file5983othdoc0_1284352860890

H:\Renewal\Digital signature Enrolment procedure.docx

Page

1

Date Created: 01/09/2009 last updated: 12-Sep-10

DDiiggiittaall SSiiggnnaattuurree EEnnrroollllmmeenntt && DDoowwnnllooaadd PPrroocceedduurreeIndex

Index ........................................................................................................................................................................... 1

Certificate Enrollment and Download process flow ........................................................................................................ 1

1. Configuration Required for Digital Signature Enrollment / Download.............................................................. 2

2. Certificate Enrollment Procedure / Digital Signature .......................................................................................... 3

2.1. Certificate Enrollment Procedure for Digital iKey 2032 .............................................................................. 3

2.4. Certificate Enrollment Procedure for Digital iKey 1000 ............................................................................. 5

3. Procedure for submission of hard copies of forms: ............................................................................................. 7

4. Certificate / Signature Download Procedure ....................................................................................................... 8

4.7. Certificate Download procedure for Digital iKey 2032: .............................................................................. 84.1. Certificate Download procedure for Digital iKey 1000................................................................................ 9

5. Verification Vendor details in iKey ...................................................................................................................... 10

6. Renewal process iKey ............................................................................................................................................ 11

Frequently Asked Questions ........................................................................................................................................... 13

Enrolment FAQs .......................................................................................................................................................... 13

Download FAQ ............................................................................................................................................................. 13

Certificate Management FAQs .................................................................................................................................. 14

Technical FAQs Error Messages .................................................................................................................................. 14

Grocery ......................................................................................................................................................................... 20

Certificate Enrollment and Download process flow

Digital Signature /Certificate Download

Process, ConfigureComputer Settings

Insert ikey and installikey drivers, login to

e_tender account andGenerate Request

Submit hard copies ofrequest form along withsupporting documentsto registration Power

Station

After RA approval andreceipt of e mailDownload Digital

Certificate

Click h

ere to

buy

ABB

YY PDF Transformer 2.0

www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

http://www.abbyy.com/buy



Page

2

1. Configuration Required for Digital Signature Enrollment / Download1.1. System Requirements: Operating System: Windows XP1.2. Enrollment & Download procedure should be carried out on same machine having same configuration same

user as well having admin privileges1.3. Do not format the machine or re-install your Operating system (OS) from which the certificate request was

made, Do not re-install or upgrade your Internet browser. Turn off Auto updates, Anti- virus updates or anyother software upgrades which may affect the registry files of the system. Do not install any new softwares orapplications on the computer till the time you download your certificate

1.4. Do not re-initialize the token and the same should be used for downloading the certificate1.5. If the above conditions are not met, your keys will be lost permanently and you will not be able to download

your certificate. In such cases, the only option is to apply for a fresh certificate.1.6. Your digital certificate is related to the cryptographic keys stored on your machine (USB Token). Hence, it's

necessary for you to download the certificate onto the same machine (USB Token) from where you enrolledfor the certificate

1.7. Internet Explore version is IE6 & aboveAll Active-X Components should be enabledin your Internet browser. In order to ensurethis, please do the following: Open abrowser window >> Go to Tools >> InternetOptions >> Security >> Click 'DefaultSettings' and set to 'Medium'. Ensure thatall five settings under 'ActiveX controls andplug-ins are set to 'Enable' or 'Prompt'

Allow popup (Tools >> Internet option >>privacy tab >> check in turn on pop-upblocker)

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

3

Add http://aps.mahagenco.in/ andwww.tcs-ca.tcs.co.in in your trusted sites

2. Certificate Enrollment Procedure / Digital Signature2.1. Certificate Enrollment Procedure for Digital iKey 20322.2. Insert ikey 2032 key in USB port > Install the Digital Key 2032 Software > Go to Start-Up Menu > All

Programmes > SafeNet > Safenet Token Utilties > Token > Initialize Token >Log in to your account using your username andpassword on http://aps.mahagenco.in/ websitePlease wait for website response for each stepGo to Vendor Dash Board > File menu > clickDigital Signature

Click Enroll > *Message Enrollment Checklist willappear > Read the Message and Close

Click Yes to allow certificate

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

http://aps.mahagenco.in/

http://www.tcs-ca.tcs.co.in/





Page

4

Please check for Company, Representative details

Provide alternate e mail ID receive authenticationpin / passwordGo to Cryptographic Service Provider > Select Datakey RSA CSP> click Generate Request

Confirm message and click OK

> Close Num Lock (Type a Password) > enter defaultpassword of iKey 2032 as Password#1> OK

> Enrollment Certificate will be displayed > check forrepresentative, e mail and company details

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

5

Certificate Enrolment form will be displayed >> clickSave the form on your PC >> Take printouts ofAuthorization Form

2.3.

2.4. Certificate Enrollment Procedure for Digital iKey 10002.5. Insert the digital key issued to you in USB port2.6. Run the CD handed over to you and install key drivers (Drivers as per OS xp / Vista)2.7. Log in to your account using your username and password on http://aps.mahagenco.in/ website. Go to

Vendor Dash Board >> File Menu >> Digital Signature >> Click on Enroll >> Enrollment Checklist will popup>> read and Close >> Vendor details will be displayed in the Enrollment From (Check your details in form) >>Select Cryptographic Service Provider in drop down menu as Rainbow iKey 1000 RSA Cryptographic ServiceProvider >> Click on Generate Request >> OK (E-Mail ID Confirmation Massage will appear) >> EnterPassword = rainbow >> OK >> Authorization Form displays >> Save the form on your PC >> messagesecurity, click on YES >> Take printouts of Authorization Form

Log in to your account using your usernameand password onhttp://aps.mahagenco.in/ websitePlease wait for website response for eachstep

