A DSC crypto token (also called a USB token or e-token) is a small hardware device that securely stores your Digital Signature Certificate and private key. Since 2021, storing a DSC on such a token is mandatory — certificates can no longer be downloaded directly to a computer.
This guide explains what a crypto token is, why it is required, common brands, and how to install and use it.
What is DSC Crypto Token (USB Token)?
A crypto token is a FIPS 140-2 compliant USB device with a secure chip. Your DSC's private key is generated and stored inside the token and never leaves it — signing happens on the device itself, which makes it tamper-resistant.
Common tokens in India include ePass 2003, Proxkey, HYP2003, mToken and Watchdata. Each requires its own driver/utility to be installed on your computer.
| Standard | FIPS 140-2 Level 2/3 |
|---|---|
| Popular brands | ePass 2003, Proxkey, HYP2003, Watchdata |
| Interface | USB-A |
| Reusable | Yes — renew the DSC on the same token |
Do not lose or reformat the token
Why the token is mandatory
- CCA guidelines require DSCs to be stored on a secure crypto token, not on a computer's disk
- The private key cannot be exported or copied, preventing misuse
- Signing is performed inside the token, protecting the key from malware
- One token can hold your DSC and be reused when you renew
Step-by-step process
- Install the token driver. Download and install the driver/utility for your token brand (e.g. ePass2003, ProxKey) from the manufacturer's website.
- Plug in the token. Insert the USB token; the utility should detect it.
- Set the token password. Set or enter the token PIN/password used every time you sign.
- Download the DSC. Use the Certifying Authority's download utility to load the issued certificate onto the token.
- Sign documents. When a portal asks you to sign, select the certificate from the token and enter your token PIN.
Common token issues and fixes
- Token not detected: reinstall the driver and try a different USB port.
- Forgot token password: the token may need to be reset/reformatted (which erases the DSC — you would need to re-issue it).
- DSC not showing on portal: install the latest Java / emSigner / signing utility required by the portal.
- Browser cannot sign: use the portal's recommended browser and enable the signing extension.
Frequently asked questions
Can I copy my DSC from the token to my laptop?
No. By design, the private key never leaves the crypto token, so it cannot be copied. This is a security feature.
Can I store multiple DSCs on one token?
Yes, most tokens can hold more than one certificate depending on the model's capacity.
What if I lose my token?
Report it, and apply for a fresh DSC on a new token. The lost certificate should be revoked with the Certifying Authority.