Every Class 3 Digital Signature Certificate in India must be stored on a FIPS-compliant USB cryptographic token — not on a computer's hard drive or a regular USB drive. Understanding what FIPS means, how these tokens work, and how to care for them is essential knowledge for any DSC holder.

What is FIPS and Why Does It Matter?

FIPS stands for Federal Information Processing Standard — specifically FIPS 140-2, which is a US government security standard for cryptographic modules. In the Indian DSC context:

  • FIPS 140-2 Level 2 (minimum) is required for DSC USB tokens — most tokens used in India meet Level 3
  • A FIPS-certified token has tamper-evident physical security — the chip destroys the private key if physically attacked
  • Private keys generated on a FIPS token cannot be exported — they never leave the hardware chip
  • Authentication (PIN entry) is required before any cryptographic operation is performed
  • After a configurable number of wrong PIN attempts (typically 5), the token locks permanently — protecting against brute-force attacks

Popular USB Token Brands in India

  • ePass2003 (Feitian Technologies): Most widely used in India; compact black or blue token; driver: ePass2003 PKI Manager
  • SafeNet eToken 5110: Enterprise-grade token; used by many large CAs and banks; driver: SafeNet Authentication Client (SAC)
  • Proxkey (WD): Government-backed token, popular for DGFT and ICEGATE; driver: Proxkey Manager
  • Vsign One Click: Maharashtra-backed; integrated with Vsign CA's workflow
  • Capricorn token: Issued with Capricorn CA certificates; custom driver available

Caring for Your USB Token

  • Never leave the token plugged in when not in use — reduces wear and theft risk
  • Keep it in the original pouch or a clean, dry case
  • Do not share the token or PIN with anyone
  • Avoid exposing the token to static electricity, extreme temperatures, or moisture
  • If PIN is forgotten, contact the issuing CA for reset options — some CAs can reset via an Admin PIN; others require reissuance
  • A physical token can hold multiple certificates — Class 3, DGFT DSC can coexist on the same token (check available slots)

Get DSC on FIPS USB Token

Your DSC comes loaded on a FIPS-certified USB token, ready to use on all government portals.

Apply Now Token Drivers

If your token has locked due to too many wrong PIN attempts, do not panic. Depending on the token model, an Admin PIN or SO (Security Officer) password may allow reset. Contact us on WhatsApp with your token details — we guide you through the unlock or replacement process.