Last reviewed: 24 September 2026. A surprising number of last-minute filing failures we see aren't about the underlying compliance being wrong – the numbers are ready, the form is ready – but the Digital Signature Certificate needed to actually sign and submit it has expired, or was never registered on the specific portal being used. A DSC problem discovered on a deadline day is a genuinely avoidable crisis.
Who actually needs one
| Context | Typical requirement |
|---|---|
| MCA/ROC filings | Directors and designated partners need DSC to sign incorporation forms, annual filings (AOC-4, MGT-7), resolutions in MGT-14, DIR-3 KYC and most other company/LLP e-forms |
| GST | Companies and LLPs are required to use DSC for GST registration and returns; other entity types can often use an Aadhaar-based EVC instead |
| Income-tax e-filing | Mandatory for companies (regardless of turnover) and for taxpayers whose accounts require audit; others can typically e-verify without a DSC |
| Other portals | e-tendering, trademark e-filing, ICEGATE (customs), EPFO/ESIC filings and court e-filing systems each have their own DSC requirements to check |
The common thread: anyone who will act as an authorised signatory for a company or LLP – a director, designated partner, or authorised officer – needs to plan for a valid, correctly registered DSC well before a filing deadline is close, not after.
Why Class 3 is now the only option
Under the earlier framework, Class 2 DSCs (adequate for most routine e-filings) and Class 3 DSCs (a higher assurance level, required for e-tendering and certain high-value transactions) both existed. The Controller of Certifying Authorities discontinued Class 2 issuance, consolidating everything into Class 3 for stronger identity verification. In practical terms, this means every new DSC applicant today gets a Class 3 certificate regardless of the specific use case – there's no lighter-weight option to choose anymore, and the verification process (video KYC or in-person document verification) is correspondingly more thorough than the old Class 2 process was.
The step most people miss: portal registration
Obtaining a DSC from a licensed Certifying Authority is only step one. The DSC then needs to be separately registered on each portal where it will be used – the MCA portal against the person's DIN/PAN, the GST portal against the GSTIN's authorised signatory list, and the income-tax e-filing portal against the relevant PAN. A DSC that works perfectly well on one portal can still fail on another simply because the registration step there was never completed. This becomes a real problem specifically around director changes: when a new director is appointed and an existing one resigns, the new director's DSC needs fresh registration on every relevant portal – and until that's done, filings requiring that director's signature (including resolutions filed in MGT-14) simply cannot go through.
Worked example. A private company onboards a new director in June and the outgoing director's DSC is deregistered from the MCA portal soon after. When the company's AGM-related filings come due later in the year, someone assumes the new director's DSC – procured and working fine for personal income-tax filing – will also work for the company's MCA filings. It doesn't, because MCA portal registration for that DSC against the company's filings was never separately completed. The gap is caught only when the actual filing attempt fails, days before the deadline tied to the company's AGM timeline, forcing a rushed registration under time pressure that could have been done calmly weeks earlier.
Getting and renewing a DSC
- Apply through a licensed Certifying Authority (several are empanelled and operate online), typically via Aadhaar-based video KYC or, where preferred, physical document submission (PAN, address proof, photograph).
- Choose the validity period (commonly 1, 2 or 3 years) upfront – a longer validity avoids more frequent renewal cycles but means the token needs safekeeping for longer.
- The DSC is issued to a physical USB crypto token; it cannot be transferred to another device or exported as a file, so losing the token means starting the issuance process again, not simply recovering a password.
- Renewal should be initiated before expiry – an expired DSC cannot be used to sign anything, including a return or form that is otherwise complete and ready to file.
- For NRI or foreign directors, the process typically involves notarised and apostilled documents through specific Certifying Authorities equipped to handle overseas applicants – this takes longer than a domestic application, so it needs to be started well ahead of any filing deadline involving that director.
Common mistakes
- Letting a director's or designated partner's DSC lapse without a renewal reminder in place, discovering the expiry only when a filing fails.
- Assuming a DSC that works on one government portal automatically works on all others without separate registration.
- Not updating DSC registration promptly after a change in directors or authorised signatories, leaving a filing-shaped gap until someone notices.
- Losing the physical token and assuming it can simply be reissued with the same credentials – a lost token requires revocation and a fresh application, which takes time.
Frequently asked questions
Can I still get a Class 2 DSC if that's all I need?
No. Class 2 DSC issuance has been discontinued; all new applications are issued as Class 3 DSCs under the current Controller of Certifying Authorities framework.
If I have a DSC for my personal income-tax filing, can I use it for my company's MCA filings too?
The same physical DSC can potentially be used, but it must be separately registered on the MCA portal against the specific DIN/PAN before it will work for company filings – registration on one portal does not carry over to another.
What happens if my DSC expires while a filing is in progress?
An expired DSC cannot sign anything, regardless of how complete the filing is. The DSC must be renewed (or a fresh one issued) before the signing step can be completed, which can cause deadline pressure if not planned for in advance.
I lost my USB token. Can support just reset my DSC?
No. A DSC cannot be recovered from a lost token since it isn't stored anywhere else. The token must be revoked and a fresh DSC application submitted, which takes the same time as an original application.
Do all directors of a company need their own DSC, or just one?
Generally, each director or designated partner who will act as an authorised signatory for filings needs their own DSC, since the DSC is tied to that individual's identity, not the company generically.
How long does it take for an NRI director to get a DSC?
Longer than a domestic application, since it typically requires notarised and apostilled documents processed through Certifying Authorities equipped for overseas applicants. This should be initiated well ahead of any filing deadline involving that director.
We track DSC validity and portal registration alongside your ROC and tax filing calendar, so nothing stalls at the last moment.
ROC Filing Services Income Tax Filing Talk to usThis article summarises Digital Signature Certificate requirements for company and LLP filings as understood on the date of review. General information, not advice on your specific facts – confirm details against the current forms/portal and consult us or your tax advisor before acting. CA Somesh Chandak & Associates, FRN 158694W.