It's filing day. The GST deadline is in a few hours. You plug in your DSC token, navigate to the GST portal, click "Sign" — and nothing happens. Or worse, you get an error message like "emSigner not detected", "certificate not found", or "DSC registration failed."
This is one of the most frustrating compliance situations Indian taxpayers and CAs face. DSC failures on the GST portal are common, but almost always fixable — if you know what you're looking for. This guide covers every known DSC error on the GST portal and provides step-by-step solutions for each.
emSigner Not Detected
Token PIN Locked
Browser Issues
Certificate Expired
Driver Problems
📋 Table of Contents
- How DSC Works on the GST Portal
- System Prerequisites Checklist
- Fix: emSigner Not Detected
- Fix: Certificate Not Found or Not Listed
- Fix: Wrong PIN / Token Locked
- Fix: Browser Compatibility Issues
- Fix: Expired or Revoked Certificate
- Fix: DSC Driver Problems
- Fix: DSC Registration Failed on GST Portal
- Fix: Java-Related Errors
- Fix: Firewall / Antivirus Blocking DSC
- DSC on Windows 11: Special Considerations
- Which DSC Class is Required for GST?
- When and How to Renew Your DSC
- Frequently Asked Questions
1. How DSC Works on the GST Portal
Before troubleshooting, it helps to understand exactly what happens when you use a DSC on the GST portal — because each step in the chain can be a failure point.
The DSC signing process on GST portal has four layers working together:
- Hardware Token: Your USB DSC token (ePass2003, iKey, SafeNet, etc.) stores your private key and digital certificate securely. The key never leaves the token.
- Token Driver: A middleware software installed on your Windows computer that allows the operating system (and applications) to communicate with the token via the USB port.
- emSigner Utility: A desktop application provided by the GST portal that runs as a local service on port 1585. It bridges your browser and the DSC token — the browser cannot directly access the token, so emSigner acts as the intermediary.
- Browser: The browser communicates with emSigner via a WebSocket connection on localhost:1585. When you click "Sign" on the GST portal, the portal's JavaScript sends a signing request to emSigner, which in turn uses the token driver to sign with your private key.
If any one of these four layers fails, your DSC won't work. The troubleshooting approach is to diagnose which layer is failing and fix it.
https://localhost:1585. If emSigner is running correctly, you'll see a response page or a blank page with no "site can't be reached" error. If you get "connection refused," emSigner is not running.
2. System Prerequisites Checklist
Before diving into specific error fixes, verify all prerequisites are met:
- Windows 7 / 8 / 10 / 11 (32-bit or 64-bit) — DSC does not work on Mac or Linux for GST portal
- emSigner utility installed (download from gst.gov.in → Downloads → DSC Utilities)
- emSigner running in system tray (look for the emSigner icon near the clock)
- DSC token driver installed (ePass2003 Auto, SafeNet Authentication Client, etc.)
- Token inserted in USB port and recognized by Windows (check Device Manager)
- Certificate not expired (check Valid To date in token management software)
- Correct browser being used (Firefox, Edge in IE mode — not plain Chrome)
- Computer date and time correct and synchronized
- Port 1585 not blocked by firewall or antivirus
- Java Runtime Environment installed (if using Java-based signing — JRE 8 update 251+)
3. Fix: emSigner Not Detected
The most common error on the GST portal is "emSigner not detected" or "Unable to connect to signing service." This means the browser cannot reach the emSigner service on localhost:1585.
Error: "emSigner not detected" / "Signing service unavailable"
Displayed when: browser cannot connect to emSigner on localhost port 1585
Step-by-Step Fix
Check if emSigner is Running
Look for the emSigner icon in your Windows system tray (bottom-right near the clock). If you don't see it, emSigner is not running. Open the Start menu, search for "emSigner" and launch it. Wait 10–15 seconds for it to initialize, then try the GST portal again.
