bid. | ||
| + | |||
| + | ===== Renewal and revocation, handled differently ===== | ||
| + | |||
| + | Renewal is essentially a fresh application with video KYC again and the current fee. Your token may be reusable if compatible. Begin at least 30 days before expiry, because the certificate simply stops working at expiry with no grace. Revocation is for a lost or stolen token or a changed signatory. Revoke immediately, | ||
| + | |||
| + | ===== Escalate to the CA grievance officer, then CCA ===== | ||
| + | |||
| + | If self-help does not clear the blockage, write a formal complaint to the CA's grievance officer with your application reference, the deadline at risk, and what you have already tried, asking for resolution within three to five business days. | ||
| + | |||
| + | < | ||
| + | Subject: Urgent, DSC application stuck, Ref [application reference] | ||
| + | |||
| + | To: The Grievance Officer, [Certifying Authority], [CA email] | ||
| + | |||
| + | Applicant: [name as on PAN] PAN: [PAN] | ||
| + | Application reference: [number] | ||
| + | Type: Class 3, [Individual / Organisation] Signing | ||
| + | Purpose: [GST / MCA / Income Tax / e-tender / GeM] | ||
| + | Deadline at risk: [date and form / portal] | ||
| + | |||
| + | Current status on your portal: [paste status, screenshot attached] | ||
| + | Issue: [e.g. video KYC completed on [date] but certificate not issued / | ||
| + | revocation request of [date] not processed]. | ||
| + | Steps already taken: [ticket numbers, re-uploads, reschedules]. | ||
| + | |||
| + | I request resolution within [2 to 3] business days, or a written reason | ||
| + | and an estimated date. Given the deadline of [date], further delay causes | ||
| + | direct harm, and I will escalate to the CCA via CPGRAMS if unresolved. | ||
| + | |||
| + | [Name], [mobile], [email], [PAN / GSTIN / DIN] | ||
| + | </ | ||
| + | |||
| + | If the CA stays silent beyond a few business days, escalate to the **Controller of Certifying Authorities (CCA)**, the regulator under MeitY, through CPGRAMS at [[https:// | ||
| + | |||
| + | ===== When RTI can help, and when it cannot ===== | ||
| + | |||
| + | The **CCA is a public authority** under the RTI Act, so you can ask its CPIO for the service standards licensed CAs must meet, whether a specific CA has been found non-compliant or penalised, any advisory or circular on video KYC, and the action taken on a grievance you already filed with CCA. The **CAs themselves are private companies**, | ||
| + | |||
| + | ===== Common mistakes to avoid ===== | ||
| + | |||
| + | * **Applying too close to the deadline.** Issuance is one to two days, but a failed KYC or document issue extends it. Start at least two weeks before a critical filing. | ||
| + | * **Assuming renewal is automatic.** It is not. Initiate it, redo video KYC, and download the new certificate before the old one expires. | ||
| + | * **Forgetting to register the DSC on each portal.** The CA issuing it is not enough, register it separately on income tax, GST, and MCA. | ||
| + | * **Using the wrong emsigner version.** Each portal distributes its own. The wrong or outdated version causes detection failures even with a valid DSC. | ||
| + | * **Not revoking a lost token at once.** Revoke first, apply fresh second. | ||
| + | |||
| + | ===== FAQs ===== | ||
| + | |||
| + | ==== How long does a DSC normally take in India? ==== | ||
| + | |||
| + | For Indian nationals, one to two working days once video KYC is done and documents are correct. Foreign nationals may take three to seven. Longer delays usually mean a document mismatch, a failed or pending video verification, | ||
| + | |||
| + | ==== Is renewal the same as a fresh application? | ||
| + | |||
| + | Yes, under CCA guidelines renewal repeats video KYC and fresh documents. You need not buy a new token if the existing one is compatible. The renewed certificate carries a new validity from issuance. | ||
| + | |||
| + | ==== My DSC is not detected on GST or MCA. What now? ==== | ||
| + | |||
| + | Reinstall the portal' | ||
| + | |||
| + | ==== Can I revoke if my token is lost or stolen? ==== | ||
| + | |||
| + | Yes. Revocation exists for loss, theft, or key compromise. Log in to the CA portal, select the reason, upload the signed revocation form, and the CA updates the revocation list. Do it immediately to prevent misuse. | ||
| + | |||
| + | ==== Which authority regulates CAs in India? ==== | ||
| + | |||
| + | The Controller of Certifying Authorities (CCA) under MeitY, under the Information Technology Act, 2000. If your CA does not resolve a grievance, escalate to CCA through its grievance portal or CPGRAMS. | ||
| + | |||
| + | ==== Can I file an RTI about my DSC application status? ==== | ||
| + | |||
| + | You can RTI the CCA for regulatory standards, a CA's compliance, or action taken on a grievance you filed with CCA. You cannot RTI the private CA itself for your individual application delay. | ||
| + | |||
| + | ===== Related guides on this wiki ===== | ||
| + | |||
| + | * [[practical-guides: | ||
| + | * [[practical-guides: | ||
| + | * [[practical-guides: | ||
| + | * [[practical-guides: | ||
| + | |||
| + | Download the DSC unblock and escalation checklist (PDF).===== DSC (Digital Signature Certificate) application/ | ||
| + | |||
| + | Digital Signature Certificate (DSC) issues — delays in issuance, renewal, or revocation — can block business operations. Here is the complete guide: | ||
| + | |||
| + | - **Step 1: What is a DSC?** A DSC is a secure digital key issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), under the IT Act 2000. DSCs are used for MCA filings, GST returns, income tax returns, e-tenders, and other digital transactions. | ||
| + | - **Step 2: Types of DSC.** (a) Class 3 — highest trust level, used for e-tendering, | ||
| + | - **Step 3: Common issues.** | ||
| + | - **Application stuck:** The CA is processing the application but not issuing the DSC. | ||
| + | - **Renewal delay:** The DSC has expired or is about to expire, and the renewal is not being processed. | ||
| + | - **Revocation delay:** The DSC needs to be revoked (e.g., due to compromise, change in details), but the CA is not processing the revocation. | ||
| + | - **Identity verification: | ||
| + | - **Step 4: How to resolve.** (a) Contact the CA's customer support, (b) visit the CA's office with documents, (c) file a complaint with the CCA at [[https:// | ||
| + | - **Step 5: CCA complaint.** File a written complaint with the Controller of Certifying Authorities at: Office of the Controller of Certifying Authorities, | ||
| + | - **Step 6: Emergency alternatives.** (a) Use Aadhaar-based e-sign for income tax and GST returns (free, no DSC required), (b) use a different CA if one CA is not responsive. | ||
| + | - **Step 7: File RTI.** File RTI with the CCA asking for: (a) the status of your complaint, (b) the action taken against the CA, (c) the number of complaints against the CA, (d) the timeline for DSC issuance/ | ||
| + | |||
| + | See [[https:// | ||
| + | |||
| + | {{tag> | ||