Buy DSC Renew DSC Reissue DSC Download DSC Certificate Status Record Video Partner Login Login eKYC A/c
Home About Digital Signature Certificate Document Signer Certificate Hardware Security Module PKI Tokens SSL Certificates Repository White Paper Download CRL CCA Guidelines Videos Customer Service Downloads Career Become a Partner Pricing Contact

PKI Tokens

A tamper-resistant hardware locker for your Digital Signature Certificate — FIPS 140-3 Level 3 certified, CCA-compliant, and built for years of daily signing use.

PKI Token for Digital Signature
What is a PKI Token?

Your Private Key Stays Inside the Token — Always

A PKI Token is a FIPS-certified USB cryptographic device that stores your Digital Signature Certificate and its private key inside a tamper-resistant chip. The private key is generated on the token and never leaves it — signing happens inside the device, so the key itself is never exposed to the computer, the network, or a potential attacker.

Under the Indian PKI framework, subscriber keys for Class 3 DSCs must be stored on a CCA-approved hardware cryptographic device, and the token is that device.

Important CCA Advisory — FIPS 140-2 Level 2 Tokens Being Phased Out

The Controller of Certifying Authorities (CCA) has advised that FIPS 140-2 Level 2 certified crypto tokens will be discontinued with effect from 21 September 2026. From this date, FIPS 140-3 Level 3 certified tokens become mandatory for all new DSC issuance and renewal.

Care4Sign has already transitioned to issuing FIPS 140-3 Level 3 tokens, so certificates you buy or renew with us today are compliant and future-ready. If you're currently using an older FIPS 140-2 token, contact us to plan your upgrade before the deadline.

Token Types

Standard & Combo Tokens

Standard Token

Stores one certificate (Signing OR Encryption) or two certificates (Signing AND Encryption). Ideal for Individual DSC users signing on MCA, Income Tax, and GST portals.

For Individual Users

Combo / Dual Token

Designed for Combo DSC holders participating in e-Tendering, where both signing and bid encryption certificates are required on the same portal.

For e-Tender Users
Current Token Models

Tokens Integrated with Care4Sign CA System

MToken 140-3

✓ NEW — FIPS 140-3 Level 3

CCA Compliant from Sep 2026

InnaIT PK32XX Hyp 2003

FIPS 140-2

ProxKey

FIPS 140-2

Mtoken 140-2

FIPS 140-2

SafeNet eToken 5110+

FIPS 140-2

All tokens issued by Care4Sign are now FIPS 140-3 Level 3 certified as standard, in line with the CCA's updated security requirements.

PKI Token Usage
How It Works

Plug-and-Play Security

  • 1 The token connects via USB and installs like any plug-and-play device, with a driver/PKCS#11 or CSP interface used by your browser and signing application.
  • 2 A PIN protects access to the token — the certificate cannot be used without it, and the token typically locks after repeated wrong attempts.
  • 3 The hardware itself does not expire; only the certificate loaded on it does. On renewal, the new certificate is generated onto the same token — no need to buy new hardware unless the token is damaged or lost.
  • 4 Compatible with major browsers and Windows environments used across Indian government portals.
Who Uses PKI Tokens?

Applications Across India's Signing Ecosystem

Company Directors & Signatories

MCA21, annual filings, DIN-linked forms, and corporate resolutions requiring authorised digital signatures.

Government Contractors

Tender participants on GeM and e-procurement portals requiring both signing and bid encryption.

CAs, CSs & Tax Consultants

Chartered Accountants, Company Secretaries, and tax professionals signing returns, certifications, and ROC filings.

Legal & Technical Professionals

Lawyers, Architects, and Engineers signing documents for RERA, MCA, and government submissions.

Importers & Exporters

Filing through DGFT and ICEGATE for import-export codes, customs clearance, and trade licences.

Applications

Portals That Accept PKI Token-Based DSC

MCA21 PortalIncome Tax e-filingGST Portale-Tender / e-Procurement (GeM)DGFT PortalICEGATEEPFOTrademark & Patent e-filingGeneral Digital Document Signing
Key Benefits

Why Use a PKI Token?

Hardware-Based Security

Far stronger than a certificate stored as a file on a laptop — key never leaves the chip.

Prevents Key Theft

Prevents unauthorised copying or extraction of the private key — even with malware.

Portable & Long-Lasting

USB-form factor — carry it anywhere. Built for years of daily use without replacement.

CCA Mandated Standard

FIPS 140-3 Level 3 certified — the mandatory storage standard for Class 3 DSC private keys from 21 September 2026.

Upgrading From an Older Token?

If your current token is FIPS 140-2 Level 2 certified, it will stop being valid after 21 September 2026

Get In Touch

Questions about PKI Tokens or your upgrade?

Care4Sign Safetec Limited

Head Office Address

1st Floor, Office No. 1, No. 44-45-46, CNR Complex, Vinayaka Layout, Ananthapura Gate, Yelahanka New Town, Bengaluru, Karnataka, 560064

DSC Issuance Support (WhatsApp)

+91 97421 88449, 84312 38898, 84312 38970

Email

support@care4sign.com