Run emSigner as Administrator
Right-click the emSigner shortcut on your desktop or in the Start menu and select "Run as Administrator." On Windows 10/11, user account control restrictions can prevent emSigner from binding to port 1585 without admin rights. This fixes the issue in the majority of cases.
Reinstall emSigner
If emSigner was already running as administrator and the error persists, uninstall it from Control Panel → Programs and Features, then download the latest version from gst.gov.in → Downloads → DSC Management Utility (emSigner). Install and restart. Always get emSigner from the official GST portal — third-party downloads may be outdated or unsafe.
Check Port 1585
Open Command Prompt as Administrator and run: netstat -ano | findstr :1585. If you see a result with LISTENING, emSigner is running on that port. If another application has taken port 1585, you'll see a different PID. In that case, close the conflicting application or contact your IT administrator.
Allow emSigner Through Windows Firewall
Go to Control Panel → Windows Defender Firewall → Allow an app through firewall. Click "Change Settings," then "Allow another app," and browse to the emSigner executable (typically C:\Program Files\emSigner\emSigner.exe). Check both Private and Public network boxes. Click OK and try again.
Clear Browser Cache and Retry
After confirming emSigner is running, clear your browser's cache and cookies (Ctrl+Shift+Delete in most browsers). Close all browser windows, reopen, and navigate to the GST portal fresh. Cached portal data sometimes causes the browser to use a stale WebSocket connection.
https://localhost:1585. If you see any response (even a blank page), emSigner is running. Then navigate to the GST portal and try signing.
4. Fix: Certificate Not Found or Not Listed
After emSigner connects, you should see a list of certificates in the DSC selection dropdown on the GST portal. If the dropdown is empty or doesn't show your certificate, the problem is with certificate enumeration.
Error: "No certificates found" / Certificate dropdown empty
Appears when: emSigner is running but cannot read certificates from the token
Root Causes and Fixes
| Root Cause | Symptom | Fix |
|---|---|---|
| Token not recognized by Windows | No USB sound on insert; Device Manager shows yellow warning | Reinstall token driver; try a different USB port (avoid USB hubs) |
| Wrong certificate type on token | Token recognized, but certificate not for signing | Check token contents in ePass Manager; ensure you have a signing certificate, not just an encryption certificate |
| Token driver version mismatch | Token recognized by Windows, but emSigner can't read certificates | Download latest driver from token manufacturer website; uninstall old driver first |
| Certificate not imported to Windows store | Token works, certificate visible in token software, but not in emSigner | Open token management software → Export certificate → Import into Windows Certificate Store (Personal) |
| Multiple tokens inserted | emSigner confused about which token to read | Remove all other tokens; use only the relevant DSC token |
Importing DSC Certificate to Windows Store
Open Certificate Manager
Press Win + R, type certmgr.msc, press Enter. This opens the Windows Certificate Manager.
Navigate to Personal Certificates
In the left panel, expand Personal → Certificates. Check if your DSC certificate appears here. If it does, your certificate is properly in the Windows store.
Import if Missing
If the certificate is not there, right-click Certificates → All Tasks → Import. Browse to the certificate file (.cer or .pfx) exported from your token management software. Follow the wizard and select the "Personal" certificate store when asked.
5. Fix: Wrong PIN / Token Locked
A DSC token's private key is protected by a PIN. After entering the wrong PIN 3–5 consecutive times (depending on the token model), the token locks itself to prevent brute-force attacks. When locked, you cannot use the DSC at all — even with the correct PIN.
How to Unlock a Locked DSC Token
Open Token Management Software
The software name depends on your token type: ePass2003 → "ePass2003 Auto" software; SafeNet → "SafeNet Authentication Client"; WD Pro / Proxkey → "Proxkey Manager"; iKey → "iKey Token Manager". Find and open the appropriate software.
