The digital signature you need to bid, and how to get one
You cannot submit a bid on any government e-procurement portal without a digital signature certificate. It is the one purchase that has to happen before anything else, and the one that most often goes wrong on the day a bid is due.
What it is
A DSC is a certificate issued in your name by a certifying authority licensed by the Controller of Certifying Authorities, stored on a USB token. Signing a bid with it is legally equivalent to signing the papers by hand, under the Information Technology Act.
For e-procurement you need a Class 3 certificate, and you generally need both functions:
- Signing — to sign and freeze your bid.
- Encryption — because the financial cover is encrypted so that nobody, including the department, can open it before the scheduled opening time.
A signing-only certificate is cheaper and will let you register, then fail you at the point of uploading the price bid. Buy the combined one.
Whose name it should be in
The certificate belongs to a person — the authorised signatory — with the organisation named on it. Points that matter:
- It is tied to the signatory's PAN, and the details must match what you enter on the portal, spelling included.
- If the signatory leaves the firm, you need a new certificate, and a new power of attorney to go with it.
- People do share tokens between colleagues. It is a bad idea: the signature is legally that person's, and every bid signed with it is theirs.
Buying one
From any CCA-licensed certifying authority or their resellers — eMudhra, Sify, nCode, Capricorn and others. Typically:
- Validity: one, two or three years. Three years costs less per year and saves a renewal scramble.
- Cost: commonly ₹1,000–₹3,000 including the USB token, depending on validity and seller. Prices vary; compare.
- KYC: PAN, Aadhaar or other identity proof, the organisation's documents, and a short video verification.
- Time: allow a few working days. Same-day issue is advertised, and it does happen, but not reliably enough to plan a bid around.
Buy the token from the CA or an authorised reseller, not from a marketplace listing.
Registering it on the portal
Each portal is separate. After enrolling as a bidder, you map the certificate to your account, usually under a "DSC management" or "My account" section. Plug the token in, allow the signing utility to run, and pick the certificate from the list.
Do this once per portal, well before you need it — not on the evening a bid closes. Central portals and each state's portal each need their own enrolment and their own mapping.
What goes wrong, and what to do
These are the usual failures, roughly in order of how often they bite:
- The signing utility will not start. Most GePNIC portals use emSigner, which runs as a small program in the background. It must be installed, running, and allowed through the firewall. Restarting it fixes most cases.
- The token is not detected. The CA's driver must be installed on the machine you are bidding from, and the token has to be in directly — USB hubs and long extension cables cause trouble. Try another port before you panic.
- Browser blocks it. Portals are still happiest on a desktop browser with the utility installed. Keep one machine that is known to work and bid from it.
- Wrong certificate chosen. Tokens often hold more than one certificate — signing and encryption, sometimes an expired one. Match the one the portal asks for.
- Expiry. A certificate that expires between bid submission and opening causes real problems. Check the expiry date before a big bid, and renew a month early.
- Token locked. Too many wrong PIN attempts locks the token, and some cannot be reset — you buy a new one. Keep the PIN somewhere your team can find it.
A working routine
- Buy a three-year Class 3 signing-and-encryption certificate for the authorised signatory.
- Install the CA drivers and the portal's signing utility on one designated machine.
- Register the certificate on every portal you bid on, on the day you get it.
- Put the expiry date in a calendar with a one-month reminder.
- Test-sign something on a portal a week before a deadline — not on the day.
A caution
Procedures and prices differ between certifying authorities and change over time, and portals update their signing utilities without notice. The certifying authority's own instructions and the portal's bidder manual are the authority here; this guide describes the common pattern as at September 2026.