Go to Vendor Dash Board >> File Menu >>Digital Signature

Click on Enroll

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com






Page

6

Enrollment Checklist will popup >> read andClose >> Vendor details will be displayed inthe Enrollment From (Check your details inform)

Type alternate e mail ID to receiveauthentication pin / password

Select Cryptographic Service Provider in dropdown menu as Rainbow iKey 1000 RSACryptographic Service Provider

Click on Generate Request

E-Mail ID Confirmation Massage will appear

Click OK

Click yes to allow crtificate

Enter Password rainbow >> OK

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

7

Certificate Enrolment form will be displayed>> click Save the form on your PC >> Takeprintouts of Authorization Form

click on YES to security message,

2.8.2.9. The Vendor will receive Mail after enrollment From: <[email protected]: as2.10. Your online Request Number 595789 has been received. Please arrange to dispatch the required documents to

your RA Administrator's office immediately2.11. Your certificate will be generated after your documents are verified and your request is approved by your RA

Administrator and by TCS-CA. Once the certificate is generated, it will be made available for download.Instructions until your certificate is successfully downloaded, it is very important to ensure the following:- Download the certificate within 21 days of receipt of authentication PINPlease note that you will not be able to download your certificate if any of the above conditions are not met.For further assistance, please contact your RA Administrator:Maharashtra State Power Generation Co. Ltd., Nashik Thermal Power Station, Eklahare, Nashik - 422105Email: [email protected]: [email protected] Web: www.tcs-ca.tcs.co.in | www.tcs.com

3. Procedure for submission of hard copies of forms:3.1. Certificate Enrollment form for Request Number xxxxxx (Generated by TCS after enrollment) &

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

mailto:helpdesk:@tcs-ca.tcs.co.in

mailto:maya_kumbhare:@rediffmail.com


http://www.tcs-ca.tcs.co.in/

http://www.tcs.com/




Page

8

3.2. Fill Certificate Enrollment form for class 2 certificate, valid for one year. The Proprietor / Partners /Directors shall authorize Digital Signature holder (Representative) of Company to sign the documents digitallyon behalf of Company.

3.3. Download REQUEST FORM FOR CLASS-2 CERTIFICATE from http://aps.mahagenco.in/ web available indownloads in vendor related section 9 pags.

3.4. Paste recent photo of Digital Signature holder (Representative) with signature on photo and paper3.5. Fill up form completely and enclose minimum necessary requested documents duly attested by gazzeted

Officer / Notary only. Documents required as follows:a. Company Information (any one from list A/B/C as applicable)b. Company PAN No (Required) or Proprietorc. Resolution of Company / GPA for the authorized signatory (Required) Enclose memorandum authorizing

Digital Signature holder in case of Privet Ltd Company / Partnership Firms / Governmentd. Proof of Address of the applicant Digital Signature holder (any one as listed required)e. Applicant photo Verification Documents (any one attested copy required)f. Certificate Request form (Required)g. Certificate Enrollment form + Letter of Authority (Available for printing on completion of Online

Enrollment) (Required)3.6. Submit the forms along with documents to station from where you have obtained key or Handover / Post it to

Nasik TPS Purchase Executive (Registration Authority)3.7. After receipt and verification of hard copies Registration Authority of MSPGCL Nasik TPS shall approve digital

certificate and subsequent approval by Certifying Authority (TCS-CA) Hyderabad3.8. After approval Vendor will receive authentication pin by e_mail on mail ID provided in registration from

Certifying Authority (TCS-CA).3.9. Vendor shall check mail regularly or contact registration station for RA approval and authentication pin.3.10. Complete the Download certificate procedure within 21 calendar days of receipt of authentication PIN

4. Certificate / Signature Download Procedure4.1. After approval of RA Administrator Nasik TPS and Certifying Authority (TCS-CA) Hyderabad you will receive

mail from [email protected] as:4.2. Your Digital Certificate has been Generated ( Request Number 577724 ), Digital Certificate (Serial Number

07D910610191152201511A) and is available for download. To download your digital certificate4.3. Authentication PIN: G2T7B2Q0M74.4. NOTE: You will not be able to download your certificate without the correct PIN4.5. Download the certificate within 21 days of receipt of authentication PIN4.6. Please contact your RA administrator for assistance in case the Certificate is not downloaded or Certificate is

downloaded but not exportable from browser private Key is not exportable) after download for a ReplacementCertificate. Replacement Certificate option is available only for 21 calendar days from the date of issuance ofDigital Signature Certificate

4.7. Certificate Download procedure for Digital iKey 2032:

Insert ikey 2032 key in USB portLog in as Vendor in http://aps.mahagenco.in/websiteGo to Vendor Dash Board > File menu > clickDigital SignatureClick Download

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com







Page

9

Click Request No. XXXXXX

Certificate will be displayed. GetAuthentication PIN from Email received &enter pin in certificate displayedClick Download

Confirm and click OK to proceed

Enter Password > default password for iKey2032 is Password#1 > Click - Yes - Yes - Yes forwarning messages

Click Yes

Certificate downloaded successfully messagewill appear >> Click on OK

4.1. Certificate Download procedure for Digital iKey 1000Insert ikey 1000 key in USB port

Log in as Vendor inhttp://aps.mahagenco.in/ website

Insert ikey 1000 key in USB port < Go toVendor Dash Board >> File Menu >>Digital Signature

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com





Page

10

>> Click on Download

>> Click on Request No XXXXXX

>> Certificate will be displayed.>> Get Authentication PIN from Emailreceived & enter pin in certificatedisplayed>> click Download

>> Confirmation message of samemachine setting will be displayed. Clickon OK

>> Click Yes to allow certificate download

>> Certificate download successfullymessage will appear>> Click on OK

5. Verification Vendor details in iKeyDouble click on iKey icon in Taskbar >> Go to User Tools tab >> Manage >> Select Vendor name in window >>

