Encryption DSC Issuance in Mogappair Anna Nagar Road, Chennai

Statutory form prescribed for Encryption DSC engagements; carries the information set required for filing or submission to the prescribed authority.

Statutory form prescribed for Encryption DSC engagements; carries the information set required for filing or submission to the prescribed authority.

An encryption certificate issued in the name of an entity rather than an individual, carrying the entity PAN as the Subject primary identifier and the authorised signatory's CommonName as a secondary attribute. Required for GeM seller profile encryption mapping, CPP Portal bidder encryption, and certain RBI Online filings where the encryption is at entity level rather than individual signatory level. Subject field mapping accuracy is critical.

A process where a copy of the encryption private key is held in escrow with a trusted party (typically a CA or internal security custodian) to enable recovery of encrypted data in case the original key holder loses access. Controversial under CCA guidelines which generally prohibit escrow for signing keys to preserve non-repudiation, but permit it for encryption keys to address business continuity. Implementation requires careful access controls.

The bidder's encryption-certificate public key that the e-tendering portal uses to encrypt bid data such that only the bidder's encryption-DSC private key can decrypt at bid opening. The public key is extracted from the encryption certificate uploaded by the bidder during portal registration. Mismatch between the uploaded certificate and the active token at bid opening time causes decryption failure and bid rejection.

The cryptographic equivalent of a sealed tender envelope where the bid document is wrapped with the tender authority's public key at submission and remains undecryptable until the official bid opening event when the tender authority unwraps it using its private key. CPP Portal and GeM implement this through AES symmetric encryption of the bid content with the symmetric key itself wrapped using the recipient's RSA public key.

Central Public Procurement Portal operated under Department of Expenditure for e-tendering by central government departments, public sector undertakings, and autonomous bodies. Uses bid encryption requiring bidder's organisational encryption DSC, signing DSC for digital signature on bid documents, and time-locked encryption ensuring bids cannot be opened before the scheduled opening time even by portal administrators.

Government e-Marketplace's bid encryption mechanism for bids above prescribed threshold values. Uses the seller's organisational encryption certificate registered on GeM seller profile to wrap the financial bid component. Pre-defined bid window opens and closes at portal-controlled timestamps with bid opening only possible at the scheduled time by authorised buyer-side openers using the buyer's decryption keys.

Application Supported by Blocked Amount encryption framework used by Self Certified Syndicate Banks in IPO and FPO applications. Investor's bid details and PAN are encrypted using the registrar's public key to ensure confidentiality of subscription patterns until allotment. Built on the same X.509 PKI infrastructure as DSC, applies to retail and HNI investors equally, governed by SEBI ICDR Regulations.

Reserve Bank of India's online portal for regulatory return filing by banks, NBFCs, AD Bank category-I entities, and certain payment system operators. Requires encrypted submission of returns using RBI-published encryption certificate. Monthly XBRL returns under various RBI Master Directions and FEMA-related returns flow through this channel. Encryption is in addition to the signing DSC and not a substitute.

MCA21 portal encryption for sensitive document uploads such as Form MGT-7 annual return, Form AOC-4 financials, and Form DIR-3 KYC. Built on the same PKI framework as the signing requirement, additionally requires that the upload channel itself uses TLS 1.2 or higher. Self-signed certificates are rejected because MCA21 enforces certificate chain validation against CCA-licensed CAs.

Encryption between an Application Service Provider intermediary and GSTN's API gateway when bulk filing of GSTR-1, GSTR-3B, or GSTR-9 is routed through an ASP-GSP integration. The ASP's encryption certificate is registered on the taxpayer's GSTN profile and used to wrap the return data payload. ASP switch requires re-mapping of the new ASP's encryption certificate on GSTN before bulk filing can resume.

Indian Customs Electronic Commerce Gateway encryption for response messages back to importers and exporters such as assessed Bill of Entry, query messages, and Out of Charge orders. Requires registration of the user's encryption certificate separately from the signing certificate on the IEC holder profile. Without encryption certificate registration, ICEGATE response messages cannot be delivered causing container hold and demurrage.

Section 3A of the Information Technology Act 2000 introduced by 2008 amendment, providing legal recognition to electronic signatures using techniques notified by the Central Government in addition to digital signatures under Section 3. Practical relevance: it widens the legal acceptability of e-signatures beyond DSC, while DSCs continue to be the most robust form because they leverage CCA-licensed CA infrastructure for non-repudiation.