Rural Development Department Government of Tripura Venue: Conference Hall #1, Pragna Bhawan, Gorkhabasti Date: 7th March, 2014 How Google react for “digital signature” Only dig is enough Where can I use Digital Signature Certificates? You can use Digital Signature Certificates for the following: For sending and receiving digitally signed and encrypted emails For carrying out secure web-based transactions, or to identify other participants of web-based transactions. In eTendering, eProcurement, Income Tax [for efiling income tax returns] Applications and also in many other applications. For signing documents like MSWord, MSExcel and PDFs. Plays a pivotal role in creating a paperless office. What is Digital Signature? A digital signature is an electronic form of a signature that can be used to authenticate the identity of the sender of a message/document, and possibly to ensure that the original content of the message or document that has been sent is unchanged. What is a Digital Signature Certificate (DSC)? Digital Signature Certificates (DSC) is the electronic format of physical or paper certificate like a driving License, passport etc. Certificates serve as proof of identity of an individual for a certain purpose in digital world. Digital Signature Certificate can be presented electronically to prove your identity, to access information or services on the Internet or to sign certain documents digitally. Why do I need a Digital Signature Certificate? A Digital Signature Certificate authenticates your identity electronically. It also provides you with a high level of security for your online transactions by ensuring absolute privacy of the information exchanged using a Digital Signature Certificate. You can use certificates to encrypt information such that only the intended recipient can read it. You can digitally sign information to assure the recipient that it has not been changed in transit, and also verify your identity as the sender of the message. Where can I purchase a Digital Signature Certificate? Legally valid Digital Signature Certificates are issued only through a Controller of Certifying Authorities (CCA), Govt. of India, licensed Certifying Authorities (CA), such as NICCA (NIC Certifying Authority). What is the difference between a Digital Signature and a Digital Signature Certificate? A digital signature is an electronic method of signing an electronic document whereas a Digital Signature Certificate is a computer based record that Identifies the Certifying Authority issuing it. Has the name and other details that can identify the subscriber. Contains the subscriber's public key. Is digitally signed by the Certifying Authority issuing it. Is valid for either one year or two years. • Certifying Authorities & NICCA • DSC Request: Eligibility & Fee Structure DSC Request Form Filling up • Validation of DSC Request Filled up Forms & Payment w.r.t Tokens: Validation & Guidelines DSC issuing Background processes • Monitoring of DSC Issuance: Only beneficiary-level status from NICCA Best Practices followed in Tripura • Configuration of DSCs • DSC Integration into MGNREGA Software: CCA CA RA What is the role of CCA? The Controller of Certifying Authorities (CCA) is a Government of India undertaking that license and regulate the working of Certifying Authorities. The CCA certifies the public keys of CAs, which enables users in the cyberspace to verify that a given certificate is issued by a licensed CA. For this purpose, CCA operates, the Root Certifying Authority of India (RCAI). The CCA also maintains the National Repository of Digital Signature Certificate (NRDC), which contains all the certificates issued by all the CAs in the country. What is a Certifying Authority (CA)? A Certifying Authority is a trusted agency whose central responsibility is to issue, revoke, renew and provide directories for Digital Signature Certificates. According to Section 24 of the Information Technology Act 2000, "Certifying Authority" means a person who has been granted a license to issue Digital Signature Certificates. What is a Registration Authority (RA)? A RA (Registration Authority) is an agent of the Certifying Authority who collects the application forms and related documents for Digital Signature Certificates, verifies the information submitted and approves or rejects the application based on the results of the verification process. Submit DSC Reques t form Scrutiny of DSC request form USER ID creatio n in NICCA Portal RA Administrat or checks online request as per Original DSC request form User configure PC and Enroll online Request in NICCA Notify user for USB token Collection RA Administrat or digitally sign online request User download and install DSC in USB token Online request is forward to CA Office Delhi User get email for PIN CA Administrator checks online request and digitally sign online request Certificate is generated in nicca.nic.in DSC e-Token configuration Disable Automatic System Update completion of DSC Configuration till the Do not install, uninstall and update any software till the completion of DSC Configuration Certificates to be downloaded on the same PC which was used for online request generation Download & Install JRE 6 (32 bit) from NICCA website Open nicca.nic.in on IE browser click “Download smart card/ USB e-Token driver” Install the software placed at No. 15 point Insert DSC e-Token in PC & open “SC-SED” icon from the Desktop If you face any problem to run “SC SED” icon on desktop then do following. Click on “SC SED” icon on desktop>> properties >> Compatibility >>Compatibility mode >> Windows XP Service Pack2 >> Apply Click on “Gemalto USB Key Smart Card Reader” Then Click on “Yes”. Enter Default Password – 0000 Enter Your Personal Details Generated Token Information Click on “View”. Now its empty Login as member in the NICCA site Type the user ID & password provided with the DSC e-Token Select “Enroll” option from the toolbar Read & close the message box Click the “Yes” button in the next message that will appear Choose “Signing Certificate” option from Certificate Type and fill up the relevant text boxes also select the “Microsoft Base Smart Card Crypto Provider” option from the Cryptographic Service Provider Enter Pin 0000 Wait for the key pair to be generated Signing Certificate Generated Open “View Status” to verify Open “Enroll” option to generate the “Encryption Certificate” Click “Ok” button & fill up the form Follow similar procedure like “Signing” View Status in the next page to verify whether both certificates are generated or not Open the DSC holder’s email inbox to verify the “Signing” & “Encryption” Certificates Open “View Status” again to see the status of progress of DSC Certification from CA office, New Delhi After successful Certification open the “Request Number of Signing Certificate link Open email inbox to view the Authentication Pin Copy the “Authentication Pin” from email inbox Sign of successful installation of JRE Paste the “Authentication Pin” and download the “Signing Certificate” in the User PC Enter Pin 0000 Follow same procedure for downloading “Encryption Certificate” in the machine Enter Pin as before (0000) Press the “Save” button to save the Certificate file in Desktop (say) Open “SC-SED” icon and select “Setting” Click on “Import Certificate” Open the “Browse” button to select the saved file from Desktop (say) Key in the Digital ID Password after copying the “Request Number” of “Encryption Certificate” generated Enter Token Password (0000) Digital ID has been imported successfully Click on “view” to verify successful DSC configuration DSC e-Token configuration Done!