View details >> Vendor details will be seen.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

11

12

3 4

5

Now the key is ready to sign documents digitally.Activity Completed (Vendor registration Process Completed)

6. Renewal process iKey

If you are still facing problems please mail your problem in details, error appeared, procedure followed, vendordetails etc to: [email protected]

Tata Consultancy Services Limited [Certifying Authority - PKI Services]Advanced Technology Centre’ Deccan park, 1 - Software Units LayoutMadhapur, Hyderabad - 500 081 _ http://www.tcs.comPhone 040-66673524/25/26, 040-66673583

Athare BG, Dy EE E_Purchase, MSPGCL TPS ParliPh 02446-223503 or Cell 9960516825, mail [email protected]

Procedure if TCS web site is not opening during Digital Signature downloading: Click the following linkhttp://www.tcs-

ca.tcs.co.in/index.jsp?rightHtml=includeJSP/chainDownload_old.jsp&leftTitle=CA%20Certificates&right1stTitle=Old%20Certificates&right2ndTitle=CA%20Certificates&highlight=0

Click on CCA OLD Link. Certificate window will be displayed. Click on Install Certificate. Click on Next Next Finish OK.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com


http://www.tcs.com/

mailto:atharebg:@gmail.com

http://www.tcs-/




Page

12Clic

k here

to buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

13

Frequently Asked QuestionsFor detail FAQ visit TCS web

Enrolment FAQs

Enrolment FAQs contain the most frequently asked questions related to the certificate enrolment.Browser SettingsHow can I enable Active-X controls in my Internet Explorer browser?

Please do the following to enable Active-X controls in your Internet Explorer (IE) browser.Open an IE window and go to Tools -> Internet Options -> Security -> Custom LevelEnsure that all five settings under 'ActiveX controls and plug-ins are set to 'Enable' or 'Prompt'

I need to upgrade/reinstall my Internet Explorer browser. Will this affect my digital certificate?

When you upgrade/reinstall your Internet Explorer browser, the digital certificates and cryptographic keys are permanently lost. It istherefore very important to backup your certificate before you make any changes to your browser or system configuration.

Why do I need to submit documents for a Digital Certificate?Class-2 Digital Certificates are legally recognized in India (by the Indian IT Act, 2000). Given this, a Digital Certificate has almostthe same importance in the digital world as that of your Passport or PAN card in the physical world. Therefore, all informationdisplayed on your digital certificate needs to be verified before the certificate can be issued. If you have any questions, pleasecontact your RA administrator.

Some of the details in my Digital Certificate are incorrect. Can these be corrected?Once a Digital Certificate request is submitted, no changes can be made to the content. So please ensure that all informationthat you submit is correct before you submit your request. However, if there is still a mistake, you will need to submit a freshonline request. In such cases, please contact your RA Administrator immediately.

Download FAQ

What is an Authentication PIN?An Authentication PIN is a unique code that is sent to you when your certificate is ready for download. It is sent by email to theemail address provided by you at the time of enrolment of your digital certificate.

I have not received the Authentication PIN required for download. What should I do?The Authentication PIN required for downloading your Digital Certificate is emailed to the Email ID provided during certificateenrolment. If you provided an incorrect, invalid or misspelt Email ID, you will not receive this PIN. Please contact your RAadministrator for further clarifications.

I have deleted the email containing my Authentication PIN. Can you send it to me once again?In order to receive the Authentication PIN required for download, please send a formal email to your RA Administratorrequesting the same. The email must be sent from the same address used during certificate enrolment.

When I try to download my certificate, I get the error: 2146885628. What can I do to resolve this?Please contact your Registration Authority Administrator if you don't remember your User ID or password. The administratorwill provide the required information.

Can I download my certificate onto any machine other than the one from which I submitted my request?If you generated your certificate request on a browser (i.e., if you did not use a Smart Card or USB token at the time ofenrolment), you will have to download the certificate on the same machine. This is because, at the time of enrolment,cryptographic keys are generated and stored on your machine. These cryptographic keys form the technical basis for thegeneration and use of your digital certificate. Without these, you cannot download the certificate.

Note: If you used a Smart Card or USB Token at the time of certificate enrolment, you can download your certificate on anymachine to which your Smart Card or USB token is connected.

How can I check whether my certificate has been downloaded successfully?Once you complete the certificate download procedure, you can do the following to check whether the certificate is properlyinstalled in your browser.

Open an Internet Explorer window Go to Tools -> Internet Options -> Content -> Certificates

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

14

Under the 'Personal' tab you should be able to see your name in the list of certificate displayedNote: If you used a Smart Card or USB Token at the time of certificate enrolment, you can download your certificate on

any machine to which your Smart Card or USB token is connected.

Certificate Trust ChainWhat is a Certificate Trust Chain? How can I install it?

A Certificate Trust Chain refers to the certificates of the issuing authorities involved in the generation of your certificate. Thisneeds to be installed along with your certificate so that it can be verified that your certificate comes from a trusted source. Clickhere to download and install the Trust Chain.

Certificate Management FAQs

Certificate Management FAQs contains the information on how to manage your digital certificates.

I need to use my certificate from a different machine. Is this possible?Yes. You can easily transfer your certificate from one machine to another. The process is called 'Certificate Export / Import'. Please click herefor a detailed user guide.

My machine has been reformatted and I no longer see my Digital Certificate in the browser. What can be done to resolve this?When your machine is reformatted, the certificates and cryptographic keys stored in it are permanently lost. If you have a backup of yourcertificate in the form of a .p12 or .pfx file, you can 'import' your certificate from this file. Please click here for the certificate importprocedure.

