Register Subscribe +91 9987273457

Login


Forgot Password?

OR

Login with Google

REGISTER


Continue with Google

OR

Email ID Already Exist !

What Users Get:

  • Website Access to Download Unlimited Number of Tenders

  • Customised Daily Email Alerts for Chosen Product/Services

  • Facility to Download and Export Tenders in Excel Format

  • Access to Huge Archival Database of Tenders

  • Help in Getting Digital Signature Certificates

  • Tender Bidding Support Services From Expert Consultant

    • Complete Your Profile


    Change Password


    Request a Password Reset


    Enter your email below and we'll send you instructions to reset your password.

    Home > Blogs > Digital Signature Certificate (DSC) for eTendering

    By Admin | Posted on 04 Nov 2025

    Digital Signature Certificate (DSC) for eTendering

    Digital Signature Certificate (DSC) for eTendering

    Introduction

    Almost every government tender in India is now floated, submitted and evaluated online and the one thing that decides whether your bid is even accepted is your Digital Signature Certificate (DSC). Whether you are bidding on the Maharashtra eProcurement portal (Mahatenders), GeM, the Central Public Procurement Portal (CPPP) or any other state system, the portal uses your DSC to confirm who you are, to sign your documents and to lock your bid so that nobody can alter it.

    For a contractor, supplier or MSME, a Digital Signature Certificate for e-tendering is not a formality. An expired certificate, a wrong certificate type or a token that will not connect can cost you a tender you have spent weeks preparing. This guide explains what a DSC is, why it is mandatory, what the law says, which class and type you need, how to get and renew one and how to avoid the errors that lead to bid rejection.

    Table of Contents

    What Is a Digital Signature Certificate and How Does It Work?

    A Digital Signature Certificate is the electronic equivalent of a physical signature. It is issued by a licensed Certifying Authority (CA) and binds your identity to a pair of cryptographic keys. Just as a passport proves who you are at a border, a DSC is your secure digital identity in the online procurement ecosystem.

    The certificate contains details such as your name, email address, organisation (for organisation certificates), the issuing CA and its validity dates. The private key stays inside a secure USB token and only you, with your PIN, can use it. When you sign a tender document, the portal checks the signature against your certificate. If the document is changed even slightly afterwards, the signature no longer matches and the tampering is detected.

    In simple terms, a DSC does three jobs in an e-tender: it proves who you are (authentication), it proves the bid has not been altered (integrity) and it stops you from later denying that you submitted it (non-repudiation).

    Why a DSC Is Mandatory for Government e-Tenders

    Government departments, PSUs and state agencies run their tenders on eProcurement systems where there is no physical envelope, counter or signature. The DSC replaces all of these. Without it, a bidder cannot register, sign documents or submit a bid.

    • Identity of the bidder: The portal knows a genuine, verified person or organisation is bidding.
    • Bid integrity: Signed and encrypted bids cannot be read or changed before the scheduled opening.
    • Legal weight: A digitally signed bid is a valid, enforceable offer.
    • Audit trail: Every login, signature and submission is recorded against your certificate, which supports the transparency expected in public procurement.

    For MSMEs and first-time bidders, this also removes geographic barriers. You can bid for tenders in another state without travelling, provided your DSC and documents are in order.

    Where You Need a DSC: GeM, CPPP, Mahatenders and State Portals

    PortalTypical use of DSC
    CPPP (eprocure.gov.in)Bidder registration, login, bid signing and submission for central government tenders
    GeM (gem.gov.in)Seller and buyer authentication, signing of bids and other documents where required
    Mahatenders (mahatenders.gov.in)Registration and submission of bids for Maharashtra government departments and agencies
    Other state portalsKarnataka, Telangana, Andhra Pradesh, Gujarat, Rajasthan and others use their own systems, each with its own DSC mapping steps
    PSU, railway and bank portalsBuyer-specific e-tendering platforms with similar DSC requirements

    Browse tenders by state to see where your DSC will be used most: Karnataka, Gujarat, Telangana, Andhra Pradesh and Rajasthan. If you bid in Karnataka, our KPPP registration and bid tracking guide shows how the portal login works.

