Twenty-three. That is how many organisations in the whole of India may lawfully issue you a digital signature certificate for tender work, and every other name you have seen advertising one is selling on behalf of those 23. The second number that matters is three: Indian law will not let anyone issue you a certificate that lasts longer than three years, which is why your bid calendar and your certificate expiry date need to sit on the same page. Prices are set by the issuing authority and its agents and change often (indicative), so confirm the current cost before you commit.

Who can issue a digital signature certificate for tender work

An e-procurement portal will not take an unsigned bid. So somewhere between deciding to chase government work and pressing submit, every machine owner has to go and buy a digital signature certificate, usually from whichever agent came up first in a search. That is the moment the confusion starts, because the market is full of intermediaries and almost none of them explain what they actually are.

Here is the structure. The Controller of Certifying Authorities, which sits under the Ministry of Electronics and Information Technology, licenses a small number of organisations to issue digital signature certificates. As of the Controller’s published list, there are 23 of them, including Safescrypt, IDRBT, (n)Code Solutions, e-Mudhra, CDAC, Capricorn, Protean, Vsign, CSC, IDSign, CDSL Ventures, Panta Sign, XtraTrust, ProDigiSign, SignX and Care 4 Sign, alongside a few government bodies such as IGCAR, RajComp and the three armed services. You can check the current list yourself on the Controller of Certifying Authorities’ licensed CA page.

Everyone else in this business is a registration agent or reseller working for one of those 23. There is nothing wrong with buying through an agent, and for most owners it is the practical route. What matters is that you know which licensed authority the certificate will actually be issued under, because that is the name that will appear on the certificate and that is the organisation the portal trusts. Ask the question before you pay. If the agent cannot answer it plainly, that tells you something.

The authority is also doing real work before it issues. Rule 25 of the Information Technology (Certifying Authorities) Rules, 2000 requires it to confirm that your name is not on its list of compromised users and to verify your identity in the manner set out in its own Certification Practice Statement and the Controller’s identity verification guidelines. That verification step is the reason a certificate takes time to come through, and the reason it cannot be reissued at an hour’s notice when a bid is closing.

The law caps your certificate at three years

This is the part nobody selling you a certificate will lead with, and it is written into the Rules in one plain sentence. Rule 21 of the Information Technology (Certifying Authorities) Rules, 2000, as substituted, says that all subscriber key pairs and associated certificates must have a validity period of no more than three years.

That single line explains the whole product range. A Certifying Authority can sell you one year, two years or three years, and it cannot sell you more, no matter how much you would rather buy a certificate once and forget about it. The same rule gives the Certifying Authority’s own key pairs a ceiling of ten years, which is a separate matter and not something you need to track.

What the Rules fix Ceiling What it means for you
Your certificate and key pair (subscriber) 3 years Nobody can legally sell you a longer one; plan a renewal at least every three years
The issuing authority’s own key pair 10 years Handled by the Certifying Authority, not your problem
Validity of a revoked certificate Ends on revocation The printed expiry date stops mattering once it is revoked

Treat the expiry date the way you treat an insurance renewal or a fitness certificate. It is a date on which your ability to earn stops, and it arrives whether or not you are in the middle of something. An owner who lets it lapse in the week a road division floats the only machine-hire tender of the quarter has lost that quarter, and no amount of arguing with the portal helpdesk will fix it.

Class is a portal question, not a legal one

Search for this subject and the first thing you will meet is an argument about classes. It is worth understanding where that comes from, because the answer changes how you should read a tender document.

The class system does not appear in the Information Technology (Certifying Authorities) Rules, 2000. The Rules set out who may issue, what they must verify, how long a certificate may last and when it must be revoked; they do not grade certificates into classes at all. Classes come from the Controller’s administrative guidelines on certificate policy, and what binds you as a bidder is narrower still: the eligibility clause of the tender you are looking at.

So read that clause rather than a forum post. In Indian e-procurement practice a Class 3 certificate issued in the individual name of the person signing is the normal requirement, and our walk-through of how to bid for government construction tenders covers the class question and the mapping of the certificate to your portal login. If the tender document is silent, the pre-bid meeting is where you ask.

Getting it onto the portal is a separate step

Buying the certificate and being able to bid with it are two different things. The certificate has to be enrolled against your login on the portal you are bidding through, and until that mapping is done the token in your drawer is of no use to you.

The National Informatics Centre publishes the procedure for this. Its Bidders Manual Kit carries a bidder registration manual, a manual for online bid submission, one for bid withdrawal and resubmission, and a troubleshooting document, each dated so you can see how current it is. Read the registration manual once, properly, before your first live bid rather than at eleven at night with a deadline at noon. Departments running their own portals publish the equivalent, and the steps rarely differ much.

Two practical points from the same family of rules. First, the certificate belongs to a person, not to your firm, so if the person who holds it is not the person who should be committing the firm, sort out the authority to sign before the bid and not after: the consequences are set out in our note on the power of attorney for a tender. Second, if a certificate is revoked under section 38 of the Information Technology Act, 2000, the licensed authority puts it on a certificate revocation list, and verifying systems check that list rather than simply reading the expiry date. A revoked certificate fails even though it looks valid on its face.

Where this sits in the cost of chasing government work

On its own a digital signature certificate is one of the smaller numbers in this business. The reason to get it right is sequencing. It gates your registration, your registration gates your bidding, and a lapse at the wrong moment costs you a tender cycle rather than the price of the certificate.

Fit it into the rest of the paperwork you are already carrying. If you are registering on the government marketplace, our guide to GeM registration for contractors sets out what else is checked. If you are going after state works instead, PWD contractor registration explains the enlistment side and whether a machine owner needs it at all. And if the reason you are chasing tenders is that a machine is sitting idle, the financing side of adding or refinancing one is covered on our equipment finance pages.

The bottom line

Twenty-three licensed authorities, a three-year legal ceiling, and a class requirement that comes from the tender document rather than from the law. Buy through whoever you like, but know which licensed Certifying Authority stands behind the certificate, put the expiry date in the same calendar as your bid dates, and do the portal mapping before you need it rather than on the day.

If the point of all this is to keep a machine earning rather than parked, start with the machine economics. Our excavator range and our equipment finance options are the place to work out whether the next job pays for the next machine.

Rates, schemes, specifications and prices change — confirm current terms with the OEM, dealer, bank or insurer before deciding.