If you don't have a backup of your certificate, you will need to apply for a fresh certificate. Please contact your RA Administrator for the same.

My Internet browser has been upgraded / reinstalled. However, I cannot see my Digital Certificate through the browser any more. Whatmust I do?When your browser is upgraded or reinstalled, the certificates and cryptographic keys stored in it are permanently lost. If you have a backupof your certificate in the form of a .p12 or .pfx file, you can 'import' your certificate from this file. Please click here for the certificate importprocedure.If you don't have a backup of your certificate, you will need to apply for a fresh certificate. Please contact your RA Administrator for the same.

I have lost the Smart Card / USB Token containing my certificate and cryptographic keys. What action can I take?In such a scenario, please inform your RA Administrator immediately. The administrator will ensure that your certificate is immediatelysuspended so that no unauthorized person will be able to access it.

Technical FAQs Error Messages

For some of the problems faced by IE 5.x users during key pair generation and (or) certificate download, Microsoft hasreleased Service Packs and Fixes. Kindly download the latest Service Packs and Fixes before generating the key pair.

Error while generating the on line enrolment formError Message: "VB script errors"A Visual Basic script is responsible for generating your private/public key pair. If you set your Internet Explorer security

preferences to "High" (under the Security tab), this might cause problems initializing the variables needed for the VB Script. Settingthe security level to "Medium" should solve the problem.

Follow these instructions:Go to Tools > Internet Options > Security.Change the Security Settings to 'Medium'.Check that Active X and Java Scripting is enabled.

Errors Message: "80092023 or 80092024"This error often occurs when the private key cannot be generated. This is typically the result of a comma (,) in the 'Distinguish

Name' supplied while filling up the online form. To solve the problem, remove the comma and re-apply.

No option to choose from in the Cryptographic Service Provider (CSP) listVB script captures the contents of the Cryptographic Service Provider (CSP) list from your browser. If you do not have Visual

Basic Scripts installed, your browser will not be able to provide that information and hence the CSP list will be empty. In order to

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com




Page

15

get the option to choose the CSP you have to enable scripting in your browser by executing the following steps:Tools > Internet Options > Advanced.Check all boxes related to scripting.Tools > Internet Options > Security > Custom Level.All the settings under 'Scripting' need to be enabled.

Error Message : Error in generating request : 2146823279Solution: First, need to check whether all the fields are filled and also need to check below instructions.Check if the system has Administrator privileges. Also, check for the Active X Controls in the following below mentioned path. It hasto be enabled.

In Internet Explorer (IE) browser, Tools>Internet options>security>select Trusted sites>Click on Sites> where add the TCS-CA sitehttps://www.tcs-ca.tcs.co.in in the box provided (I.e. Add this website to the zone). Now click on Add and close.

Now again In IE Browser, Under Tools>Internet options>security>Select trusted sites>Click on Custom level of IE browser. Set theReset custom settings to Medium then click on "Reset" > Click yes on the pop up box. Check whether all active x controls areenabled. If no, then make all the active x controls enabled. Click on OK > Click yes on the pop box>

Now, Register the dll file " xenroll.dll" as per the below procedure. please download the xenroll.dll file from the below link andfollow the instructions mentioned http://www.tcs-ca.tcs.co.in/controls/xenroll.dll

Save the attached file (xenroll.dll) on your machine.Go to Start -> RunType regsvr32 <<Location of the dll>> at the command prompt.<<Location of the dll>> needs to be replaced by the full path to the DLL.

For example: If you have saved xenroll.dll in C drive, then type the following at the command prompt: regsvr32 c:\xenroll.dll

Error Message : Error in generating certificate request:: Object doesn't support this property or method:: 2146827850Solution: Checkout the below reasons and proceed accordinglyYou may be choosing the wrong CSP or hardware USB token/ Smartcard is not plugged in. If you are using hardware USBtoken/ Smartcard, make sure the USB token/ Smartcard is connected. Also be sure to select the correct Cryptographic ServiceProvider Name from the drop-down list.You may be running Windows 95 without logging on. If you did not provide a password after you started Windows 95, youhave no means of protecting your private key. Windows 95 does not allow you to generate a certificate request in this case.Please logoff and logon again, and then enrol for the Digital certificate.You did not choose to run the ActiveX control when loading the page. This program is required to enrol for a certificate and issafe to run on your computer and its authenticity is proven by the digital signature on the program.You may have turned Active Content off. The enrolment page uses an ActiveX control to do the certificate request generation.Please turn on ActiveX by going to the "Security Settings" tab in the "Internet Options" . Please set the security settings to"Medium", which is the Microsoft default security setting.And also download the xenroll.dll file from the below link and follow the instructions mentioned http://www.tcs-

ca.tcs.co.in/controls/xenroll.dll

This should take care of the problem you have encountered.Save the attached file (xenroll.dll) on your machine.Go to Start -> RunType regsvr32 <<Location of the dll>> at the command prompt.<<Location of the dll>> needs to be replaced by the full path to the DLL. For example: If you have saved xenroll.dll in C drive,

then type the following at the command prompt: regsvr32 c:\xenroll.dll

Now try to generate the online enrolment form. If you are still getting the same error, contact your Registration Authority forfurther assistance in this regard.

Error Message : 2147418113/ 2146893788[The below error persists while generating the request directly in to the token]Solution: Need to check all the possible ways (I,e trusted sties, activeX controls, Xenroll.dll as per solution give for the error :

2146823279). Incase if problem still persists then check if any certificate is in token. If yes then whether the same is valid. If not andtoken is empty then get the same re-initialized and try to generate.

