Error While Signing PDF with DSC India: Every Error Fixed — Complete Solution 2026

Signing a PDF with a DSC in India involves more moving parts than most people realize: the USB token, the token driver, the PDF application (Adobe Acrobat or others), the certificate trust chain, and sometimes a timestamp server. When any of these breaks, you get an error — and the error messages from PDF software are notoriously unhelpful.

Whether you're signing annual report PDFs, MCA forms, audit certificates, contracts, or any other document, this guide covers every PDF-DSC signing error with concrete, step-by-step solutions.

1. How PDF DSC Signing Works in India

Understanding the technical process helps diagnose exactly where it's failing. When you click "Sign" in Adobe Acrobat with a DSC token:

Additionally, for signature verification to work correctly, the recipient's PDF viewer must be able to verify the certificate chain from your DSC all the way up to a root CA that it trusts. In India, the root authority is the Controller of Certifying Authorities (CCA India), which sits above all Indian CAs (eMudhra, Sify, NSDL, etc.).

Adobe Acrobat's "approved trust list" (Adobe AATL) does not include Indian CAs by default. This is why Indian DSC signatures often show as "unverified" in Adobe — even when the signature is mathematically valid. The fix is to manually add CCA India's root certificate to Acrobat's trust store (covered in Section 10).

2. PDF Signing Tools Comparison

3. Setting Up Adobe Acrobat for DSC Signing

Before fixing errors, ensure Acrobat is properly configured for DSC use. These are one-time setup steps:

4. Fix: Certificate Not Showing in Acrobat Signing Dialog

You go to sign the PDF, the certificate selection dialog opens — but your DSC certificate is not listed, or the list is empty.

Show Expired Certificates in Acrobat

If you suspect the certificate is expired but want to check, you can force Acrobat to show expired certificates:

1. In the signing dialog, look for "Show all" or "Include expired certificates" checkbox
2. If no such option, go to Acrobat Preferences → Signatures → Creation & Appearance → More → check "Show expired certificates"

Insert Token Before Opening Acrobat

Acrobat enumerates available PKCS#11 tokens and certificates at startup. If you plug in the token after Acrobat is already open, the certificate may not appear. Solution: close Acrobat completely, insert the token, wait for Windows to recognize it, then reopen Acrobat and try signing.

5. Fix: Signing Failed / Error During Signing

6. Fix: Signature Shown as Invalid After Signing

After signing, Acrobat shows a red X or warning — "Signature is invalid" or "At least one signature has problems."

7. Fix: Certificate Path Not Trusted

This is the most common PDF signing problem in India. Adobe Acrobat's Adobe Approved Trust List (AATL) doesn't include Indian CAs — so signatures by Indian DSCs appear as "not trusted" even though they're perfectly valid under Indian law.

Complete fix is covered in Section 10. The short version: download CCA India root certificate from cca.gov.in, add it to Acrobat's Trusted Certificates with "Use as trusted root" checked.

8. Fix: 'Document Modified After Signing' Warning

This warning appears when Acrobat detects any change to the PDF after the signature was applied. Even seemingly minor changes invalidate the signature cryptographic integrity.

Common Causes of Unintended Modification

Fixing "Document Modified" Warnings

If you see this warning on a PDF you didn't intentionally modify:

1. Check if Acrobat's autosave feature added any content — go to Preferences → Documents → uncheck "Automatically save document changes to temporary file every X minutes"
2. Check if Acrobat updated metadata on opening — some versions add metadata on first open; disable: Preferences → General → uncheck "Update metadata"
3. If the modification happened during transmission (e.g., email gateway added a footer), the sender must re-sign after adding the footer, not before

9. Fix: PIN Dialog Not Appearing During Signing

You select the certificate, click Sign, and wait — but the PIN entry dialog never appears. The signing process appears to hang or fail silently.

10. Adding CCA India Root Certificate to Adobe Acrobat

This is the single most impactful configuration for PDF signing in India. Once done, all signatures by Indian CA-issued DSCs will show as trusted in Acrobat.

11. Using Timestamp Server for Long-Term Validation

A timestamp embedded in the PDF signature proves when the document was signed. This is critical because: after your DSC certificate expires, the signature's validity in Acrobat would normally show as "unknown" or "expired." But if a trusted timestamp was embedded, Acrobat can prove the signature was created when the certificate was still valid — making the signature perpetually verifiable.

Adding a Timestamp Server in Acrobat

1. Go to Edit → Preferences → Signatures → Creation & Appearance → More
2. Under "Default signing method," ensure your DSC method is selected
3. Find the "Timestamp server" section — click "New"
4. Enter server name: DigiCert Timestamp and URL: http://timestamp.digicert.com
5. Leave username/password blank (it's a free, public timestamp server)
6. Click Verify to test connectivity, then OK
7. Check "Include signature's revocation status" if available

After adding the timestamp server, every PDF you sign will automatically include a cryptographic timestamp from DigiCert. This is a globally recognized timestamp authority. Your signatures will remain verifiable for decades after your certificate expires.

12. Signing MCA/ROC PDF Forms

MCA forms (like AOC-4, MGT-7, DIR-3 KYC, SH-7, etc.) are signed through the MCA21 portal workflow — not directly through Adobe Acrobat. Here's the correct process:

13. Signing GST-Related PDF Documents

GST-related PDFs (like audit reports, appeal documents, or letters to tax authorities) are typically signed via Adobe Acrobat or another PDF tool, not directly through the GST portal. The GST portal itself uses emSigner for return filing (handled in the browser), not PDF-level signing.

For GST audit reports (Form GSTR-9C format), the chartered accountant or tax auditor signs the PDF using their Class 3 DSC via Adobe Acrobat, following the process in this guide. The signed PDF is then uploaded to the GST portal as an attachment.

Key requirements for GST audit PDF signatures:

• Signed using a Class 3 (Individual) DSC in the CA/CMA/tax practitioner's name
• Signature must be visible and include the certificate details
• PDF must not be password-protected (GST portal may reject encrypted PDFs)
• File size: keep signed PDF under 2MB for portal upload (compress images if needed before signing)

14. Alternative Free PDF DSC Signing Tools

If Adobe Acrobat is not available or consistently throwing errors, these alternatives work with Indian DSC tokens:

Using PDF24 to Sign PDF with Indian DSC