The USB token that stores a DSC private key should be treated like a controlled signing device, not a normal pen drive.
Use a strong PIN that is not written on the token or shared in email.
Keep custody with the authorized subscriber and record any handover inside an organization.
Install token drivers only from the manufacturer or a trusted service source, and avoid unknown utilities that request administrator access.
Do not leave the token connected to a shared computer.
Lock the workstation before stepping away and remove the token after use.
Practical points to remember
Repeated wrong PIN attempts may lock the device, so seek qualified help instead of guessing.
If the token is lost, stolen, damaged or suspected of misuse, contact the service provider and certifying authority process quickly to assess revocation.
Regularly review expiry dates and the list of people permitted to use organization certificates.
When an employee changes role or leaves, recover the token and review authorization.
These basic controls reduce both operational failure and unauthorized signing risk.
Need case-specific help?
Tell us the portal, applicant category and deadline. We’ll help you identify the right starting point.