Error Message : While selecting CSP : 2147024895 / You have Cancelled/ Error in generating certificate request permissiondenied - 2146828218 at the time of enrol

Solution : Please check below all conditions onceYou may be choosing the wrong CSP or hardware USB token/ Smartcard is not plugged in. If you are using hardware USBtoken/ Smartcard, make sure the USB token/ Smartcard is connected. Also be sure to select the correct Cryptographic Service

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

https://www.tcs-ca.tcs.co.in/

http://www.tcs-ca.tcs.co.in/controls/xenroll.dll

http://www.tcs-/




Page

16

Provider Name from the drop-down listYou may be running Windows 95 without logging on. If you did not provide a password after you started Windows 95, youhave no means of protecting your private key. Windows 95 does not allow you to generate a certificate request in this case.Please logoff and logon again, and then enrol for the Digital certificate.You did not choose to run the ActiveX control when loading the page. This program is required to enrol for a certificate and issafe to run on your computer and it's authenticity is proven by the digital signature on the programYou may have turned Active Content off. The enrolment page uses an ActiveX control to do the certificate request generation.Please turn on ActiveX by going to the "Security Settings" tab in the "Internet Options" . Please set the security settings to"Medium", which is the Microsoft default security setting.If you are trying to generate the keys directly in any Crypt token (USB token ) then check whether corresponding CSP against

the token is selected. Though proper CSP is selected , still problem persists then follow the below another solution.please download the xenroll.dll file from the below link and follow the instructions mentioned http://www.tcs-ca.tcs.co.in/controls/xenroll.dll

Go to Start -> RunType regsvr32 <<Location of the dll>> at the command prompt.<<Location of the dll>> needs to be replaced by the full path to the DLL.

For example: If you have saved xenroll.dll in C drive, then type the following at the command prompt: regsvr32 c:\xenroll.dllThis should take care of the problem you have encountered. Restart the machine if required.

Error Message : Error in generating certificate request :: 2146885597Solution : Need to check if any special characters in the details which are provided in the enrolment form while generating the

same and also it is advised that not copy the data from any word pad/ document and past the same on online enrolment formwhile generating the same.

Error message :Request key length should be at least 1024 bitsSolution: Please find the below system requirements for obtaining digital signature certificate from TCS-CA

Operating System : windows XP/2000/Vista/7Browser : Internet Explorer 5.0/6.0/7.0/8.0

Errors while downloadingError message : Error in downloading the certificate :: 2146885628[undefined]/2147024891/2146827850Solution: Need to check below all circumstances Until your certificate is successfully downloaded, it is very important to

ensure the following:o Do not format the machine or re-install your Operating system (OS) from which the certificate request was made.o Do not re-install or upgrade your Internet browser from which the certificate request was made.o If the cryptographic keys (Request) were generated on a Smart Card/ USB Token at the time of request generation, please

ensure that the device is not re-initialized and the same should be used for downloading the certificate.o Turn off Auto updates, Anti- virus updates or any other software upgrades which may affect the registry files of the

system.o Do not install any new Softwares or applications on the computer till the time you download your certificate.o Download the certificate within 21 days of receipt of authentication PIN.

[Also this error would occur if you try to re-download the certificate which is already downloaded successfully and.If the windows OS from where the online request has been placed is having two login id's, trying to login from other loginother than one from where the request is placed.]Please note that you will not be able to download your certificate if any of the above conditions are not met.

Though the above conditions are met ,still the problem persists then check the below settings and then try fordownloading the certificate once.

In Internet Explorer (IE)browser, Tools>Internet options>security>select Trusted sites>Click on Sites> where add the TCS-CAsite https://www.tcs-ca.tcs.co.in in the box provided (I.e. Add this website to the zone). Now click on Add and close.Now again Under Tools>Internet options>security>Select trusted sites>Click on Custom level of IE browser. Set the Resetcustom settings to Medium then click on "Reset" > Click yes on the pop box>. Check whether all active x controls are enabled.If no, then make all the active x controls enable. Click on OK > Click yes on the pop box.Incase problem still persists then contact your Registration Authority from whom you had obtained the certificate for further

assistance in this regard.

Error message: error while downloading the certificate:: 2147023673Reason: The error occurs when you click "No" or "Cancel" on the pop box that appears while downloading.

Solution : Need to download once again by clicking "Yes" and "OK" on every pop box that appears while downloading.

Error message : Error in downloading the certificate ::2146893802[undefined]

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

http://www.tcs-/





Page

17

Reason: This error occurs if the corresponding private key of the certificate is not found and same is corrupted whiledownloading the certificate.

Solution : Please check whether you are using Same system and USB token(if USB token is used for generating the keys) fromwhere the request is generated .If yes then still facing the problem then contact your Registration Authority from whom you hadobtained the certificate for further assistance in this regard.

Error message : Error in downloading the certificate :: 2146435066[Undefined] , 2147024894[Undefined]Please find the below the most likely reasons for the error encountered. Hence, check the same accordingly and proceed

further.You may have already installed the Digital Certificate earlier. Please check the "Tools->Internet Options" in the browsers->"Contents->Certificate->Personal" tab.The browser you are using now is not the same one you used when you enrolled for your Digital certificate. You must use thesame browser, on the same computer, to enrol and install your Digital Certificate .Ensure that you are using the same userprofile/Machine that you used to submit the certificate request. The key is attached at the time of registration .Ensure that you are using the same smart card/token to download the certificate through which you have generated the keypairs.Ensure that the browser or operating system software has not been reinstalled. If browser or operating system is reinstalledthen the private key is lost and you need to re-apply again.Ensure that you have not re-initialized the smart card/token if you have generated key pair in a smart card/token.

Error message as : "Null"Solution: Please try after some time or during off peak hours.

