Your DSC's private key lives on a USB cryptographic token. The key can't be copied out, which protects your signature.
Choosing a token
- Use a model accepted by your Certifying Authority that meets the current CCA requirements (FIPS-certified)
- Common brands in India include ePass/HYP2003, Proxkey and mToken; availability changes, so check with the CA
- A working compatible token can usually hold a new certificate after renewal
Looking after it
- Never share the token password; repeated wrong attempts can lock the token
- Install the driver from the token maker, your CA, or the portal – not random download sites
- Keep it away from heat and moisture; use the cap
Problems? See DSC troubleshooting.