Status Check, Procedures, Facilities

Organisation : Controller of Certifying Authorities
Facility : How to get Digital Signature Certificate
Website : http://www.cca.gov.in/cca/?q=Faq.html

How to get Digital Signature Certificate :

The Office of Controller of Certifying Authorities (CCA), issues Certificate only to Certifying Authorities(CAs). CAs issue Digital Signature Certificates to end-entities.

Related : Controller of Certifying Authorities Time Stamping Services Guidelines for Certifying Authorities CA : www.statusin.in/34553.html

FAQ :
How do I get a Digital Signature Certificate (DSC)?
** One can approach any one of the Licensed CAs for getting a Digital Signature Certificate. The list of Licensed CAs is available at .cca.gov.in/cca/?q=licensed_ca.html. The different categories of certificates offered by different CAs are listed at cca.gov.in/cca/?q=CAServicesOverview.html. The contact address of each CA and their help desk numbers are available in the disclosure record of each CA published at cca.gov.in/cca/?q=licensed_ca.html.

What are the identity verification options available to a DSC applicant?
The identity verification options available to a DSC applicant are :
** Paper based application form and supporting documents(all attested)
** Aadhaar eKYC based verification for Aadhaar holder(no supporting documents are required)(no attestation)
** Banking KYC or eKYC. Banking eKYC is dependent on CAs tie-up with banks for getting electronic KYC information of banking customers.(no attestation required)

Which are the CAs issuing Class 2 and Class 3 DSCs to public at present? Please provide their contact details?

Why self attested documents are not accepted by CAs for DSC issuance?
** Wherever self attestation has been facilitated as a part of submitting an Application for service, the original documents are required to be produced at the point of getting the service. In the case of Digital Signature Certificate (DSC) Applicants, they can directly approach Certifying Authorities (CA) at the CA premises with original supporting documents, in which case self-attestation of copies will be sufficient.

How does one know about the different classes of certificates offered by the Licensed CAs?.
** The services offered by CAs are available on the website of each CA. The summary of service offered by CAs are available at .cca.gov.in/cca/?q=CAServicesOverview.html..

Where can I find the Identity Verification and key storage requirements for different type and Class of Certificates?
** The verification requirements are mentioned in the Identity Verification Guidelines (CCA-IVG) and Key generation and storage requirements are mentioned in Section 6.1.1 of X.509 Certificate Policy for India PKI (CCA-CP). Both documents are available at cca.gov.in

What are the different classes of Digital Signature Certificates?
Class 1 :
The verification requirements are :
(i) Aadhaar eKYC Biometric or
(ii) paper based application form and supporting documents or
(iii) Aadhaar eKYC OTP + Video Verification .
** The Private Key generation and storage can be in software.

Class 2 :
The verification requirements are :
(i) Aadhaar eKYC Biometric or
(ii) Paper based application form and supporting documents or
(iii) Aadhaar eKYC OTP + Video Verification .
** The Private Key generation and storage should be in Hardware cryptographic device validated to , FIPS 140-2 level 2.

Class 3 :
The verification requirements are :
(i) Aadhaar eKYC Biometric or
(ii) Paper based application form and supporting documents and (physical personal appearance before CA or Video verification) or
(iii) Aadhaar eKYC OTP + Video Verification .
** The Private Key generation and storage should be in Hard ware cryptographic device validated to FIPS 140-2 level 2

Aadhaar e-KYC-OTP:
** The verification requirement is Aadhaar eKYC OTP.

Aadhaar e-KYC-Biometric:
** The verification requirement is Aadhaar eKYC Biometric.
** For more details please refer to section 1.3.5 of X.509 Certificate Policy for India PKI(CCA-CP)