    Legal Validity of a DSC Under the IT Act, 2000

    Digital signatures are recognised under the Information Technology Act, 2000. Section 3 provides for authentication of electronic records using digital signatures, Section 4 gives legal recognition to electronic records and Section 5 gives legal recognition to electronic signatures. In practice, this means a document signed with a valid DSC is treated as legally equivalent to one signed by hand.

    Only a Certifying Authority licensed under Section 21 of the Act, with the approval of the Controller of Certifying Authorities (CCA), Government of India, can issue a recognised certificate. Under Section 35, the CA issues the certificate after verifying the applicant. The Act also places a duty on you, the subscriber, to keep your private key under your control (Section 42). If the key is lost or misused, the CA must be told promptly so that the certificate can be revoked.

    Electronic records and signatures can also be produced as evidence in court, under the Bharatiya Sakshya Adhiniyam, 2023, which replaced the Indian Evidence Act. This is why a signed e-bid carries real legal and contractual weight.

    Class 3 DSC: The Certificate Used for e-Tendering

    India earlier had Class 1, Class 2 and Class 3 certificates. The CCA discontinued fresh issuance of Class 2 certificates from 1 January 2021 and Certifying Authorities now issue Class 3 certificates in their place. Class 1, which only confirms a name and email address, has never been suitable for tenders.

    • Class 1: Basic identification, not used for e-tendering.
    • Class 2: No longer issued or renewed. An older certificate may still work until it expires, but it cannot be renewed as Class 2.
    • Class 3: The highest assurance level, with stricter identity verification. It is the certificate accepted by e-procurement portals for bid signing and submission.

    When you apply, ask for a Class 3 DSC for tender or e-procurement use so that you receive the right certificate on a secure token.

    Signing vs Encryption Certificate: What a Bidder Needs

    DSCs come as signing certificates, encryption certificates or a combination. This is a frequent source of confusion.

    • Signing certificate: Used to digitally sign documents, forms and bid submissions.
    • Encryption certificate: Used to encrypt data so that only the intended recipient can read it.
    • Signing and encryption (combined): Many e-procurement portals ask for both, because bids are signed by the bidder and encrypted for secure submission.

    Before buying, check the portal's bidder instructions or the tender document. When in doubt, choose the combined signing and encryption certificate, which is the safer option for e-tendering.

    Individual vs Organisation DSC: Who Should Hold It?

    An individual certificate is issued in a person's own name. An organisation certificate carries the name of the company, firm or department along with the authorised signatory. For most contractors and suppliers bidding on behalf of a business, an organisation certificate in the name of the authorised signatory (a director, partner, proprietor or authorised representative) is the expected choice. Some tenders specifically ask that the person who signs the bid must be authorised through a board resolution or authorisation letter.

    The certificate name should match the name registered on the portal and the name on your bid documents. A mismatch between the two is a common reason for rejection.

    Documents Required for a Class 3 DSC

    Requirements vary slightly by Certifying Authority, but you should keep the following ready:

    • For an individual certificate: PAN, Aadhaar or other valid identity and address proof, a passport-size photograph, an active email ID and a mobile number linked with Aadhaar where e-KYC is used.
    • For an organisation certificate: Everything above for the authorised signatory, plus proof of the organisation such as GST registration, incorporation certificate, partnership deed, proprietorship proof or Udyam registration and an authorisation letter where required.

    Use the same name, spelling and email across all documents. Small mismatches slow down verification more than anything else.

