How to Apply for a Digital Signature Certificate in Nepal
A bilingual, official-source guide to choosing a Nepal OCC-licensed certifying authority, preparing personal or organizational eKYC, completing identity verification, and protecting a digital-signature certificate and private key.
Independent guide, not an official website
Nepal Docs Guide is not affiliated with the Government of Nepal. This guide helps you prepare, but official portals and offices control final rules, fees, forms, and timelines.
Quick answer
A Digital Signature Certificate (DSC) is issued by a certifying authority licensed by Nepal's Office of Controller of Certification (OCC), not by an agent or NepalDocsGuide. Choose personal or organizational use, verify the provider's OCC status, create the provider's eKYC account, submit the required identity and address evidence, complete the provider's authentication, and follow its live issuance instructions. डिजिटल सिग्नेचर सर्टिफिकेट लिन OCC बाट इजाजतप्राप्त प्रमाणीकरण गर्ने निकाय रोजेर सो निकायको eKYC र पहिचान प्रमाणीकरण प्रक्रिया पूरा गर्नुपर्छ।
Eligibility
- Individuals who need a personal Digital Signature Certificate for an electronic service that accepts it
- Authorized people applying for an organizational certificate with evidence of their link to and authority from the organization
- Applicants who can complete the licensed certifying authority's identity, address, mobile, email, and eKYC verification
- Applicants who can provide either a PAN or National Identity Number (NID), as required by the reviewed OCC identity-verification guidelines
- Foreign applicants using the separate verification route specified by the licensed certifying authority
Required documents checklist
- □ Either PAN or National Identity Number (NID), as required for DSC applicants by the reviewed OCC guideline
- □ One accepted identity proof for a personal certificate, such as NID-based eKYC, passport, driving licence, PAN card, or another qualifying government photo ID
- □ One accepted address proof; the OCC guideline lists options including NID-based eKYC, utility bills, bank statements signed by the bank, tax/VAT registration, driving-licence or vehicle-registration records, voter ID, passport, municipal receipt, or another government photo ID showing name and address
- □ A mobile number that the certifying authority can verify by OTP
- □ An email address the certifying authority can verify for DSC issuance
- □ A current photograph and the other mandatory application details requested by the licensed certifying authority
- □ For organizational use: evidence that the organization exists, evidence linking the applicant to it, and the required authorization from its authorized signatory
Step-by-step process
- Identify the exact system or filing where the signature will be used and ask that receiving system which certificate type or technical format it accepts.
- Start at the official OCC website and verify that the chosen provider is a certifying authority operating under Nepal's OCC licensing framework. Do not buy from an unknown reseller merely because it advertises DSC service.
- Choose personal or organizational application mode. Do not apply for a personal certificate when the relying service requires the organization name and authorization to appear in the certificate.
- Create the eKYC account through the chosen licensed certifying authority. The OCC guideline says a DSC applicant must have an eKYC account, except where a separate NID-authenticated eSign route applies.
- Enter name, address, email, mobile number, PAN or NID, photograph, certificate type, and certificate class exactly as supported by your records and requested by the live application.
- Upload the identity and address evidence accepted for your verification route. For an organizational certificate, also provide the organization-existence and authorization evidence that applies to the entity type.
- Complete the certifying authority's two-factor, mobile, email, eKYC, and any video or original-document verification it requires. Never send an OTP or private-key PIN to a helper.
- Review the generated DSC application before signing it. OCC guidance states that a power of attorney cannot be used to apply for or receive a DSC from the certifying authority.
- Follow the certifying authority's current issuance, token or software setup, subscriber-agreement, payment, and collection instructions only after confirming the provider and certificate purpose.
- After issuance, test the certificate in the intended official service, store the private key or crypto token securely, and keep the certifying authority's revocation and support path available.
Fees and timelines
- The OCC sources reviewed on August 1, 2026 do not publish one universal applicant fee for every licensed certifying authority, certificate class, validity period, token, or service package.
- The OCC sources reviewed do not promise one universal processing time. Identity route, certificate type, organization verification, provider review, and missing evidence can change completion time.
