DSC renewal, done before the deadline finds you
A digital signature certificate cannot be extended — renewal means a fresh Class 3 certificate on your existing USB token, with fresh eKYC and video verification. We handle the issuance, then re-register the new certificate on every portal you use, so signing never stops.
Typical reply within minutes during office hours.
Stop researching. Get it done.
You could spend another hour reading — or send us one WhatsApp message and have the exact fee, document list and timeline in writing before dinner.
Over 1,200 applications assisted since 2017. The person who replies is the person who does the work.
"Renewal" is really a fresh certificate — and that changes how you plan it
The most useful thing to know about DSC renewal is that, technically, it does not exist. A certificate's validity — one, two or three years — cannot be stretched; what everyone calls renewal is the issuance of a brand-new Class 3 certificate by a CA licensed by the Controller of Certifying Authorities (CCA). Three things follow. Identity checks are not waived: renewal needs fresh eKYC and live video verification, though a valid eKYC account with the same CA — such accounts last up to two years — speeds things up. The new certificate carries a new serial number, so every portal that knew your old DSC must be introduced to the new one. And because renewal is legally a new purchase, you may renew through any provider, not only the original one.
We are a DSC facilitator, not a Certifying Authority — certificates come from CCA-licensed CAs. Our work is the part most sellers skip: getting the renewed certificate onto your token, registered on your portals and tested before your next filing. New to digital signatures entirely? Start with the Class 3 DSC page or the DSC services overview — this page assumes you already hold one.
When to start — and what an expired DSC actually costs you
Start about two weeks before expiry. Not because issuance is slow — an individual paperless renewal is typically issued within 24 hours — but because issuance is only half the job. The renewed DSC still has to be downloaded to your token, registered on each portal and tested, and that is better done calmly than at 11 pm on a due date.
What actually happens if the certificate lapses mid-season:
- GST filings stop for companies and LLPs, for whom DSC signing is the required mode. Late fees do not pause with the return — see our GST return filing service if a deadline is already burning.
- MCA forms cannot be signed — directors mid-way through an incorporation, charge filing or DIR-3 KYC find the form rejecting their signature.
- Tender bids miss their window. A bid you cannot sign and encrypt before closing time is simply not submitted; there is no appeal to the clock.
- Income-tax signing halts for companies and audit cases where a DSC is mandatory for the return.
To be clear, there is no penalty for the expiry itself — you simply buy a new certificate the same way. The entire risk is the filing you cannot make during the gap, which is why the fix is calendar discipline, not paperwork skill.
The renewal process, step by step
For an individual Class 3 certificate on the paperless route, the sequence typically completes within 24 hours; organisation certificates typically take one to three working days because their documents are verified manually by the CA.
- Step 1 — Send us your certificate detailsA WhatsApp message with your name, certificate type, expiry date and a photo of your USB token is enough. We confirm what you need, check the token model, and send one fixed written quote. Nothing is charged until you approve it.
- Step 2 — Application and eKYCFor individuals the paperless Aadhaar-OTP route is fastest — Aadhaar number plus the OTP on your Aadhaar-linked mobile, with PAN as per the CA's form. A PAN-based route exists for those who cannot use Aadhaar OTP. Organisation certificates additionally need the authorisation documents described on the organisation DSC page.
- Step 3 — Mobile and email OTP verificationCCA rules make both mandatory: an SMS OTP on your own mobile and a verification link or OTP on your email. Someone else's number or a disposable email is not permitted and will stall the application.
- Step 4 — Live video verificationA short recorded video — live only, never an uploaded clip — in which you appear on camera and read out the codes shown. It takes minutes; we stay on WhatsApp with you in case anything trips. The CA must issue within two days of a successful video, so this step and issuance sit close together.
- Step 5 — Certificate download to your tokenOnce the CA approves, the new certificate is downloaded onto your existing USB token — at our Vadodara office, or with remote guidance if you are elsewhere.
- Step 6 — Portal re-registration and a test signatureWe update the DSC registration on each portal you use, remove the expired certificate, and finish with a test signing so you know — not hope — that your next filing will go through.
