Procedure for How to Enroll for Digital Signature

In Online Processing System getting to implement Digital Signature and Electronic Token for
security and Authentication Purpose. For that bidder must have to pay 1000 Rs for Electronic
Token and 1150 for Digital Signature. Digital signature is must for bidder at the time of Login
and submission of tender to prove identity or right to access information or services on the net.

Following are the procedure to enroll for Digital Signature:

1. Go to the tender website for Bidder registration (If you have already registered then go
directly to 2nd option).
2. After Registration, Click on ‘Enroll for Digital Certificate’ link. It will ask for your user id
and password. Enter your Email Id as User id and Password then pay enrollment fees
through credit card. After paying enrollment fees take printout of the receipt and then click
‘Go For Enrollment button’. Following page will be displayed:

Click on ‘New user? Registration’ for new login. The Enrollment procedure requires
Bidder to go through four steps outlined below. For registration fill following information,

• Enter your Name, Email, preferred User ID & Password

• Ensure that you remember the User ID & Password as you will need this information to
access your account
• Type of User » This maybe Individual, Company or Government, depending on the entity
for which a certificate is needed. The verification procedure (and supporting documents
required) will be different for each.
• Registration Authority » This is the office through which you are applying for a digital
certificate. In your case, it is Registration Authority

3. In Step-1 click on ‘click here’ for Enroll. Following information need to feel properly in
Enroll Form
1. Common Name,
2. Organization,
3. Address / Location,
4. State and country code.
 4. Submit the Request for generate the certificate after submitting bidder will get Certificate
Enrollment Form / Letter of Authority with Request number. Then print the form or save it.

Note 1: If you do not have a printer attached to the system, save the Certificate Enrollment
Form by clicking the Save button.

To process and legalize your Certificate Request you need to send the signed copy of
your Certificate Enrollment Form to the Registration Authority (RA).
 Note 2:.Bidder E-Mail ID must be valid and correct (If you provided an incorrect, invalid or
misspell Email ID, you will not receive this PIN. Please contact your RA administrator for further
clarifications).

Note 3: Once a Digital Certificate request is submitted, no changes can be made to the
content. So please ensure that all information that you submit is correct before you submit your
request. However, if there is still a mistake, you will need to submit a fresh online request. In
such cases, please contact your RA (Registration Authority) Administrator immediately.

Note 4: Your Digital Certificate user account is designed for managing the lifecycle of your
digital certificate(s). Using this account, one can place suspension, revocation requests on your
behalf, request password changes etc. All these constitute security risks when accounts are
shared. We recommend that you keep your account confidential and strictly private.

5. Click on step2 and Physical copy of the filled Certificate Request Form and the
supporting Validation documents as per the checklist has to be sent at the earliest, to the
address mentioned in the form. This is required to process and legalize your certificate
request.
Download Certificate Request Form in: [Word Format] [PDF Format]
After enrollment, In Step-2 Bidder needs to submit documents to RA for validation. All
information displayed on your digital certificate needs to be verified before the certificate can
be issued. Download and fill the Certificate Request form (as defined in Schedule IV of
Information Technology Act, 2000).
Your application will be considered complete once you submit the online request and the
request form and all supporting documents required for verification of your request.

1. Certificate Request Form/Letter of Authority.

 DOCUMENT CHECKLIST FOR INDIVIDUAL TYPE OF CERTIFICATE

The following is a list of the supporting documents that you need to submit along with this Form.

NOTE:

• NOTARIZATION WHERE REQUIRED SHOULD BE DONE BY NOTARY PUBLIC.

• ATTESTATION TO BE DONE BY GAZZETTED OFFICER.

Sr. Required Documents Document Documents

No. submitted verified by
RA
1 Applicant Verification Documents (any
one attested/notarized copy required)
• Passport
• Voter’s ID
• PAN card
• Identity Card – Attested by Authorized
signatory of the company with
photograph.
• Driver’s license
• Ration Card
2 Proof of Address (any one
attested/notarized copy required)
• Passport
• Ration card
• Driver’s license
• Latest Telephone bill
• Latest Electricity bill
• LIC receipt
3
Certificate Enrollment Form (downloaded from
www.tcs-ca.tcs.co.in) (Required)

4
Certificate Request Form (Required)
 After submitting Documents, RA (Registration Authority) Administrator will Verified all the
information from given documents and then approved the Digital Certificate.

6. Go to step-3 for User can see the status whether the certificate is Generate, Pending or
rejected from RA office. The status of your request is shown here. If the request is
pending with RA or TCS-CA, wait until the respective authority process the request.

7. If the status shows that the Certificate Generated, click on the request Number.
After Clicking on request number a page with Digital Certificate Information is displayed,
click on “Get Authentication PIN” button.

8. An Authentication PIN is a unique code that is sent to you when your certificate is ready for
download. It is sent by email to the email address provided by you at the time of enrollment of
your digital certificate

Note- The Authentication PIN required for downloading your Digital Certificate is emailed to the
Email ID provided during certificate enrollment. If you provided an incorrect, invalid or misspell
Email ID, you will not receive this PIN.