- Confirm the exact fee, tax, hardware-token charge, validity period, renewal terms, refund rule, and delivery method on the chosen licensed certifying authority's current order screen before paying.
- Pay only through the verified provider's official channel and keep the invoice or acknowledgement. Do not pay a personal wallet or bank account offered through an unsolicited message.
Common mistakes
- Confusing a scanned handwritten signature image with a cryptographic Digital Signature Certificate
- Buying from a reseller without verifying the licensed certifying authority behind the certificate
- Selecting personal use when the receiving portal requires an organizational-person certificate
- Assuming every government or private portal accepts every certificate class, token, file format, or signing application
- Entering a name or organization name that does not match the eKYC and supporting records
- Uploading stale address evidence where the guideline requires a recent utility record
- Using another person's power of attorney to apply for or receive the DSC
- Sharing an OTP, private key, token PIN, recovery secret, or remote-access session with an agent
- Installing signing software from a chat attachment or unofficial download link
- Continuing to use the certificate after the private key, token, email, or authorized role may have been compromised
Digital Signature Certificate in Nepal at a glance
| Question | Verified answer |
|---|---|
| Who regulates the framework? | Office of Controller of Certification (OCC), Government of Nepal |
| Who issues an applicant's DSC? | A certifying authority licensed under the OCC framework |
| Is a signature image the same thing? | No. A DSC uses public-key cryptography and a private/public key pair |
| Personal or organizational? | Choose according to the relying service and the identity that must be represented |
| Core identifier | The reviewed guideline requires either PAN or NID for all DSC applicants |
| Power of attorney allowed? | No, not for applying for and receiving a DSC from the CA under the reviewed guideline |
| Universal fee or timeline? | Not published in the reviewed OCC sources; confirm with the chosen licensed CA |
| Last verified | August 1, 2026 |
This guide covers a new and separate user task
This page is about obtaining a cryptographic Digital Signature Certificate from an OCC-licensed certifying authority. It is not a PAN-registration guide, company-registration guide, scanned-signature tutorial, e-GP submission guide, or generic eKYC article.
A digital signature is created from a private key and checked with the related public key. The certificate connects the verified subscriber identity to that public key. This is why a pasted image of a handwritten signature cannot replace a DSC where a portal requires cryptographic signing. The OCC operates Nepal's root-certification framework and supervises licensed certifying authorities; those authorities issue end-entity certificates after verification.
Choose the correct application mode before paying
| Mode | Use it when | Extra evidence |
|---|---|---|
| Personal | The individual is signing in their own verified identity | Personal identity and address proof plus the CA's eKYC verification |
| Organizational person | The signer must be linked to a company, firm, NGO, bank, government body, or other organization | Organization existence, applicant association, and authorized-signatory evidence |
| Special-purpose certificate | The receiving system specifically asks for a specialized certificate | Confirm purpose, profile, authorization, technical format, and provider support before purchase |
Do not choose the certificate by price alone
First ask the receiving portal which certificate category, class, storage method, signing component, and organization details it accepts. A correctly issued certificate can still be unusable for a particular workflow if the relying service expects a different profile.
Safe application sequence
- 1Confirm the intended portal or transaction and its DSC requirement.
- 2Verify the certifying authority through the OCC framework.
- 3Choose personal or organizational mode.
- 4Create and verify the CA eKYC account.
- 5Submit matching PAN/NID, identity, address, contact, photo, and authorization evidence.
- 6Complete authentication and any video/original-document verification.
- 7Review and electronically sign the CA-generated application yourself.
- 8Confirm live fee, validity, token, renewal, support, and refund terms.
- 9Receive and test the certificate in the intended service.
- 10Protect the private key and know how to request revocation.
If the application is delayed or rejected
Do not create repeated applications or pay an intermediary to bypass verification. Ask the licensed certifying authority for the exact failed check.
- 1Name mismatch: compare the CA form with PAN/NID and the selected identity record.
- 2Address mismatch: use an accepted address document and check whether a recent utility record is required.
