Digital Signature

1.1 Document Purpose

The purpose of this document is to help eBiz portal users to use Digital Signature.

1.2 Acronyms and Glossary

Term

 

Definition

DSC

Digital Signature Certificate (DSC) is a secure digital key that certifies the identity of the holder, issued by a Certifying Authority (CA)

Digital Signature

Digital signature is an electronic method of signing an electronic document

CA

A Certifying Authority (CA) is a trusted agency whose central responsibility is to issue, revoke, renew and provide directories for Digital Signature Certificates.

emSigner

A single installer provided by eMudhra for DSC solution

eMudhra

eMudhra is a licensed Certified Authority authorized by Controller of Certifying Authority (CCA), Government of India, to issue various types of Digital Signature Certificates (DSC).

1.3 Overall steps to use Digital Signature

Following steps should be followed to use digital signature in eBiz portal (https://www.services.ebiz.gov.in/).

  1. Obtain Valid Digital Signature(Class 2 or Class 3) from Certifying Authorities
  2. Download emSigner Installer from eBiz portal and start server
  3. Register Digital Signature with eBiz Portal

2. Procedure to acquire digital Signature 

The Office of Controller of Certifying Authorities (CCA) issues Certificate only to Certifying Authorities. Certifying Authorities (CA) issues Digital Signature to Business-User.

a)      Steps for obtaining Digital Signature are as follows:

  1. Visit the site of the licensed CA using internet browser.
  2. Apply for  CLASS II and CLASS III digital certificates.
  3. For making payment regarding Digital Signature and submission of documents required for issuing Digital Signature, follow the instructions on the CA's website.

b)      Links to some licensed CA's are provided below:

http://www.safescrypt.com
www.e-Mudhra.com

 

3. Steps to install Digital Signature PFX file/ Hard Token:

3.1 Pre-requisites

3.2 Installation steps for Digital Signature (PFX files)

1. Right Click on Certificate (.pfx file) and click on ‘Install PFX’. 

imageOfDesc

2.Click on ‘Next’ button.

imageOfDesc

3.Browse the file which is to be imported. (i.e .pfx file of the Certificate).

imageOfDesc

4. Enter valid password given by certifying authority which user has purchased, pfx file of Digital Signature, and then Click on ‘Next’ button.

imageOfDesc

5. Certificate Store will be automatically selected and then click on ‘Next’ button.

imageOfDesc

imageOfDesc

6. Click on ‘Finish’ button and a message about successful import will be displayed.

imageOfDesc

7. Once Certificate is imported, Business User can verify certificate details. Go to Internet Explorer-> Click on Internet Option-> Click on Content -> Certificate button.

imageOfDesc

4. Procedure to download and install emSigner set up file

 4.1 Downloader for emSigner

1. Login to the eBiz portal (https://www.services.ebiz.gov.in/).  Navigate to Register/Manage Business ->Register Digital Signature menu.

imageOfDesc

2. Option to download installer (Windows and Linux/Mac) is provided in Register Digital Signature page.

imageOfDesc

 4.2 Installation Steps for Windows users

1. Download Web Socket installer for Windows

2. Unzip downloaded folder.

3. Right click on emSignerDIPP.msi and  install web socket client. Screenshots for installation are given below.

imageOfDesc

imageOfDesc

imageOfDesc

4. Default installation location will be "C:\Program Files\eMudhra Limited\emSignerDIPP\", user can save it in any location of the system.

imageOfDesc

imageOfDesc

5. emSignerDIPP shortcut will be created in the Desktop.

imageOfDesc

6. Run the emSigner. Double click on emSigner shortcut.

imageOfDesc

7. Click on Yes.

imageOfDesc

8. Click on OK. The emSigner UI will be minimized in taskbar tray to check the status of the connection.

 4.3 Installation Steps for Linux/Mac users

1. Download Web Socket installer for Linux /Macintosh OS

2. Unzip downloaded folder.

3. Open shell script and navigate to downloaded folder

4. Execute ./startserver.sh command

5. If emSigner is started successfully, below message will be displayed. Click on ‘OK’.

imageOfDesc

6. emSigner icon will be created in the task bar.

5. Steps to install/register/un-register Digital Signature on eBiz portal

5.1 Pre-requisites:

1. emSigner server should be started in your machine while registration and web form signing.

