Set up DSC signing
Like the emsigner tool you already use for the Income-Tax portal — set it up once and signing works automatically. No installation, no technical steps. Your documents never leave your computer.
Free · tiny download · no installation, no Node, nothing to compile
Download & unzip
Unzip the folder anywhere — your Desktop is fine.
Double-click "Start DSC Signing"
A small window opens and says it’s running. Leave it open.
Plug in token & sign
Open the signing page — it connects on its own. Your token asks for its PIN.
Is this safe?
- Your PDF never leaves your computer — nothing is uploaded, anywhere.
- Your private signing key never leaves the USB token, as required for a valid DSC.
- Your token shows its own PIN prompt — you never type the PIN into the browser.
- It uses only built-in Windows features — no Node.js, no drivers to configure.
- Works with ProxKey, ePass2003, SafeNet, Watchdata, Gemalto and other Class-3 tokens.
Token not detected?
1. Make sure the token's own software (that came with your ProxKey/ePass) is installed and the token is plugged in.
2. Re-open the signing page — it keeps checking automatically.
3. Want it always on? Double-click Install-Autostart in the folder once, and it starts with Windows every time.
For IT / developers
The Windows helper is a single PowerShell script (native-host-win/dsc-signer.ps1) — built-in .NET SignedCms + the token cert from the Windows store, on a loopback HTTP listener. No admin needed.
A cross-platform Node version (PKCS#11) also exists in native-host/. On a production https:// site, run the helper over HTTPS (mkcert) so the browser can reach it.