Buy DSC Renew DSC Reissue DSC Download DSC Certificate Status Record Video Partner Login Login eKYC A/c
Home About Digital Signature Certificate Document Signer Certificate Hardware Security Module PKI Tokens SSL Certificates Repository White Paper Download CRL CCA Guidelines Videos Customer Service Downloads Career Become a Partner Pricing Contact

PKI Tokens

A tamper-resistant hardware locker for your Digital Signature Certificate — FIPS 140-3 Level 3 certified, CCA-compliant, and built for years of daily signing use.

PKI Token for Digital Signature
What is a PKI Token?

Your Private Key Stays Inside the Token — Always

A PKI Token is a FIPS-certified USB cryptographic device that stores your Care4Sign Digital Signature certificate and its private key inside a tamper-resistant chip. The private key is generated on the token and never leaves it — signing happens inside the device, so the key itself is never exposed to the computer. As a premier DSC provider in Karnataka, we supply advanced PKI signing solutions compliant with all regulatory guidelines.

Under the Indian PKI framework, subscriber keys for Class 3 DSCs must be stored on a CCA-approved hardware cryptographic device, and the token is that device. You can buy Care4Sign DSC along with our approved hardware tokens directly from our website.

Important CCA Advisory — FIPS 140-2 Level 2 Tokens Being Phased Out

The Controller of Certifying Authorities (CCA) has advised that FIPS 140-2 Level 2 certified crypto tokens will be discontinued with effect from 21 September 2026. From this date, FIPS 140-3 Level 3 certified tokens become mandatory for all new DSC issuance and renewal.

Care4Sign has already transitioned to issuing FIPS 140-3 Level 3 tokens, so certificates you buy or renew with us today are compliant and future-ready. If you're currently using an older FIPS 140-2 token, contact us to plan your upgrade before the deadline and avoid any interruption to your signing ability.

Token Types

Standard & Combo Tokens

Standard Token

Stores one certificate (Signing OR Encryption) or two certificates (Signing AND Encryption). Ideal for Individual DSC users signing on MCA, Income Tax, and GST portals.

For Individual Users

Combo / Dual Token

Designed for Combo DSC holders participating in e-Tendering, where both signing and bid encryption certificates are required on the same portal.

For e-Tender Users
Token Type Certificates Stored Suitable For (Matches)
PKI Token
(CCA Approved)
One certificate (Signing OR Encryption)
Or
Two certificates (Signing AND Encryption)
• Individual DSC users signing on MCA, Income Tax, GST portals.
• Combo DSC holders participating in e-Tendering, where both signing and bid encryption are required.
Current Token Type
(Integrated with CA System)
MToken 140-3 (New), InnaIT PK32XX Hyp 2003 140-2, ProxKey 140-2, Mtoken 140-2, SafeNet eToken 5110+
Current Token Models

Tokens Integrated with Care4Sign CA System

MToken 140-3

✓ NEW — FIPS 140-3 Level 3

CCA Compliant from Sep 2026

InnaIT PK32XX Hyp 2003

FIPS 140-2

ProxKey

FIPS 140-2

Mtoken 140-2

FIPS 140-2

SafeNet eToken 5110+

FIPS 140-2

All tokens issued by Care4Sign are now FIPS 140-3 Level 3 certified as standard, in line with the CCA's updated security requirements — available in both Standard and Combo/Dual variants above.

PKI Token Usage
How It Works

Plug-and-Play Security

  • 1 The token connects via USB and installs like any plug-and-play device, with a driver/PKCS#11 or CSP interface used by your browser and signing application.
  • 2 A PIN protects access to the token — the certificate cannot be used without it, and the token typically locks after repeated wrong attempts.
  • 3 The hardware itself does not expire; only the certificate loaded on it does. On renewal, the new certificate is generated onto the same token — no need to buy new hardware unless the token is damaged or lost.
  • 4 Compatible with major browsers and Windows environments used across Indian government portals.
Who Uses PKI Tokens?

Applications Across India's Signing Ecosystem

Company Directors & Signatories

MCA21, annual filings, DIN-linked forms, and corporate resolutions requiring authorised digital signatures.

Government Contractors

Tender participants on GeM and e-procurement portals requiring both signing and bid encryption.

CAs, CSs & Tax Consultants

Chartered Accountants, Company Secretaries, and tax professionals signing returns, certifications, and ROC filings.

Legal & Technical Professionals

Lawyers, Architects, and Engineers signing documents for RERA, MCA, and government submissions.

Importers & Exporters

Filing through DGFT and ICEGATE for import-export codes, customs clearance, and trade licences.

Applications

Portals That Accept PKI Token-Based DSC

MCA21 PortalIncome Tax e-filingGST Portale-Tender / e-Procurement (GeM)DGFT PortalICEGATEEPFOTrademark & Patent e-filingGeneral Digital Document Signing
Usage Value

Why Use a PKI Token?

Hardware-Based Key Protection

Far stronger than a certificate stored as a file on a laptop — key never leaves the chip.

Prevents Key Theft

Prevents unauthorised copying or extraction of the private key.

Portable & Durable

Portable, password-protected, and built for years of daily use.

CCA Mandated Standard

FIPS 140-3 Level 3 certified — the CCA-mandated storage standard for Class 3 DSC private keys from 21 September 2026 onward.

Key Benefits

Key Benefits

Hardware Security

Tamper-resistant, FIPS 140-3 Level 3 certified hardware security.

Malware Protection

Protection against malware-based key theft.

Simple Installation

Simple installation and long operational life.

Trusted Across Ecosystem

Trusted across every sensitive government and financial transaction that requires a DSC.

Upgrading From an Older Token?

If your current token is FIPS 140-2 Level 2 certified,
it will stop being valid after 21 September 2026

Get In Touch

Questions about PKI Tokens or your upgrade?

Care4Sign Safetec Limited

Head Office Address

1st Floor, Office No. 1, No. 44-45-46, CNR Complex, Vinayaka Layout, Ananthapura Gate, Yelahanka New Town, Bengaluru, Karnataka, 560064

DSC Issuance Support (WhatsApp)

+91 97421 88449, 84312 38898, 84312 38970

Email

support@care4sign.com