Error Message : Certificate Already ExistsSolution : If the browser is used as Mozilla for generating the request then check below conditions.Check once in Mozilla browser if the certificate is present. If not then check through MMC by following the procedure given inProcedure to check the Digital Signature certificate from MMC Console link.Incase if the certificate is not present there also then please contact your Registration Authority from whom you had obtainedthe certificate for further assistance in this regard.

Error message : Error in downloading the certificate ::"2146885628" Invalid procedure(call/argument)Reason : This error would occur if certificate is being downloaded directly in to the token . So, need to check at the token end.

Solution : Get started smart card services and then try for downloading then certificate then certificate will be downloadedsuccessfully.

Error message : Error in downloading the certificate :: 2146869244[undefined][Cert Enrol::CX509Enrollment::Install Response:The Signature of the certificate cannot be verified.0x80096004(-2146869244)]

Solution: Need to check all the conditions& instructions (Active x and all as stated in the solution of the error :2146885628).Also, need install the respective trust chain.Below is the path for installing the trust chain.Visit our TCS-CA site : https://www.tcs-ca.tcs.co.in> Click on "Certificate Trust chain "Under "certificates">Click on Download andinstall the Respective trust chain from the respective links.

Error message : Error in Downloading certificate -2146762486[undefined][CertEnroll::CX509Enrollment::InstallResponse: Acertificate chain could not be built to a trusted root authority. 0x800b010a (-2146762486)]

Need to install the Trust chain(I,e Root certificates). Below is the path for installing the trust chain.Visit our TCS-CA site : https://www.tcs-ca.tcs.co.in> Click on "Certificate Trust chain" Under "certificates">Click on Download andinstall the Respective trust chain from the respective links.

Errors while viewing the certificateError Message : Certificate request is generated on browser. But after the Download was Successful, certificate is not

appearing under "Tools>Internet Options>Content>Certificates>Personal" tab of IE browser.Solution : Please check if Aladdin eToken drivers are installed on the machine from where the certificate was downloaded

successfully. If Yes then uninstall the token drivers from "Control Panel>Add or Remove Programs" and then try downloading thecertificate once again. This time the field to provide Authentication PIN does not appear. Even though, go ahead and download thecertificate and once after the successfully download, check in "Tools>Internet Options>Content>Certificates>Personal" tab of IEbrowser"

Error message: Windows does not have enough information to verify the certificate.Solution : Please check whether you have obtained the certificate from TCS-CA or else the SUB-CA of TCS-CA and accordingly

install the trust chain by following below mentioned path.Visit our TCS-CA site : https://www.tcs-ca.tcs.co.in> Click on "Certificate Trust chain" Under "certificates">Click on Download andinstall the Respective trust chain from the respective links.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com







Page

18

Error Message: The certificate has expired or not yet validSolution : Need to check whether the system date and time is correct from where the certificate is being used.

Error message : If "Yes, export the private" is not highlighted" while trying to exporting the certificate from IE browser.Solution: Please check the below possible reasons for the error message:If the certificate got directly downloaded in to the token , when the token is plugged in to USB port , the copy of the certificategets automatically reflects in IE browser .So, if you are trying to export the same then same will not be exported along withthe private key.Incase if the certificate has already been exported once along with the private key successfully and try to re-export the samecertificate then same will not be possible.Incase you are unable to export the certificate by selecting the option as "Yes, export the private key" as soon as download issuccessfully completed on browser then contact your Registration Authority whom you have approached for furtherassistance in this regard.

Error Message: The Integrity of this certificate cannot be guaranteed. The certificate may be corrupted or may have beenaltered. Or certificate has a non valid Digital Signature.

Solution : Please check whether you have obtained the certificate from TCS-CA or else the SUB-CA of TCS-CA and accordinglyinstall the trust chain by following below mentioned path.Visit our TCS-CA site : https://www.tcs-ca.tcs.co.in> Click on "Certificate Trust chain" Under "certificates">Click on Download andinstall the Respective trust chain from the respective links.

Errors while signing on the formError message: Signer's identity unknown" (Shows a "?" mark) while signing the PDF document.Solution: The message you get because Adobe software do not have the trust root certificate of CCA & TCS. You can go ahead

and upload this file the MCA application will take care of the same. Incase you want to resolve this please follow the steps below.o Right click on the box with your signature in the eform and select "Properties".

A wizard will open up, Click on "Show Certificate" button .On the right side top select "Trust" Tag.You will see Red Cross mark against each settings.Click on "Add to Trust Identities" button.A adobe security message will come up , click "OK"Under Trust Settings Check all the check boxes and click "OK"Click on "Verify signature" button on the fist window and click "OK"For further assistance please log the complaint ticket on MCA portal (Link below)

http://www.mca.gov.in/DCAPortalWeb/dca/MyMCALogin.do?method=setDefaultProperty&mode=23

Error message: "Digital Signature Verification failed or Your CA is not Trusted" or Getting email id as "[email protected]" or Windows has blocked this software because it can't verify the publisher Name: Assure SignContorl.Cab:Publisher:Unknow publisher on MCA portal.

Solution: Check whether the trust chain installed along with the certificate .If not, install the trust chain as per the belowmentioned path.Visit our TCS-CA web site: https://www.tcs-ca.tcs.co.in> click on Current certificates Under CA certificates> and click on eachcertificate(CCA2007 &TCSCA)> open>and install the same by clicking "Install certificate" until import was successful.Once the same is completed then follow below instructions .Please note that the same has been sent by MCA .Hence, try the sameonce and if you are still facing the problem ,contact MCA help line on email id "[email protected]" for further assistance.