- 3Mobile or email failure: use contact channels controlled by the applicant and complete only the CA's official challenge.
- 4Organization failure: verify organization name, registration/PAN evidence, applicant association, and authorized-signatory letter or resolution.
- 5Technical failure after issuance: use the CA's official signing-client and token support; do not install a stranger's remote-access tool.
- 6Suspected compromise: stop signing and contact the issuing CA about suspension or revocation.
Private-key safety is the applicant's most important responsibility
Never reveal the token PIN, private key, OTP, recovery secret, or signing password. Do not allow an agent to keep the token or sign on your behalf. If control may be lost, stop using the certificate and follow the issuing CA's official suspension or revocation process.
What the official OCC material confirms
The reviewed OCC material confirms Nepal's root and licensed-CA structure, DSC issuance after identity and address verification, mandatory application information, personal and organizational verification routes, PAN-or-NID requirement, two-factor authentication, and the prohibition on using a power of attorney to apply for and receive a DSC. Provider-specific prices and one universal completion time are not stated and are therefore not invented here.
नेपालीमा छोटो उत्तर
डिजिटल सिग्नेचर सर्टिफिकेट (DSC) लिन पहिले कुन सरकारी वा व्यावसायिक प्रणालीमा प्रयोग गर्ने हो भन्ने निश्चित गर्नुहोस्। त्यस प्रणालीले स्वीकार गर्ने सर्टिफिकेटको प्रकार बुझेर OCC को इजाजत ढाँचाअन्तर्गत काम गर्ने प्रमाणीकरण निकाय रोज्नुहोस्। व्यक्तिगत वा संस्थागत मोड छान्नुहोस्, eKYC खोल्नुहोस्, PAN वा NID सहित पहिचान र ठेगाना प्रमाण पेश गर्नुहोस्, मोबाइल/इमेल तथा आवश्यक प्रमाणीकरण पूरा गर्नुहोस् र शुल्क तिर्नुअघि अवधि, टोकन, नवीकरण र फिर्ता नियम हेर्नुहोस्।
डिजिटल सिग्नेचर सर्टिफिकेट लिने सुरक्षित चरणहरू
- 1DSC प्रयोग हुने पोर्टलले स्वीकार गर्ने प्रकार र प्राविधिक आवश्यकता जाँच्नुहोस्।
- 2प्रमाणीकरण गर्ने निकाय OCC को इजाजत ढाँचाअन्तर्गत रहेको पुष्टि गर्नुहोस्।
- 3व्यक्तिगत वा संस्थागत सर्टिफिकेट सही रूपमा छान्नुहोस्।
- 4सो निकायको आधिकारिक माध्यमबाट eKYC खाता बनाउनुहोस्।
- 5PAN वा NID, मान्य परिचयपत्र, ठेगाना प्रमाण, फोटो, मोबाइल र इमेल तयार गर्नुहोस्।
- 6संस्थागत आवेदनमा संस्था अस्तित्व, आवेदकको सम्बन्ध र अधिकारपत्र/निर्णय तयार गर्नुहोस्।
- 7OTP, दुई तहको प्रमाणीकरण र मागिएको खण्डमा भिडियो वा सक्कल कागजात प्रमाणीकरण आफैं पूरा गर्नुहोस्।
- 8आवेदनको नाम, ठेगाना, संस्था र सर्टिफिकेट प्रकार जाँचेर मात्र डिजिटल रूपमा स्वीकृत गर्नुहोस्।
- 9शुल्क, कर, टोकन, वैधता, नवीकरण र सहायता सर्त आधिकारिक पेजमा जाँचेर मात्र भुक्तानी गर्नुहोस्।
- 10जारी भएपछि सम्बन्धित पोर्टलमा परीक्षण गर्नुहोस् र private key तथा PIN सुरक्षित राख्नुहोस्।
नेपाली कागजात तयारी सूची
| विषय | तयार गर्ने प्रमाण |
|---|---|
| मुख्य पहिचान नम्बर | PAN वा राष्ट्रिय परिचय नम्बर (NID) मध्ये आवश्यक प्रमाण |
| पहिचान | OCC निर्देशिकाले स्वीकार गरेको फोटोसहितको परिचय प्रमाण |
| ठेगाना | स्वीकृत ठेगाना प्रमाण; utility bill भए हालसालैको हुनुपर्ने सर्त जाँच्नुहोस् |
| सम्पर्क | आफ्नै नियन्त्रणमा रहेको मोबाइल नम्बर र इमेल |
| संस्थागत आवेदन | संस्था दर्ता/PAN, आवेदकको सम्बन्ध र अधिकारप्राप्त हस्ताक्षरकर्ताको प्रमाण |
| सुरक्षा | OTP, token PIN र private key अरूलाई नदिने तयारी |
नेपाली सुरक्षा चेतावनी
OTP, टोकन PIN, private key, recovery code वा signing password कसैलाई नदिनुहोस्। कुनै एजेन्टलाई आफ्नो तर्फबाट हस्ताक्षर गर्न नदिनुहोस्। सर्टिफिकेट वा टोकनमा अनधिकृत पहुँच भएको शंका लागेमा प्रयोग रोक्नुहोस् र जारी गर्ने प्रमाणीकरण निकायको आधिकारिक suspension वा revocation प्रक्रिया अपनाउनुहोस्।