What we cannot do
We cannot extend an existing certificate, skip the video verification, or issue certificates ourselves — issuance rests entirely with the CCA-licensed Certifying Authority. What we do is prepare the application correctly, sit with you through verification, and finish the portal work that turns a certificate into something you can actually file with. Timelines we quote are typical, not guaranteed.
Reusing your existing USB token
A renewed certificate does not automatically mean a new token. The token is just the vault — CCA rules require the private key to live inside FIPS-validated hardware — and one token can hold several certificates at once, including the old and new side by side during changeover. Three situations decide it:
- Token in good order, current model — reused as-is; the new certificate is simply downloaded onto it. This is the common case.
- Older token predating current certificate formats — may need the vendor's CSP/firmware upgrade tool first. We run this check before quoting.
- Lost, damaged or PIN-blocked token — needs a replacement, since private keys cannot be copied between tokens; the certificate is downloaded fresh onto the new one.
Unsure what model you have? The USB token page covers models, PINs and care in detail. Either way, our quote states plainly whether a token is included — you will never discover a hardware charge after the fact.
Re-registering the renewed DSC on each portal
This is the step that catches most people out. Portals store the specific certificate you registered — its serial number, not just your name — so the renewed DSC is a stranger to them until introduced. Signing before re-registering fails with an unhelpful error, which is how "my renewal worked but nothing signs" support calls are born. Where your old certificate was registered, we update:
| Portal | Where the update happens | Notes |
|---|---|---|
| GST portal | Services → User Services → Register/Update DSC | Needs the emSigner utility running; only the PAN named in the GST registration can register the DSC. Full walkthrough on the GST DSC page. |
| MCA (V3) | "Register DSC" under the user's profile, via the MCA DSC utility | Directors associate against their DIN, professionals against their membership number. Details on the MCA DSC page. |
| Income Tax e-filing | My Profile → Register DSC | The portal's own manual describes re-registration on expiry; the signing utility and token drivers must be in place. See the income tax DSC page. |
| DGFT, EPFO, tender portals | Each portal's own DSC/token registration screen | DGFT matches the certificate against the PAN or organisation name in your IEC profile, so mismatches surface here. Tender portals vary — we handle the ones you actually use. |
Alongside registering the new certificate, the expired one should be removed from each portal — leaving it in place is a common cause of signing errors. If any of this happens on a machine we did not set up, the installation and setup page covers the drivers and utilities involved.
Our renewal-reminder service
Almost every expired-DSC emergency we see has the same cause: nobody owns the expiry date. The certificate was bought two or three years ago, the buyer may have changed roles, and the date sits in no one's calendar until a portal refuses a signature.
So we made it our job. Every certificate we issue goes into our expiry register, and ahead of expiry we contact you — WhatsApp first, phone if needed — confirm nothing has changed, and start the renewal so the new certificate is live before the old one dies. For businesses running several certificates across directors and signatories, we track the whole set together and can quote the renewals as one conversation; see DSC pricing for how our written quotes work.
The reminder costs nothing; you pay only for renewals you actually authorise. And if you hold a DSC bought elsewhere, we are happy to add its expiry to the register when you renew through us the first time.
The bottom line
There are two ways forward from here: bookmark this page and handle each step yourself, or send one WhatsApp message and have our team carry it. Either way you now know exactly what should happen — which is how we like our clients: informed.
DSC renewal — straight answers
Can my existing DSC be extended instead of renewed?
How early should I start my DSC renewal?
What happens if my DSC expires before I renew it?
Do I have to complete video verification again for renewal?
Can I reuse my existing USB token when I renew?
Will my renewed DSC work on portals automatically?
How long does DSC renewal take?
What does DSC renewal cost?
What is your renewal-reminder service?
Expiring soon? Renew it this week, not that night
Send us your certificate type, expiry date and a photo of your token on WhatsApp. You get a fixed written quote, and once you approve, an individual paperless renewal is typically issued within 24 hours — with portal re-registration included.