2. Digital Signature Certificate should be installed or plugged in to system

5.2 Steps to register Digital Signature in eBiz portal:

1. Login to eBiz portal (https://www.services.ebiz.gov.in).

imageOfDesc

2. After successful login, Business User will be redirected to ‘Account Summary’ page.

imageOfDesc

3. Navigate to Register/Manage Business -> Register Digital Signature menu.

imageOfDesc

4. Click on ‘Register Digital Signature’ button. All installed Certificates will be shown in pop up.

imageOfDesc

5. Select any Certificate which you wish to register and Click on ‘Register’ button.

6. Certificate will be registered and below screen will be displayed with registered certificate details.

imageOfDesc

7. Business User can use it for signing the application forms of services. From this screen a Business User will have a provision to either un-register that Certificate or re-register another Certificate with eBiz portal. (Re-Register step is same as Register Digital Signature)


5.3  Steps to Un-register the Digital Certificate:

1. Click on ‘Un-register Digital Signature’ button.

imageOfDesc

2. Click on ‘OK’ button.

imageOfDesc

6. Procedure to apply for Digital Signature

6.1 Procedure to apply signature for services

1. Fill the form and click on ‘Submit Application’. 

imageOfDesc

2. Click on ‘OK’. Another pop up will open with all installed certificates.

imageOfDesc

3. Select registered signature and click on ‘Sign’. After successful signing user will be redirected to next step.

4. If certificate is not registered with eBiz portal, user will get message displayed below, and after clicking on ‘OK‘ , user will be redirected to Registered Digital Signature page.

imageOfDesc

7. Procedure to uninstall emSigner

7.1 Procedure to uninstall emSigner set up

1. Go to Control Panel -> Programs and Features. Double Click on emSigner.

imageOfDesc

2. Click on Yes.

imageOfDesc

8. Frequently Asked Questions

 1. Business User receives below message while registering the Digital Certificate or while signing web form. 

imageOfDesc

Answer: This occurs if Digital Signature Certificate is not installed or token is not plugged in.
Make sure that either Class II or Class III certificate is plugged in. Expired certificates will not be shown to user. Refer section 2.

2. Business User gets below error message while registering or web form signing  

imageOfDesc

Answer: Reasons can be either

1. emSigner server is not started or incorrect emSigner is installed.
      a. If emSigner is not started - Start emSigner server. Check if emsigner is running by clicking on the icon in the System Tray.
      Refer section 4 for downloading and starting emSigner server.
      If server is already running, stop the server. Uninstall emSigner set up from control panel and refer section 4 for downloading and starting emSigner server. Close all browsers and try again.
      b. Incorrect emSigner setup file - If emSignerDIPP (version 1.7) is not there but emSignerGSTN running, refer section 4 for downloading and starting emSigner server. Close all browsers and try again.
2. If user does not have administrator rights on the system, then administrator rights should be taken.
3. The machine should be installed with JRE 1.6.38 version & above and compatible versions of browser as given in 6th FAQ. To check JRE version, please go to control panel > java > Double click on Java> General > About > JRE version is displayed here.
The environment variables, JAVA_HOME and PATH should also be configured. To update the PATH Environment Variable follow this link https://docs.oracle.com/javase/tutorial/essential/environment/paths.html.
4. If issues are while opening websocket then follow the steps given in 5th FAQ from Mozilla or Chrome.
5. Check if any browser proxy is enabled. Steps to check proxy in different browsers is mentioned below.

a) Steps to check proxy in Internet Explorer.

 Open Internet Options ->Connections -> LAN Settings, see if the second check box is checked or not.

imageOfDesc

imageOfDesc

b) Steps to disable proxy in Chrome.

 Go to Settings -> Show Advanced Settings -> Network -> Change proxy settings -> LAN Settings, see if the second check box is checked or not.

imageOfDesc

c) Steps to disable proxy in Firefox browser.

 Go to Options ->> Advanced ->> Network ->>Settings, Select radio button ‘No proxy’ and click on ‘OK’ button.

imageOfDesc

3. Business User gets below error message while registering or web form signing.

imageOfDesc

Answer: The reason is that User did not install the latest emSigner (version 1.7) set up provided by eBiz. In this error, business user needs to uninstall current emSigner from Control Panel, (refer section 7) download and then install latest set up provided. Refer section 4 for downloading and starting emSigner server. Close all browsers and try again.

4. Getting below error while starting emSigner server.

imageOfDesc

Answer: jre is not installed in your system. Click on ‘OK’ and you will be redirected to below screen where you can download and install jre and then proceed.

imageOfDesc

5. Testing in firefox.

Answer: If you are getting issues while opening websocket in Mozilla Firefox browser, Mozilla FireFox needs manual intervention in adding root certificate. Please follow the below mentioned steps:

Check the port on which emSigner is running. Open emSigner icon from system tray and get the port number.

imageOfDesc

Add the URL - https://127.0.0.1:portNo (port on which server is started Eg: https://127.0.0.1:1645) in Firefox address bar and press enter. The page will ask to add the certificate to exception site list. Click on add exception. 

imageOfDesc

Click on Advanced.

imageOfDesc

Click on Confirm Security Exception.

imageOfDesc

6. Compatible Browsers

Browser

 

Supported Version

Internet Explorer

10.0 and above

Firefox

6.0 and above

Chrome

16.0 and above

Safari

6.0 and above

Opera

12.1 and above

Microsoft Edge

Since first version

7. One certificate can be registered with only one user Id at a time. If it is already registered with a user Id and you are trying to register the same certificate with some other user id, below pop up will appear:

imageOfDesc

To unregister and register the certificate please refer section 5.3 and section 5.2 respectively.