NepalDocsGuide is an independent information website, not the Office of Controller of Certification and not a certifying authority. It does not issue, sell, activate, renew, suspend, or revoke Digital Signature Certificates. Always complete the transaction with the verified licensed provider and the relying official service.
Office and portal links
Printable checklist
How to Apply for a Digital Signature Certificate in Nepal
- Receiving portal's accepted DSC type checked
- Certifying authority's OCC status verified
- Personal or organizational mode selected correctly
- PAN or NID ready
- Accepted identity proof ready
- Accepted address proof ready
- Mobile number and private email accessible
- Organization evidence and authorization ready when applicable
- Fee, validity, token, renewal, and refund terms reviewed on the provider's live page
- Private-key, PIN, OTP, and revocation safety plan understood
FAQ
Official sources
Use these references for final confirmation before applying. Nepal Docs Guide is independent and does not replace official instructions.
- Office of Controller of Certification
Office of Controller of Certification, Government of Nepal
Confirms the responsible regulator, official service area, PKI guidance, certificate repositories, and current official-domain starting point.
- Digital Signature
Office of Controller of Certification, Government of Nepal
Explains public-key cryptography, the private/public key relationship, hashing, and cryptographic signing.
- Identity Verification Guidelines for Digital Signature Certificates
Office of Controller of Certification, Government of Nepal
Supports eKYC, mandatory application information, PAN-or-NID requirement, identity/address evidence, personal and organizational verification, two-factor authentication, and no-power-of-attorney claims.
- Root Certifying Authority of Nepal Certificate Practice Statement
Office of Controller of Certification, Government of Nepal
Confirms that the OCC operates Nepal's root-certification framework and that licensed certifying authorities issue end-entity Digital Signature Certificates.
- Electronic Transactions Rules, 2064 (2007)
Nepal Law Commission / Government of Nepal
Supports the legal and technical framework for creating and verifying digital signatures and electronic records.
Need official confirmation?
If your case involves corrections, deadlines, legal use, foreign submission, or a rejected application, contact the relevant official office before paying fees or submitting documents.
Author
Nepal Docs Guide Editorial Desk
Citizen services research team
The editorial desk prepares independent, plain-language summaries from cited official sources and reader correction reports. It does not claim government affiliation, professional credentials, or field testing.
Related guides
Check and Pay Traffic E-Challan in Nepal
Use the official Nepal Police notice and Nagarik App to review a genuine digital traffic chit and pay the fine through the approved in-app channel.
How to use Nagarik App for official services
Set up Nagarik App, link your identity details, and use digital service shortcuts with fewer errors.
How to Apply for a Disability Identity Card in Nepal
A bilingual guide to Nepal's disability identity card application: where to apply, how the four card categories work, which records to prepare, what happens when classification is unclear, and how to challenge a ward-level refusal under the reviewed model procedure.