Find the 'Initialize' or 'Reset PIN' Option
Look for options like "Change PIN," "Initialize Token," "Unblock PIN," or "Reset PIN." The exact label varies by software. This option requires your PUK (PIN Unblocking Key) — a separate, longer code provided by your CA at issuance.
Enter PUK and Set New PIN
Enter your PUK, then set a new PIN. Choose a PIN you'll remember — typically 6–8 digits. Avoid PINs like 123456 or your date of birth for security.
If You Don't Have the PUK
Contact your Certifying Authority (CA) — eMudhra, Sify, NSDL e-Governance, Capricorn, or whichever CA issued your DSC. Provide your registered email and phone for identity verification. They can provide the PUK remotely or issue a new token if the PUK is not retrievable.
Token PIN Management Best Practices
- Save your PIN and PUK in a password manager, not in a plain text file on your desktop
- Never share your PIN with anyone — it authenticates your identity
- If you're a CA or GSP managing multiple client DSCs, maintain a PIN register with proper access controls
- Set a calendar reminder to change your PIN if it's been the same for over a year
6. Fix: Browser Compatibility Issues
This is one of the most common — and most confusing — DSC failure categories. The GST portal's DSC signing mechanism relies on WebSocket communication between the browser and emSigner. Different browsers implement WebSocket security policies differently, leading to failures.
Browser Compatibility Status (2026)
| Browser | DSC Status | Recommended Action |
|---|---|---|
| Google Chrome (latest) | ⚠️ Problematic | Requires specific extension; often fails. Avoid for DSC tasks. |
| Mozilla Firefox (latest) | ✅ Best option | Works reliably with emSigner. Use Firefox for all GST DSC work. |
| Microsoft Edge (IE Mode) | ✅ Works well | Enable IE Compatibility Mode for gst.gov.in specifically |
| Microsoft Edge (normal mode) | ⚠️ Mixed | May work with emSigner; test before deadline |
| Internet Explorer 11 | ❌ Deprecated | Avoid — Microsoft ended IE11 support in 2022 |
| Safari / Mac browsers | ❌ Not supported | GST portal DSC not supported on Mac/Safari |
Setting Up Firefox for GST DSC
Download Firefox
Download Mozilla Firefox from mozilla.org/firefox. Install and open it.
Navigate to GST Portal
Go to gst.gov.in in Firefox. Log in to your account.
When Prompted to Sign, Allow WebSocket
Firefox may show a security prompt asking if you want to allow localhost:1585 connection. Always click "Allow." If no prompt appears and signing fails, check Firefox's security settings: go to about:config, search for network.websocket.allowInsecureFromHTTPS and set it to true.
Setting Up Edge IE Mode for GST DSC
Open Edge Settings
In Microsoft Edge, go to Settings → Default browser → Internet Explorer compatibility.
Add GST Portal to IE Mode Sites
Under "Internet Explorer mode pages," click "Add" and enter https://www.gst.gov.in. Click Add.
Reload GST Portal in IE Mode
Navigate to gst.gov.in in Edge. Click the settings (three dots) → "Reload in Internet Explorer mode." The tab will reload with an IE icon in the address bar, confirming IE mode is active.
7. Fix: Expired or Revoked Certificate
DSC certificates have a limited validity — typically 1, 2, or 3 years. After expiry, the certificate cannot be used for signing. Similarly, a CA may revoke a certificate before expiry (e.g., if the token is reported lost, or if the subscriber's details changed significantly).
How to Check Your DSC Validity
Method 1 — Via Token Management Software: Open your token software (ePass Manager, SafeNet Authentication Client), click on the certificate name, and look for "Valid From" and "Valid To" dates.
Method 2 — Via Windows Certificate Manager:
- Press
Win + R, typecertmgr.msc, press Enter - Navigate to Personal → Certificates
- Find your DSC certificate (look for your name or PAN in the "Issued To" column)
- The "Expiration Date" column shows when it expires
- Double-click the certificate to see full details including revocation status
Method 3 — Via GSTN Portal: Log in to gst.gov.in → My Profile → DSC Management. The portal shows the expiry date of the registered DSC.