Ensure that you are logged-in to the computer as 'Administrator' and 'ActiveX' control settings in 'Internet Explorer' are enabled, asper steps given below:

Open 'Internet Explorer' >Tools > Internet Options > Security.Click "Internet" and change the Security Settings to "Medium".Click "Custom Level" Button.Enable the "Download Signed ActiveX controls" option.Enable the "Run ActiveX controls and Plugins" option.Enable the "Script ActiveX controls marked safe for scripting" option.Enable the "Download unsigned ActiveX controls" option.If all the settings are enabled and you have administrator rights then a control should get downloaded on your machine on

accessing the Register DSC facility for Director or Manager/Secretary or Practicing Professional. You can check for the same by1. Open Internet Explorer2. Tools->Internet Options3. General->Settings->View ObjectsA control named 'AssureSignControl Control' should be present. If it doesn?t exist then it implies that admin rights are not set onyour profile.Please contact your local administrator for the same.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com


http://www.mca.gov.in/DCAPortalWeb/dca/MyMCALogin.do?method=setDefaultProperty&mode=23


mailto:appl.helpdesk:@mca.gov.in




Page

19

Error Message: Creation of the signature could not be completed :Platform exception, Key does not exists, 2148073494Solution: Please call us on below mentioned no?s for further assistance in this regard

Toll free: 18004252922 and direct Line 040-6667 3524/25/26.

Error Message: The windows Cryptographic Service Provider reported an error: The keyset is not defined. Errorcode:2148073497

Solution: Need to check whether the certificate is present along with the exchange key& corresponding root certificates andsmart card is started. If yes then please contact MCA help line for further assistance in this regard.

Error Message: Platform exception. Cannot find the certificate and private key for decryption Error Code:2148081675Reason : The above error occurs if the certificate does not have the exchange key

Solution: Need to check whether the certificate is present along with the exchange key& corresponding root certificates. If yes thenthere is no problem at the certificate and please contact MCA help line for further assistance in this regard.

Error Message: Creation of the signature could not be completed Platform exception. The operation requires a smart card, butno smart card is currently in the device. Error code:2148532236

Reason : The above error would occurs if the smart card services is not enabled

Solution : If you are using the certificate from any USB Token. Please ensure that same is plugged in token to USB port and checkwhether the Smart card services is started. Check accordingly and proceed further.

Error message on IT portal :1. You might not have inserted the USB Token2. Capicom.dll is absent on your system32 directory3. No supported drivers installed on your systemFor 2&3 Contact your System/Token vendor.

Solution: Please contact us on below mentioned no's for further assistance in this regard.Toll free: 18004252922 and direct Line 040-6667 3524/25/26.

Error message: The message contents may have been altered would occur while verifying the signed mail at recipient end.Solution: This message occurs if more text is added or removed from the mail content after signing.

For ex: Some of the mails at the bottom will have "DISCLAIMER" .Actually ,this Disclaimer is attached from the server side to thesigned message and it will be added after the signing is completed . So, at the recipient end, while verifying the signed mail, thiserror would occur since the text "DISCLAIMER" has added after mail is signed.

Error Message: "Signature is Null" on NSDL Portal while logging by using Digital signature certificate.Reason: Please check with NSDL whether the serial number of the certificate which you are using is mapped to the

corresponding Login Id which is used for login on NSDL portal.

Once you check all the settings then try to register/ place the tender on IREPS portal. Incase if the problem still persists thencontact IREPS for further assistance in this regard.

Error message : "Unable to retrieve the Signature" / "Please use the same digital signature certificate which has been attachedto your profile" on IREPS Portal

Solution : Please check the below instructions.Check at the certificate end whether everything is fine (i,e certificate is within the validity period, exchange key and valid trustchain (i,e TCS & CCA) ,certificate category (i,e Class-III-Company) and appearing under Personal tab of IE browser)Same Certificate is in Other people tab of IE browserCheck the security settings as given on IREPS homepage by clicking "system Settings" Under "Resources".

Error message: "Signing Failed Reason" while placing the tender on DGS & D portalSolution : Access the site : http://dgsnd.gov.in >Click on Indentor's Page >Click on Click Here(E-Lock software) This solution

would solve the problem. Incase the problem still persists then please contact concerned e-tender for further assistance in thisregard.

Error Message : "Records not available" after logging on TCS-CA webporta.Reasons & Solution:You must be trying to access the records with the wrong User-Id.Solution: Check the user id that you are using is the same as the user id when you registered for Digital Signature certificaterequest.If renewal request has already been placed under renewal link.If you are trying to renew the certificate 30 days before & after expiry of the certificate since renewal link on TCS-CA webportal will only be available exactly 30 days before and after from the date of expiry of the certificate including time.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com

http://dgsnd.gov.in/




Page

20

Please check the above all mentioned reasons and proceed further.

Error Message: Certificate got generated with wrong Email-Id which was given at the time of enrolSolution: Once the certificate is generated the details cannot be changed. The Authentication PIN mail is an automated one

and can be sent only to that email-ID provided during online enrolment. Hence, a valid email ID has to be provided duringenrolment. Before the online request is generated, there is a prompt to check the email ID once again.

So, in this case solution isPlease check if the email id can be created as provided in the online enrolment. If the same is possible then you may utlilizeget authentication pin for getting the authentication pin.If the email id creation as given in the enrolment form is not possible then only solution is to revoke the existing certificateand apply for a fresh certificate on a chargeable basis.

Error Message: Authentication failed.Solution: This error happens in two situations.If you give wrong User ID or password for during Member Login on TCS-CA web portal. In this case, you may please contactyour Registration Authority for resetting password of User ID member login.If you give wrong password while logging into the token. In this case , it is advised that not to access the token with the wrongpassword since token will be blocked after maximum no. of attempts. Hence, please contact you Registration Authority whomdid you approach for obtaining the certificate for further assistance in this regard.

