Frequently asked questions
About the secure USB token your Digital Signature Certificate lives on.
What is a DSC USB token?
A DSC token is a small USB cryptographic device (ePass, Proxkey, mToken and the like) that stores your certificate and private key securely. The private key never leaves the token, so signing is done by plugging it in and entering the token password.
Why must a Class 3 DSC be stored on a token?
CCA guidelines require Class 3 certificates to be generated and held in a FIPS 140-2 certified hardware token so the private key cannot be copied off the device. That hardware protection is what makes a token-based signature legally strong.
How much does a DSC token cost?
A token is a one-time purchase, usually a few hundred rupees, and it is reusable. When your certificate expires you download the renewed one onto the same token, so you do not buy a new token every time.
Can I store more than one certificate on a single token?
Most tokens hold multiple certificates, so an individual's signing and encryption certificates, or certificates for more than one person, can sometimes share a device depending on its capacity and drivers.
What happens if I lose my DSC token?
Have the certificate revoked so it cannot be misused, then apply for a fresh one on a new token. Because the private key is locked inside the hardware behind a password a lost token is hard to abuse, but revoking is the safe step.