Renewing an Expired DSC
| CA Name | Contact | Renewal Time | Approx Cost |
|---|---|---|---|
| eMudhra | emudhra.com | 1–2 business days | ₹1,000–₹2,500 |
| Sify Technologies | sify.com/dsc | 2–3 business days | ₹800–₹2,000 |
| NSDL e-Governance | egov-nsdl.co.in | 2–3 business days | ₹1,000–₹2,500 |
| Capricorn CA | capricornca.com | 1–2 business days | ₹700–₹1,800 |
| (n)Code Solutions | ncodesolutions.com | 2–4 business days | ₹900–₹2,200 |
After renewing, you must re-register the new DSC on the GST portal even if your old DSC was previously registered. Go to: GST portal → My Profile → DSC Management → Register / Update DSC.
8. Fix: DSC Driver Problems
The token driver is the software layer that allows Windows to communicate with the physical USB token. Without the correct driver installed, Windows cannot read the token's contents, and emSigner cannot enumerate certificates.
Identifying Your Token Type
| Token Brand/Model | Driver Software | Download Source |
|---|---|---|
| ePass2003 / ePass2003 Auto | ePass2003 Auto v3.0 or v4.0 | Feitian website or CA's download page |
| SafeNet eToken 5110 | SafeNet Authentication Client 10.x | Thales (formerly SafeNet) website |
| WD Proxkey / Bull ProKey | Proxkey Manager | proxkey.com |
| iKey 2032 | iKey 2032 Driver | SafeNet / Thales website |
| Moserbaer (discontinued) | Moserbaer Crypto Token Driver | Contact CA for alternate driver |
| Watchdata Hifn | PKCS#11 library driver | Watchdata website |
Clean Driver Reinstallation Procedure
Remove Token First
Before uninstalling drivers, remove the USB token from the computer. Installing or uninstalling drivers with the token inserted can cause conflicts.
Uninstall Existing Driver
Go to Control Panel → Programs and Features. Find and uninstall the existing token driver (e.g., "ePass2003 Auto"). Also check Device Manager for any remaining token-related devices and uninstall them.
Restart Computer
Always restart after uninstalling drivers. This clears residual driver files from memory.
Download and Install Correct Driver
Download the driver from the official manufacturer or CA website. Run the installer as Administrator. For 64-bit Windows, ensure you download the 64-bit driver version.
Insert Token and Test
After installation, insert the token. Windows should recognize it with a success sound. Open the token management software — you should see your certificate listed. Then launch emSigner and test on the GST portal.
9. Fix: DSC Registration Failed on GST Portal
Even after your DSC is working locally (token detected, certificate visible, emSigner running), the GST portal's DSC registration or signing step can fail. Common errors at this stage:
Error: "DSC registration failed. Please try after some time."
Usually a transient GST portal server-side error. Wait 15–30 minutes and try again, preferably in a new browser session. If it persists beyond a day, raise a grievance on gst.gov.in.
Error: "Certificate not in valid state."
The GSTN server checked the certificate's validity and found it expired, revoked, or not from an approved CA. Verify certificate validity (Section 7 above) and ensure your CA is on the GSTN-approved CA list.
Error: "PAN/Certificate mismatch."
The PAN encoded in your DSC certificate does not match the PAN registered in your GST profile.
Error: "DSC already registered on another GSTIN."
Each DSC certificate can be registered on one GSTIN at a time on the GST portal.
10. Fix: Java-Related Errors
While the GST portal has moved primarily to emSigner (which doesn't require Java), some older functionalities and some related IT filing portals still use Java applets or Java-based utilities.
Common Java DSC Error Fixes
Install the Correct Java Version
For most DSC applications, Java 8 (JRE 1.8) is the required version. Download from java.com or OpenJDK 8 builds from adoptium.net. Java 11+ may cause compatibility issues with older DSC utilities.