Error message :You may have disabled Active X controls (Object Error)Solution : In Internet Explorer (IE)browser, Tools>Internet options>security>select Trusted sites>Click on Sites> where add the

TCS-CA site https://www.tcs-ca.tcs.co.in in the box provided (I.e. Add this website to the zone). Now click on Add and close

Now again, Under Tools>Internet options>security>Select trusted sites>Click on Custom level of IE browser. Set the Reset customsettings to Medium then click on "Reset" > Click yes on the pop box. Check whether all activeX controls are enabled. If no, thenmake all the activeX controls enable. Click on OK > Click yes on the pop box.

Please find the below procedure to install the cab fileDownload the TCSCADataSigner.cab file from link http://www.tcs-ca.tcs.co.in/controls/TCSCADataSigner.cab and save on yourmachine.Extract all the files to a location.Go to Start -> RunType regsvr32 <<Location of the TCSCADatasigner.ocx>> at the command prompt.<<Location of the ocx>> needs to be replaced by the full path to the ocx.

For example: If you have saved TCSCADatasigner.ocx in C drive, then type the following at the command prompt:regsvr32c:\TCSCADatasigner.ocx

GroceryAUTHENTICATED RECORD A signed document with appropriate assurances of authentication or a message with a digital signature verifiedby a relying party. However, for suspension and revocation notification purposes, the digital signature contained in such notificationmessage must have been created by the private key corresponding to the public key contained in the Digital Signature Certificate.AUTHENTICATION A process used to confirm the identity of a person or to prove the integrity of specific information. Messageauthentication involves determining its source and verifying that it has not been modified or replaced in transit. (See also verify (a digitalsignature))AUTHORIZATION The granting of rights, including the ability to access specific information or resources.CERTIFICATE A Digital Signature Certificate issued by Certifying Authority.CERTIFICATE CHAIN An ordered list of certificates containing an end-user subscriber certificate and Certifying Authority certificates (Seevalid certificate).CERTIFICATE EXPIRATION The time and date specified in the Digital Signature Certificate when the operational period ends, without regardto any earlier suspension or revocation.CERTIFICATE ISSUANCE The actions performed by a Certifying Authority in creating a Digital Signature Certificate and notifying the DigitalSignature Certificate applicant (anticipated to become a subscriber) listed in the Digital Signature Certificate of its contents.CERTIFICATE SERIAL NUMBER A value that unambiguously identifies a Digital Signature Certificate generated by a Certifying Authority.CERTIFICATE SIGNING REQUEST (CSR) A machine-readable form of a Digital Signature Certificate application.CERTIFYING AUTHORITY (CA) A person who has been granted a license to issue a Digital Signature Certificate under section 24 ofInformation Technology Act, 2000.

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com


http://www.tcs-ca.tcs.co.in/controls/TCSCADataSigner.cab




Page

21

CERTIFICATE CLASS A Digital Signature Certificate of a specified level of trust.CONFIRMATION OF DIGITAL SIGNATURE CERTIFICATE CHAIN The process of validating a Digital Signature Certificate chain andsubsequently validating an end-user subscriber Digital Signature Certificate.DIGITAL CERTIFICATE APPLICANT A person that requests the issuance of a public key Digital Signature Certificate by a Certifying Authority.(See also CA applicant; subscriber)DIGITAL CERTIFICATE APPLICATION A request from a Digital Signature Certificate applicant (or authorized agent) to a Certifying Authorityfor the issuance of a Digital Signature Certificate. (See also certificate applicant; certificate signing request)DIGITAL SIGNATURE Means authentication of any electronic record by a subscriber by means of an electronic method or procedure inaccordance with the provisions of section 3 of the Information Technology Act, 2000.DIGITAL SIGNATURE CERTIFICATE Means a Digital Signature Certificate issued under sub-section (4) of section 35 of the InformationTechnology Act, 2000.ENCRYPTION The process of transforming plaintext data into an unintelligible form (cipher text) such that the original data either cannotbe recovered (one-way encryption) or cannot be recovered without using an inverse decryption process (two-way encryption).HARD COPY A copy of computer output that is printed on paper in a visually readable form; e.g. printed reports, listing, and documents.KEY A sequence of symbols that controls the operation of a cryptographic transformation (e.g. encipherment, decipherment,cryptographic check function computation, signature generation, or signature verification).LICENSE Means a license granted to a Certifying Authority.PRIVATE KEY The key of a key pair used to create a digital signature.PUBLIC KEY The key of a key pair used to verify a digital signature and listed in the Digital Signature Certificate.REVOKE A CERTIFICATE The process of permanently ending the operational period of a Digital Signature Certificate from a specified timeforward.SIGN To create a digital signature for a message, or to affix a signature to a document, depending upon the context.SIGNER A person who creates a digital signature for a message, or a signature for a document.SUBSCRIBER A person in whose name the Digital Signature Certificate is issued.SUBSCRIBER AGREEMENT The agreement executed between a subscriber and a Certifying Authority for the provision of designated publiccertification services in accordance with this Certification Practice Statement.SUBSCRIBER INFORMATION Information supplied to a certification authority as part of a Digital Signature Certificate application. (See alsocertificate application)SUSPEND A CERTIFICATE A temporary "hold" placed on the effectiveness of the operational period of a Digital Signature Certificate withoutpermanently revoking the Digital Signature Certificate. A Digital Signature Certificate suspension is invoked by, e.g., a CRL entry with areason code. (See also revoke a certificate)TOKEN A hardware security token containing a user's private key(s), public key certificate, and, optionally, a cache of other certificates,

including all certificates in the user's certification chain

Click h

ere to

buy

ABB


www.ABBYY.comClic

k here

to buy

ABB


www.ABBYY.com



file5983othdoc0_1284352860890

Documents

select trusted sites

information technology act

ca web portal

smart card services

respective trust chain

exchange key

internet options

internet options