    How to Get a DSC for e-Tender: Step by Step

    • Step 1: Select a licensed Certifying Authority. Choose a CA from the list published on the CCA website.
    • Step 2: Choose the certificate. Select Class 3, the person type (individual or organisation) and the certificate function (signing, encryption or both).
    • Step 3: Submit your KYC. Upload identity, address and organisation documents as requested by the CA or its Registration Authority.
    • Step 4: Complete verification. Depending on the CA and current CCA guidelines, this may involve Aadhaar e-KYC, document checks and a video or in-person verification.
    • Step 5: Receive the token. The certificate is issued on a secure USB token protected by a PIN. Change the default PIN immediately.
    • Step 6: Install and test. Install the token driver and the CA's utility, then check that the certificate is detected in your browser and on a test portal.

    Apply at least a week before you plan to bid. Verification delays, courier time and driver problems are common when someone applies close to a deadline.

    How to Choose a Certifying Authority

    • Confirm that the CA is licensed by the CCA.
    • Compare the all-inclusive price, including the token, verification and delivery.
    • Check how quickly and by what method verification is done.
    • Look for clear support for token installation, driver problems and portal-specific issues.
    • Ask about renewal reminders and the process for revoking a lost token.

    Cost, Validity and Renewal

    Validity: DSCs are typically issued for 1, 2 or 3 years. A longer validity often works out cheaper per year, but choose one that fits your bidding plans.

    Cost: Prices vary by provider, validity, certificate function and whether the USB token is included. Ask for the total price and avoid comparing a quote with a token against one without.

    Renewal: Renew your DSC well before it expires, through the same CA, by submitting updated documents and verification. Because Class 2 has been discontinued, a renewal is issued as a Class 3 certificate. After renewal, update the certificate on every e-procurement portal where you are registered, using the portal's option for changing or updating the DSC.

    A practical rule for bidders: never start preparing a bid if your DSC expires before the tender's bid opening and award stage. A certificate that lapses mid-process can cause problems with submission and later communication.

    How to Register and Map Your DSC on an e-Procurement Portal

    • Step 1: Open the portal's bidder or contractor registration page in the browser and version it recommends.
    • Step 2: Enter your business and contact details.
    • Step 3: When asked, select the DSC from your token and enter the PIN so that the certificate is attached to your bidder profile.
    • Step 4: Complete any verification, such as email or approval by the portal administrator.
    • Step 5: Log in with your user ID and DSC, then check that your profile and certificate details show correctly.

    Each bidder registration is generally linked to one certificate. Trying to map the same DSC to several bidder accounts, or using a DSC that belongs to someone else, is a common cause of registration failure and later disputes. Follow each portal's own instructions, since CPPP, GeM, Mahatenders and other state portals differ in details.

    How the DSC Is Used During Bid Submission

    On a typical e-procurement portal, your DSC is used at several points:

    • Login: Authenticating you as the registered bidder.
    • Signing documents: Digitally signing the uploaded documents and forms where required.
    • Encrypting the bid: Protecting the bid so that only authorised officers can open it at the scheduled time.
    • Final submission: Completing the submission step, often called freezing or final submit, after which no changes can be made.

    A bid that is only saved but not finally submitted is not treated as submitted. After final submission, download or print the acknowledgement and keep it with your bid file. Do not wait for the last hour; portals are slow near deadlines and a DSC or token problem needs time to fix. Track live opportunities through government authority tenders so you always have time to prepare.

    Common DSC Errors and How to Fix Them

    ProblemLikely causeWhat to do
    Certificate not detectedToken driver missing, USB port issue or another token already connectedReinstall the driver, try another port and keep only one token plugged in
    PIN blockedToo many wrong PIN attemptsContact your CA for token unblocking
    Certificate expiredValidity date has passedRenew through your CA and update the certificate on the portal
    Signing fails or the page does not respondWrong browser, Java or utility setting, or a pop-up blockerUse the portal's recommended browser and utility and allow the required pop-ups
    Name mismatchCertificate name differs from the registered bidder or signatoryCorrect the portal profile or obtain a certificate in the right name
    Wrong certificate selectedSigning and encryption certificates both present, or older certificates on the tokenSelect the correct and valid certificate when the portal asks

    Test your setup on the portal a few days before the deadline, not on the closing day.