Match Java Bitness to Browser
32-bit browsers need 32-bit Java; 64-bit browsers need 64-bit Java. Mismatch causes the Java plugin to fail silently. Check your browser's bitness: In Firefox, go to Help → About Firefox and note if it says 32-bit or 64-bit. Install the matching Java.
Add GST Portal to Java Exception List
Open Control Panel → Java → Security → Edit Site List. Click Add and enter https://www.gst.gov.in. Click OK. This allows the GST portal to run Java applications without constant security warnings blocking them.
Set Java Security Level to Medium
In Java Control Panel → Security, set the security level to "Medium" (not High). High security blocks many legitimate Java applications including DSC utilities.
11. Fix: Firewall / Antivirus Blocking DSC
Security software — especially enterprise-grade antivirus and corporate firewalls — frequently block emSigner from binding to port 1585 or prevent the browser from connecting to localhost. This is particularly common in office environments.
Antivirus-Specific Fixes
| Antivirus | Fix |
|---|---|
| Quick Heal | Open Quick Heal → Settings → Firewall → Application Rules. Add emSigner.exe as "Trusted." Also disable "Web Security" temporarily while testing DSC. |
| Kaspersky | Open Kaspersky → Settings → Protection → Firewall → Manage Applications. Find emSigner and set to "Trusted." Allow all network connections for emSigner. |
| Norton | Open Norton → Settings → Firewall → Program Rules. Add emSigner.exe and allow all connections. Also check Smart Firewall and disable if needed. |
| McAfee | Open McAfee → Web Protection → Firewall → Program Permissions. Add emSigner.exe with "Full Access." |
| Windows Defender | Windows Security → Firewall → Allow app through firewall. Ensure emSigner.exe is checked for both Private and Public networks. |
12. DSC on Windows 11: Special Considerations
Windows 11 introduced stricter security policies that affect DSC operations. Here are the Windows 11-specific issues and fixes:
- Driver Signature Enforcement: Windows 11 requires all drivers to be digitally signed. Older token drivers from 2018–2020 may fail to install. Solution: Download the latest driver from the manufacturer — most have released Windows 11-compatible updates.
- Smart App Control: Windows 11's Smart App Control feature may block emSigner from running. Go to Windows Security → App & Browser Control → Smart App Control and set to "Off" or add emSigner as an exception.
- USB Selective Suspend: Windows 11 aggressively suspends USB devices. This can cause the token to disconnect mid-session. Disable: Control Panel → Power Options → Change plan settings → Change advanced power settings → USB settings → USB selective suspend setting → Disabled.
- Edge IE Mode Availability: Windows 11 ships with Edge but without IE11. IE Mode must be explicitly enabled in Edge settings (see Section 6). It is available until at least 2029 for enterprise users.
13. Which DSC Class is Required for GST?
India's DSC framework was restructured in 2021 when Class 1, Class 2, and Class 3 categories were simplified. As of 2026:
| Use Case | Required DSC Type | Validity |
|---|---|---|
| GST Return Filing (Companies/LLPs) | Class 3 — Organisation certificate | 1, 2, or 3 years |
| GST Return Filing (Individuals/Proprietors) | Class 3 — Individual certificate | 1, 2, or 3 years |
| Income Tax Filing | Class 3 | 1, 2, or 3 years |
| MCA/ROC Filings | Class 3 | 1, 2, or 3 years |
| e-Tendering / Government Procurement | Class 3 — DGFT or Organisation | 1, 2, or 3 years |
| e-Signing (Aadhaar-based, no USB token) | N/A — uses Aadhaar OTP | Session-based |
Note: Class 2 DSCs issued before 2021 can still be used until their expiry date, but new issuances are Class 3 only. Individuals filing GST as proprietors or partners can use an individual Class 3 DSC with their name and PAN.
