DSC Management

Upstream dependencies: A CA Engagement must exist for the client before you can link a DSC record to them. Downstream: An expired DSC blocks all electronic filings linked to that engagement: ITR, GST returns, ROC forms, and TDS returns. The DSC Expiry Alert report feeds into the CA Manager’s weekly monitoring routine.

---

​

Overview

A CA DSC record tracks a single Digital Signature Certificate held either for a client (typically a director or proprietor) or for a firm staff member who files on behalf of clients. Every DSC has a validity period. When that period ends, all electronic filings for which that DSC is required are blocked until the certificate is renewed. DSCs are named automatically in the format DSC-##### (for example, DSC-00047).

---

​

Why Tracking DSCs Matters

An expired DSC at filing time causes immediate problems: the portal rejects the filing, deadlines are missed, and late penalties may accrue while the renewal is in progress. DSC renewal through providers such as Emudhra, Sify, or NSDL typically takes one to three working days. Without proactive tracking, an expiry is often discovered only when a filing is attempted. The CA DSC module gives you visibility into every certificate in your portfolio so you can initiate renewal well before expiry, rather than discovering the problem at filing time.

---

​

Who Uses This Feature

---

​

Before You Start

• You need the holder’s name, DSC class, serial number, and validity dates from the certificate token or from the provider’s documentation.
• A CA Engagement must exist for the client if you are creating a DSC for a client or their director. If you are creating a DSC for a firm staff member, no engagement link is required.
• Check whether the holder already has a DSC record in the system before creating a new one. Duplicate records cause false reporting in the Expiry Alert report.

---

​

DSC Classes

---

​

Status Values

The system updates the status of every DSC record automatically once each day. You do not set the status manually:

---

​

Create a DSC Record

Path: CA Practice Management workspace, DSC Management shortcut, or the Compliance Management group in the navigation cards. Fill the form as follows:

---

​

DSC Expiry Alert Report

The DSC Expiry Alert report is the primary monitoring tool for the CA Manager. It shows every DSC in the system that expires within a configurable look-ahead window. Path: Reports section in the CA Practice Management workspace, or directly at the DSC Expiry Alert report link. Columns shown: How to use the report:

1. Open the report every Monday morning.
2. Filter to Within Days = 14 to see the most critical renewals first.
3. For any DSC with fewer than 14 days remaining, contact the client or their director immediately to arrange renewal. A Class 3 DSC renewal takes one to three working days with most providers.
4. Once a renewal is complete, create a new DSC record with the new serial number and validity dates. Do not update the old record’s dates: the old record is kept for historical reference.

---

​

Renewing a DSC

When a DSC is renewed, follow these steps:

1. The client or director contacts their DSC provider (Emudhra, Sify, NSDL, or another authorised provider) and completes the renewal process.
2. Once the new certificate is issued, create a new CA DSC record with the new serial number, new Valid From date, and new Valid Till date.
3. Leave the old DSC record as-is. Do not archive or delete it. Keeping the old record preserves the history of which certificate was used for which filings during its validity period.
4. Update the Notes field on the new record to reference the renewal (for example, “Renewed from DSC-00047”).

There is no “renew” button on the existing record. Renewal always creates a new record so the system maintains a clear audit trail.

---

​

Workspace Access

Desk workspace: Open the DSC Management shortcut tile from the CA Practice Management workspace, or navigate through the Compliance Management navigation cards. Reports: The DSC Expiry Alert report is in the Reports section of the workspace. You can also access it from the CA Manager’s bookmarked report list if your manager has set that up.

---

​

Best Practices

• Create a DSC record for every director, partner, and proprietor of every client. A missing DSC record is a blind spot. If a director’s certificate is not tracked, the expiry alert will not warn you, and you will discover the problem at filing time.
• Target renewal at least 30 days before expiry. The Expiring Soon status triggers at 30 days. Treat this as your action window, not your deadline. Renewal can take up to three working days, and coordinating with the client takes additional time.
• Check the DSC Expiry Alert report every Monday. During ITR season (July) and GST filing seasons, missed DSC renewals directly cause late filings and penalties. Make the weekly report check a non-negotiable routine.
• Never archive or delete an expired DSC record. Expired records are needed to confirm which certificate was valid at the time of a historical filing. Deleting them creates gaps in the audit trail that cannot be recovered.
• Store the DSC provider name and token location in the Notes field. When a renewal is needed urgently, you do not want to spend time finding out which provider issued the certificate or where the USB token is stored.
• Do not store DSC PINs anywhere in the system. PINs are the holder’s responsibility. The system stores the certificate metadata, not the access credentials for the token.

---

​

Related Features

• Document Management for the CA E-Signature records that use DSCs for client return approvals.
• Compliance Tasks for the filings that require a valid DSC to proceed.
• Reports and Analytics for the DSC Expiry Alert report covered in detail in the reports reference page.
• Client Engagements for the master record that each DSC links to.