    Protecting Your DSC Token

    • Change the default PIN and never share it, even with staff or consultants.
    • Do not leave the token plugged in on a shared or public computer.
    • Keep a note of the certificate's expiry date and set reminders 30 days ahead.
    • If the token is lost, stolen or suspected to be misused, inform your CA immediately so that the certificate can be revoked. This follows your duty as a subscriber to keep the private key under control.
    • Where more than one person works on tenders, define clearly who holds the token and who is authorised to sign.

    Mistakes That Lead to Bid Rejection

    • Using an expired certificate or an incorrect certificate class
    • Applying for a DSC too close to the deadline
    • Choosing a signing-only certificate when the portal needs signing and encryption
    • Name on the DSC not matching the bidder or authorised signatory
    • Mapping one DSC to multiple bidder accounts
    • Leaving the bid saved but not finally submitted
    • Ignoring browser, driver or utility instructions of the portal
    • Not updating the portal after renewing the certificate

    How IndianTenders.in Helps You with DSC and e-Tendering

    IndianTenders.in brings central, state and PSU opportunities together, so you can find tenders early and act on them without last-minute stress. Along with tender information, our team supports bidders with the practical side of e-tendering:

    • Guidance on choosing the right Class 3 DSC for your tender and portal
    • Assistance with DSC application, token installation and configuration
    • Support with DSC mapping and renewal reminders
    • Help for MSMEs and first-time bidders on Mahatenders, GeM and CPPP

    Explore current digital signature tenders, digital signature certificate tenders and USB token tenders to see how buyers procure these services, or browse all latest government tenders in your sector. Contact the IndianTenders.in team today to get your DSC ready before your next bid deadline.

    Conclusion

    A Digital Signature Certificate is the foundation of secure e-tendering in India. It verifies who you are, protects your bid from tampering and gives your submission the legal validity of a handwritten signature under the IT Act, 2000. For most tenders, a valid Class 3 certificate, in the correct name and with the right signing and encryption function, is the first thing you need.

    Get your DSC early, keep the token secure, track the expiry date and test it on the portal before every major bid. Do that and you can concentrate on what wins tenders: strong documents, competitive pricing and timely submission. For daily tender updates and hands-on support, stay connected with IndianTenders.in.

    Tags

    #DigitalSignatureCertificate #DSCforTender #Class3DSC #eTendering #eProcurementIndia #MaharashtraTenders #GovernmentProcurement #DigitalIdentity #eToken #TenderBidding #IndianTenders #MSMEIndia

    Frequently Asked Questions (FAQs)

    What is a Digital Signature Certificate (DSC)?

    A Digital Signature Certificate (DSC) is a secure electronic key that validates the identity of an individual or organisation when conducting online transactions. It serves as a digital equivalent of physical documents like a driver’s license or PAN card and is used to sign electronic documents legally and securely.

    Which DSC class is required for e-tendering?

    A Class 3 DSC is required. The CCA discontinued fresh issuance of Class 2 certificates from 1 January 2021, and Certifying Authorities now issue Class 3. Class 1 only confirms a name and email and is not suitable for tenders.

    How can I get a DSC for e-tender online?

    Choose a CCA-licensed Certifying Authority, select a Class 3 certificate for tender use, upload your KYC documents and complete verification, which may include Aadhaar e-KYC and video verification depending on the CA. The certificate is then issued on a secure USB token. Install the token driver and test it on the portal before your bid deadline.

    How much does a DSC for e-tender cost?

    The price varies by Certifying Authority, validity period (1, 2 or 3 years), certificate function (signing, encryption or both) and whether the USB token is included. Always compare the all-inclusive price, including token, verification and delivery, rather than the certificate fee alone.

    Is a DSC mandatory for government e-tenders in India?