14. When and How to Renew Your DSC
DSC renewal should be planned well in advance — not done in a panic when it expires on filing day. The renewal process:
- Check expiry date 45 days before expiry (as described in Section 7)
- Contact your original CA for renewal — most CAs offer renewal at a discounted rate versus fresh issuance
- Complete identity re-verification — CAs require re-verification via video KYC or physical verification depending on the class
- Pay renewal fees — typically ₹700–₹2,500 depending on CA and validity period chosen
- Receive new certificate on same or new token — if the old token hardware is in good condition, the CA installs the new certificate on the same token
- Update on GST portal — go to My Profile → DSC Management → Update DSC with the new certificate
- Update on other portals — also update on Income Tax portal, MCA portal, DGFT portal, and any other portals where the DSC is registered
Frequently Asked Questions — DSC on GST Portal
Why is my DSC not working on the GST portal?
DSC not working on GST portal is usually caused by one of these issues: emSigner utility not running, browser incompatibility, expired or revoked DSC certificate, wrong PIN entered multiple times (causing token lock), outdated drivers, or Java version conflicts. The most common fix is to restart the emSigner utility and use Firefox or Edge IE mode.
Which browser works best for DSC on GST portal?
As of 2026, Mozilla Firefox (latest version) is the most reliable browser for DSC operations on the GST portal. Microsoft Edge in IE Compatibility Mode also works well. Google Chrome has issues with WebSocket security policies that frequently break emSigner connectivity. Avoid Internet Explorer 11 — it is deprecated.
How do I reset a locked DSC token PIN?
A DSC token PIN locks after 3–5 consecutive wrong attempts. Open your token management software (ePass Manager, SafeNet Authentication Client), find the 'Reset PIN' or 'Unblock PIN' option, and use your PUK (PIN Unblocking Key) provided by your CA at issuance. If you don't have the PUK, contact your CA for assistance.
How do I check if my DSC certificate has expired?
Open the Windows Certificate Manager (certmgr.msc), navigate to Personal → Certificates, find your DSC certificate, and check the "Expiration Date" column. Alternatively, open your token management software and view the certificate's validity period. You can also check on the GST portal under My Profile → DSC Management.
Why does the GST portal say 'emSigner not detected'?
'emSigner not detected' means the browser cannot reach emSigner on localhost port 1585. Fix: ensure emSigner is installed and running (check system tray), run emSigner as Administrator, check if firewall or antivirus is blocking port 1585, and clear browser cache before retrying.
Can I use DSC on a 64-bit Windows system?
Yes. Download the 64-bit driver for your token model from the manufacturer's website. Ensure your Java installation (if needed) matches the browser's bitness. Most modern token drivers support both 32-bit and 64-bit Windows.
My DSC works on one computer but not another. Why?
This is almost always a driver issue. The computer where DSC works has correct drivers installed. On the new computer, download and install the correct driver for your token model, ensure emSigner is installed and running, and test again.
What is the correct port for emSigner on GST portal?
emSigner communicates with the browser on port 1585 (localhost). If this port is blocked by Windows Firewall or antivirus, the browser cannot detect emSigner. Add emSigner.exe as a firewall exception and allow port 1585 in your security software.
How often should I renew my DSC?
DSCs are valid for 1, 2, or 3 years depending on your choice at issuance. Renew 30–45 days before expiry to avoid any gap. Consider upgrading to a 3-year DSC at renewal to reduce the frequency of this process.
What should I do if DSC registration fails with 'Certificate not in valid state'?
'Certificate not in valid state' means the certificate is expired, revoked, or issued by an unapproved CA. Also check that your computer's date and time are correct — a wrong clock can make a valid certificate appear invalid. If the certificate is fine, contact your CA to confirm revocation status.
Need Help with DSC Registration or Renewal?
ClearlyComply helps businesses get their DSC set up, registered on GST portal, and troubleshoot any errors — so your filing is never delayed by a technical glitch.
Get DSC Help Now →