MSTC Digital Signature Certificate (DSC) Registration

MSTC Digital Signature Certificate (DSC) Registration

Whether you are bidding for metal scrap, coal, property, or any other category on MSTC Limited’s e-auction and e-procurement platforms, one requirement is non-negotiable: a valid Digital Signature Certificate (DSC). No bid can be submitted on MSTC’s portal without a properly registered DSC. This page explains why the DSC is mandatory, which class of certificate you need, how to obtain one, and how to get it working on your MSTC bidder account.

Why a DSC Is Mandatory for MSTC Bidding

MSTC’s e-auction and e-procurement systems are legally recognised electronic platforms on which bidders submit binding financial offers. A Digital Signature Certificate serves the same legal function online that a handwritten signature and company seal serve on paper — it authenticates the identity of the person submitting a bid and ensures the bid cannot later be repudiated or altered. Under India’s Information Technology Act, a document or bid signed with a valid DSC issued by a licensed Certifying Authority carries legal validity equivalent to a physically signed document. For this reason, MSTC — like virtually all government e-procurement and e-auction platforms in India (including the GeM portal and CPPP) — makes DSC-based authentication compulsory for bid submission, and in e-procurement/tendering, for encrypting price bids so they remain confidential until the official opening.

Which Class of DSC You Need

MSTC’s e-commerce portal specifies that a Class 3 Digital Signature Certificate is required to transact on the platform. This is consistent with the wider Indian digital signature framework: the Controller of Certifying Authorities (CCA) discontinued the issuance of Class 2 DSCs across India with effect from 2021, making Class 3 the standard, and now the only, class issued for all purposes — including e-tendering, e-auction, GST filing, MCA/ROC filings, and other regulated online transactions. If you already hold an older Class 2 certificate, it will not be valid for fresh use on MSTC or any other government platform and will need to be replaced with a Class 3 certificate.

For most MSTC e-auction bidding, a Class 3 Signing certificate is sufficient to authenticate and submit your bid. Where MSTC’s e-procurement/tendering module requires price bids to be encrypted until the official bid opening — a common requirement in tender-based (as opposed to open-ascending e-auction) processes — bidders are generally expected to hold a combined Signing and Encryption certificate, since the encryption function is what keeps the price bid confidential. Because the exact requirement can vary by the specific auction or tender module you are participating in, it is worth confirming with your Certifying Authority whether you need a signing-only or a combined signing-and-encryption certificate before purchase, so you do not have to obtain a second certificate later.

How to Obtain a Class 3 DSC

Class 3 DSCs in India are issued exclusively by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities under the Ministry of Electronics and Information Technology. Several licensed CAs are commonly used by MSTC bidders, including eMudhra, Capricorn CA, (n)Code Solutions (a GNFC enterprise), and Sify SafeScrypt, among others recognised by the CCA. The general process to obtain a DSC is:

1. Choose a licensed Certifying Authority or an authorised registration agent/reseller working on its behalf.
2. Submit identity and address proof — typically PAN card, Aadhaar or another government-issued photo ID, and address proof of the applicant (for an organisation, of the authorised signatory).
3. Complete identity verification — most CAs now use Aadhaar-based eKYC or video verification in place of, or alongside, physical document attestation, which has significantly shortened issuance timelines.
4. Select the correct certificate type — Class 3, Signing only or Signing + Encryption, and the validity period (typically 1 to 3 years) — matched to what your MSTC bidding activity requires.
5. Receive the DSC on a secure USB token — Class 3 certificates for e-auction/e-tendering use are issued on a cryptographic USB token (a hardware device), not merely as a downloadable file, since the private key must remain non-exportable for legal validity.

For an organisation (company, LLP, partnership, or proprietorship) bidding on MSTC, the DSC should generally be issued in the name of the individual authorised to sign and submit bids on the entity’s behalf, with the organisation’s name reflected on the certificate where the CA’s process supports organisational certificates. Getting this name/authorisation mapping right at issuance avoids mismatch problems later when registering the DSC on MSTC.

Registering Your DSC on the MSTC Portal

Obtaining the DSC is only the first step — it must then be linked to your MSTC bidder profile before you can bid. The general sequence is:

1. Complete your MSTC buyer/bidder registration (in the relevant category — scrap, coal, property, etc.) and await account activation following MSTC’s document verification.
2. Install the DSC token drivers and any signing utility (such as the emSigner or equivalent component) required by MSTC’s portal on the computer you will use for bidding.
3. Log in to your activated MSTC account and navigate to the DSC registration/mapping section of your profile.
4. With the USB token connected, select and register the DSC against your bidder profile, following the on-screen verification steps.
5. Confirm successful mapping before the auction you intend to participate in — MSTC’s portal will generally not allow bid submission if the DSC is not correctly registered against your account.

Common Problems That Delay or Block Bidding

• DSC not mapped to the MSTC profile — the certificate is valid and installed on the system, but was never formally registered against the bidder account.
• Name/authorisation mismatch — the DSC is issued to an individual not listed as the authorised signatory on the MSTC registration documents, causing verification failure.
• Wrong certificate type — a signing-only certificate used where a signing-plus-encryption certificate is required for a given tender/auction module, or vice versa.
• Expired certificate — Class 3 DSCs are typically valid for 1 to 3 years and must be renewed before expiry; an expired DSC cannot be used to submit a bid.
• Browser, driver, or Java/signing-utility compatibility issues — MSTC’s bidding interface depends on specific browser and signing-component configurations, and mismatches are a frequent cause of last-minute bidding failures.

Because DSC issues typically surface at the worst possible time — minutes before an auction closes — it is worth testing your DSC registration and login well ahead of your first live bid, not on the day of the auction itself.

A Note on Accuracy

DSC classes, validity periods, issuance procedures, and the specific technical requirements (browser, signing utility, token drivers) of MSTC’s portal are set by the Controller of Certifying Authorities and MSTC respectively, and can be updated over time. Bidders should confirm the current DSC requirements and the list of currently empanelled Certifying Authorities directly on MSTC’s e-commerce portal before purchasing or renewing a certificate.

How Leegal Helps

Leegal assists MSTC bidders — whether new registrants or existing bidders facing DSC-related access issues — with coordinating Class 3 DSC issuance through licensed Certifying Authorities, ensuring the correct certificate type is chosen for your bidding needs, and completing the DSC mapping and registration process on your MSTC profile correctly. If DSC issues are holding up your MSTC registration or an upcoming auction, contact Leegal for prompt, hands-on assistance.