    Yes. Government e-procurement portals, including CPPP, GeM and state portals such as Mahatenders, require a valid DSC for bidder login, document signing and bid submission. The exact certificate type can vary by portal, so check the bidder instructions in the tender document.

    What is the difference between Class 2 and Class 3 DSC?

    Class 2 was a medium-assurance certificate for filings and registrations, and it is no longer issued or renewed. Class 3 is the higher-assurance certificate with stricter identity verification and is now the standard for e-tendering and other government filings. An old Class 2 certificate may work until it expires, but it cannot be renewed as Class 2.

    What documents are required for a Class 3 DSC?

    For an individual certificate you typically need PAN, Aadhaar or other identity and address proof, a photograph, an email ID and a mobile number. For an organisation certificate you also need proof of the organisation, such as GST registration, incorporation certificate or Udyam registration, and an authorisation letter where required. Exact requirements depend on the CA.

    How long does it take to get a DSC?

    Timing depends on how quickly your documents are verified and how the token is delivered. Complete, matching documents and a smooth verification usually shorten the process, but you should apply at least a week before your bid deadline to allow for delays.

    What is the validity of a DSC?

    DSCs are usually issued for 1, 2 or 3 years. Once the validity ends, the certificate cannot sign or submit bids. Renew it before expiry and keep a reminder set well ahead of any tender you plan to bid on.

    How do I renew a DSC?

    Renew through the same Certifying Authority by submitting updated documents and completing verification. Since Class 2 has been discontinued, a renewal is issued as a Class 3 certificate. After renewal, update the certificate on every e-procurement portal where you are registered.

    What is the difference between a signing and an encryption DSC?

    A signing certificate is used to digitally sign documents and forms. An encryption certificate is used to encrypt data so that only the intended party can read it. Many e-procurement portals need both, so a combined signing and encryption certificate is the safer choice unless the portal says otherwise.

    Should I take an individual or an organisation DSC for tenders?

    If you bid on behalf of a company, firm or department, an organisation certificate in the name of the authorised signatory is usually expected. An individual certificate is issued in a person's own name. Make sure the name on the certificate matches your portal registration and bid documents.

    Which DSC should a proprietor or MSME take for tendering?

    A proprietor or MSME owner can generally take a Class 3 certificate in their own name as the authorised signatory, with organisation details or business proof where the CA or portal asks for it. Choose the type the tender and portal require, and keep your authorisation documents ready.

    Is a digital signature legally valid in India?

    Yes. Under the Information Technology Act, 2000, electronic records and electronic signatures have legal recognition, and a document signed with a valid DSC is treated as legally equivalent to a handwritten signature. Only certificates issued by CCA-licensed Certifying Authorities are recognised.

    What should I do if my DSC token is not detected?

    Check that the token driver is installed, try a different USB port, remove any other token that is plugged in and restart the browser. Make sure you are using the portal's recommended browser and utility. If the token still is not detected, contact your Certifying Authority's support.

    What if my DSC PIN is forgotten or blocked?

    After too many wrong attempts, the token PIN gets blocked. Contact your Certifying Authority to get the token unblocked or the PIN reset. Change the default PIN when you first receive the token, and never share it with anyone.

    What happens if my DSC expires before the tender closes?

    An expired certificate cannot sign or submit bids. If it expires before you submit, renew it immediately and update it on the portal. If it expires after submission, check the tender terms and portal instructions, since later communication or clarifications may need a valid certificate.

    What should I do if my DSC token is lost or stolen?

    Inform your Certifying Authority immediately so that the certificate can be revoked, and apply for a new one. Under the IT Act, a subscriber has a duty to keep the private key under control, and prompt reporting reduces the risk of misuse.

    Can I use the same DSC on multiple e-procurement portals or for multiple firms?

    You can usually use the same valid DSC to register on different portals in your own name. However, mapping one DSC to multiple bidder accounts on the same portal, or using it for different firms, is commonly rejected. Follow each portal's rules and get separate certificates where needed.