9. After that Bidder will able to download the Certificate on Machine.

Download your Certificate-

When your Certificate is generated, you will receive an email notification informing you of the
same. This email will also contain your Authentication PIN. In order to download your
certificate, please do the follow:
Important Note:

• Download the Digital Certificate on the same machine where you have
generated the Certificate request and the key pair
• Download the Digital Certificate on the same browser (Such as Internet
Explorer, Netscape) where you have generated the Certificate request and
the key pair
• Download by logging in to the machine as the same computer account
(Such as Administrator, Guest) as while generating the Certificate request
and the key pair

• Go to Step-4 in the Certificate Management Center. Alternately, you can also click the View
Status link.
• You should be able to see your request status details. Click the Request Number hyperlink to
download your certificate.

Screenshot-8

• You will be prompted to enter your Authentication PIN. Please enter the PIN that was emailed to
you.
 Screenshot-9

Note: You will not be able to download your certificate without the Authentication PIN. So please
ensure that you enter a valid email ID during certificate enrollment.

If you have not received your Authentication PIN, please do the following:

o Go to View Status and check the status of your certificate request.

o If the status says Request Pending at RA Office or Request Pending at CA Office, it
means that your certificate request is still being processed. Please contact your RA
Administrator to find out whether all your documents (as per the checklist in Step-2) have
been received. If any documents are pending, please send these to TCS-RA immediately
so that your certificate can be generated.
o If the status says Certificate Generated, please contact your RA office and inform them
of the same.
Note: In case you provided an invalid/incorrect Email ID at the time of enrollment, you will
need to repeat the enrollment process. This is because your Email ID is part of the
information displayed in your digital certificate and it needs to be verified just like all your
other credentials before your certificate can be issued.
Click the Download button to download and install the Certificate.

Screenshot-10

Once the certificate is downloaded, you will see the following confirmation.

Screenshot-11

At this point, your certificate has been successfully downloaded onto your machine or USB Token.

10. For downloading the Certificate Following Browser setting is must on Machine,
Please do the following to enable Active-X controls in your Internet Explorer (IE) browser.
• Open an IE window and go to Tools -> Internet Options -> Security -> Custom
Level

• Ensure that all five settings under 'ActiveX controls and plug-ins are set to
'Enable' or 'Prompt'
Note 1: If you generated your certificate request on a browser (i.e., if you did not use a USB
token at the time of enrollment), you will have to download the certificate on the same machine.
This is because, at the time of enrollment, cryptographic keys are generated and stored on your
machine. These cryptographic keys form the technical basis for the generation and use of your
digital certificate. Without these, you cannot download the certificate.

Note 2: If you used a Smart Card or USB Token at the time of certificate enrollment, you can
download your certificate on any machine to which your USB token is connected.

Note 3: When you upgrade/reinstall your Internet Explorer browser, the digital certificates and
cryptographic keys are permanently lost. It is therefore very important to backup your certificate
before you make any changes to your browser or system configuration.

11. Procedure for How to use USB eToken?

To start the process, procure the Digital Signature Certificate Enrollment Kit from
TCS-CA or its Registration Authorities. The kit contains:

 USB Token
 Installation CD. This contains:
USB Drivers
Mozilla Firefox
TCS File Signer plus Evaluation Copy
Note:
 Use the Installation CD to install the USB Token driver.
 Ensure the following before installing the USB token driver.

System Requirement:
 1. Operating System: Windows 2000, XP

2. Browser: Internet Explorer 5.5 and above

To install the eToken:

1. Insert the CD into the CD drive of your computer.

2. To install eToken driver click on etoken_driver_aladin.msi Windows

Installer Package. Accept the License Agreement and proceed with
installation.

3. Insert the USB Token in the USB port of the computer, if prompted

4. Restart the computer after the installation is complete.

You can now see the eToken Properties from the Start Menu by selecting
Programs> eToken> eToken Properties .
Click “eToken Properties” and with your eToken inserted, the following screen is
displayed:
Changing the Etoken Password :
All eTokens are configured at manufacture with the factory default password. This
password is “1234567890”. Click “Change password” on the eToken Properties

screen and the following eToken Properties dialog is displayed:

Enter your current eToken password in the “Current Password” field and, the new
Password in the “New Password” field. Confirm new Password and click “OK” to set
the new Password.

Renaming The EToken :

For additional convenience and ease of identification, the eToken name can also be
personalized. Click “Rename eToken” on the eToken Properties screen. Since
renaming the eToken requires the eToken password, the following dialog is
displayed:
Give the Password for the eToken and click “OK”
Enter the new eToken name in the eToken Name field and click “OK” to set the
eToken Name.
Importing The Certificate into EToken :

To import the Certificate, you first need to export the certificate from the IE
Browser onto the Desktop and then import it into the eToken.

Exporting The Certificate :

Exporting the Digital Certificate from the browser and maintaining its backup as a
‘.pfx’ file is essential since, at any point of time if your certificate gets deleted
from the browser or token or if you format your system, you can always import it
again.
For exporting your Certificate that has been downloaded in your browser, Open
the IE Browser and follow the path

“Tools>Internet Options>Content>Certificate>Personal” tab.

CERTIFICATES

The certificates issued by TCS-CA is in X509 v3 format. In Microsoft

windows machines, it will be recognized by the extension “.cer”.
To view the certificates, double click the .cer file
Click on the Details tab to get the more details on the certificate.