Class 3 DSC Explained Why Tenders and Government Portals Need It
Every tender notice says the same line — Class 3 DSC required — and every first-time bidder asks the same question: what is Class 3, and why will nothing else do? The class is about how strongly your identity was verified before the certificate was issued.
✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 7 minute read
🎥 Watch the full video — the DSC from this page, signing a whole folder of tender PDFs at once
Digital Signature Certificates are issued in classes, and the class describes the level of identity checking done by the Certifying Authority before issuing. Portals that handle money and contracts demand the highest class in normal use — Class 3. This page explains the classes in plain words, what changed with Class 2, and how to be sure the DSC you buy matches the work you do.
The DSC classes at a glance
🥉 Class 1 — basic email and name verification onlyLowest
🥈 Class 2 — identity checked against documents; largely phased out for new usesLegacy
🥇 Class 3 — strongest proofing, in-person or video verifiedTenders
☝️ Higher class means the CA verified harder that you are really you — that is what portals are buying
1
What the Class Actually Certifies
The cryptography is the same strength in every class. The difference is the paperwork and proofing behind it.
Class 1: only an email ID and basic details are verified — suitable for low-risk uses, not accepted for official filings
Class 2: identity verified against government-issued documents in a database — historically used for income tax and MCA filings
Class 3: the applicant's identity is verified most rigorously, including in-person or video verification as per CCA guidelines — built for high-value, legally serious transactions
2
Why Tenders Insist on Class 3
A submitted bid is a legal commitment with money behind it.
E-procurement portals, GeM and government buyers need non-repudiation — the bidder cannot later deny the bid was theirs
Class 3 proofing ties the certificate to a physically verified person, which is what gives the signature its legal weight under the IT Act, 2000
For company bids, portals typically expect the Class 3 DSC of an authorised signatory of the organisation, matching the name in the bid documents
3
What Happened to Class 2
Many older users still hold Class 2 certificates, so this point matters.
From 2021 onwards, the CCA framework moved most official uses to Class 3, and Class 2 issuance for the earlier purposes was discontinued
Existing Class 2 DSCs generally remained usable until their expiry for the purposes they were accepted for, but new applications and renewals are directed to Class 3
If a portal rejects your Class 2 DSC today, it is following current rules — the practical fix is a Class 3 issuance, not a settings change
4
Buying the Right DSC the First Time
A two-minute check at purchase saves a rejected bid later.
Confirm the exact requirement on your portal's DSC help page — class, and whether it must be a signing or combined sign-and-encrypt certificate
Buy only from a licensed Certifying Authority or its authorised partner — the CA list is published by the CCA
Choose validity (one to three years) based on how regularly you bid — longer validity means fewer renewal surprises
Complete the video or in-person verification honestly and in your own presence — the certificate is your legal identity
5
One Person, One Certificate — No Sharing
The class system only works if certificates stay personal.
A DSC is issued to a named individual, even when bought for company work
Signing a bid with a colleague's or the owner's DSC when you are not that person breaks the entire chain of trust — and the signature still legally binds the certificate holder
Staff who sign for the organisation need their own DSC and proper authorisation letters from the organisation
🔴 Honest note: a DSC is not a software licence you can share around the office. It is your verified legal identity in digital form. Whoever holds the token and PIN holds the power to sign as that person — guard it exactly like that.
🎥 See a Class 3 DSC Do Real Work in the Video
The full bulk-signing demo — the same certificate class this page explains, signing tender PDFs in one run.
Can I use a Class 3 DSC for income tax and MCA as well?
Yes. Class 3 is the higher-assurance certificate and is accepted where Class 2 was earlier used, including tax and MCA filings, in addition to tenders. One Class 3 DSC generally covers all your official signing.
Is a Class 3 DSC valid for three years by default?
Validity is a purchase choice — Class 3 DSCs are commonly issued for one, two or three years. The class describes the proofing level, not the duration.
My company bids as a partnership or firm. Whose DSC is used?
The bid is signed with the DSC of an authorised signatory — a partner or authorised person whose authority the organisation documents. Portals spell out their exact requirement; match the name and authorisation before submission day.
This guide is based on the Technical Anshu bulk PDF signing with DSC video • Stuck on any step? Ask in the video comments — help is available there 🙏