Businesses and government services have moved online, Digital Signature Certificate (DSC) have become essential for secure and verified digital communication. The Ministry of Corporate Affairs (MCA) mandates the use of DSCs for company registrations, statutory filings, and annual compliance processes. Any organization interacting with the MCA through the MCA21 portal must use a DSC issued by an approved certifying authority. This guide explains what a DSC is, why it’s important, and how to obtain and use one effectively.
To check the authenticity of a person’s identity, Certifying Authorities (CAs) give out Digital Signature Certificates (DSC). DSCs use public key infrastructure (PKI) and contain information such as:
The user's name
Public key
Serial number
Expiry date
Issuer's details
Digital signature of the CA
To file online with the MCA, companies and LLPs need DSCs. This includes:
Registering an SPICe with the Companies Registry in Hong Kong
Approved by the Accountancy Regulatory Board, the annual filings are: (1) AOC-4 and (2) MGT-7
The new guidelines for KYC check are known as Director KYC
Changes among the members of the board
Generation and alteration of charges
Every document I submit via the Internet
Reason why MCA-compliant DSCs are necessary is because they guarantee the following points:
Means by which the document was signed
Trustworthiness of papers
The agreement that nothing can be disavowed by parties who signed it
Only Class 3 DSCs or Class 3 Signing Certificates are required for using DSCs with the MCA. Only after verifying a person’s identity in person or by video will a Class 3 DSC be issued.
Authorities in organisations are able to issue Drivers’ Cards to:
For handling formation and compliance matters, the directors/partners must sign relevant documents.
The company’s Authorised Signatories are responsible for carrying out operational filings.
Individuals can pursue certification or attestation in different ways as a CA, CS or Cost Accountant.
An Organization DSC is one of the Class 3 DSCs that has both the person’s name and the organisation’s name on it. It applies when the signatory stands in for an organization. A CDI is not the same as a personal DSC, as it stands for something more than a person.
A company that follows the MCA Standards for Cryptocurrency Organisation DSC guarantees the following.
An official of the organisation could be its spokesperson or representative.
All activities are traceable to the organisation.
Adds another degree of confidence in visiting government portals
DSCs are provided by CA providers, each of which is authorised by the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology (MeitY).
Choose a Certifying Authority (CA):
Fill DSC Application Form:
Verification Process:
Make Payment:
Download and Install DSC:
DSCs normally expire after 1 to 3 years.
Can be renewed before expiry.
After expiry, filing on the MCA portal will not be possible unless renewed.
Following issuance, the DSC should be entered on the MCA website.
Log on to the MCA21 Portal.
Go to Login → select Associate DSC
Type in your PAN and your job title (such as Director, Manager, Professional).
Use a USB token to pick out and set up your DSC.
Always make sure the DSC is secure; use only USB tokens that are FIPS certified.
The Certifying Authority needs your KYC file to be always up to date.
Make sure to update the DSC before it runs out to stay compliant.
Every time a new MCA form is created or a new role is added, you should register/associate the DSCs involved.
Cancel all lost or stolen DSCs as soon as it comes to your notice, by reaching out to the CA.
Information Technology Act, 2000
Indian Evidence Act, 1872 (Digital documents admissible as evidence)
Rules given by Controller of Certifying Authorities (CCA) in accordance with MeitY
MCA Notifications and guidelines
An Organization DSC that meets MCA requirements helps a company conduct its filings and governance securely and legally. It allows businesses to use government services, reduces their use of paper and guarantees real identities.
Organizations should confirm that their DSCs are valid, authorized through MCA registration and were properly issued to help ensure they can work well and follow the rules.
The information provided in this blog is purely for general informational purposes only. While every effort has been made to ensure the accuracy, reliability and completeness of the content presented, we make no representations or warranties of any kind, express or implied, for the same.
We expressly disclaim any and all liability for any loss, damage or injury arising from or in connection with the use of or reliance on this information. This includes, but is not limited to, any direct, indirect, incidental, consequential or punitive damage.
Further, we reserve the right to make changes to the content at any time without prior notice. For specific advice tailored to your situation, we request you to get in touch with us.