Enrollment Guide: RCAI Class 3 Digital Certificate

Congratulations! You are about to become the proud owner of a Digital Signature Certificate issued by SafeScrypt Ltd., India's first Licensed Certifying Authority, under the aegis of the Indian IT Act 2000.

You are strongly encouraged to read the contents of this enrollment Guide before proceeding.

The process of enrollment consists of two stages:

This Certificate provides one of the highest levels of trust, which other entities will rely on to interact and transact with you electronically. In other words, this certificate would be your digital identity. We are therefore required to validate the credentials you submit, before we can issue this certificate to you.

The authentication process requires you, the Certificate Applicant to personally present yourself before a trusted third-party. You will be identified on the basis of the forms of identity you present to the trusted third-party.

SafeScrypt's authentication procedures recognize your banker as the trusted third-party performing the authentication function. Your banker is the branch manager of the bank where you hold a valid bank account. The banker may also be another employee of the same bank, of a grade equal to or higher than that of the branch manager. The forms of identity you may present to the banker are listed out later in this document.

Click here to begin the enrollment

enrollment pre-requisites

Before you commence the enrollment process, please be aware of the following.

1. System requirements:

Browser Version: SafeScrypt supports the following browser versions for Digital Certificate enrollment

• Internet Explorer – Versions 5.5, 6.0 with 128 bit cipher strength and Javascript enabled
• Netscape Navigator – Versions 4.7x, 4.8

Operating System: SafeScrypt recommends use of the following operating systems only

• Windows 2000 2nd edition
• Windows ME
• Windows NT 4.0 with Service Pack 6a
• Windows XP

2. Challenge Phrase:

During the enrollment, you will be required to provide a challenge phrase , which is a pass phrase. You will need to remember this phrase when your certificate needs to be renewed, replaced or revoked. If needed, write down this phrase and store it in a secure location.

SafeScrypt does not have access to your challenge phrase and you are solely responsible for the management of the same. However, if you have forgotten your challenge phrase, and you need help, you can contact the SafeScrypt Customer Support team at
consumerid_support@safescrypt.com .

3. Computer:

By default, your Private Key is generated and stored in the browser you do the enrollment with i.e. Internet Explorer or Netscape (unless you use a smart card or USB token). Therefore, please remember to pick up your certificate using the same browser and computer you used to do the enrollment.

Documentation Requirements

After you complete the enrollment, you will need to submit the following documentation. Please ensure that you have these ready.

Note: All documents must either be attested by a Banker or be notarized by a Notary Public / Class 3 Gazetted Officer as mentioned below. ONGC vendors located in India must ensure that their documents are attested only by their Banker. Notarization of documents is permitted only for ONGC vendors located outside India, as an additional option to Bankers Attestation.

1. Certificate Application Attestation Form – You will need to complete and sign this form and have it attested / notarized by your Banker / Notary Public / Class 3 Gazetted Officer. This form must be in the format specified
2. One government issued photo-id – You will need to submit one copy of a government issued Photo-ID that has been duty notarized / attested by a Notary Public / Class 3 Gazetted Officer or by your Banker. This could include;

Passport Driving License Income Tax Identity (PAN) Card Voters Identity card Service Identity Card issued to its employees by State / Central Government

3. Two other nationally valid ID's – These ID's need not necessarily be photo-id's but must be nationally valid and duly notarized / attested by a Notary Public, Class 3 Gazetted Officer or by your Banker. These should not be the same as the Photo-ID submitted above and could include;

Passports Driving Licenses Income Tax Identity (PAN) Cards Voters Identity card Service Identity Cards issued to its employees by State / Central Government Ration Card Photo Credit Cards / Debit card Bank / Kisan / Post Office Passbooks Pension Documents such as Ex-Servicemen's Pension Book / Pension Payment Order Ex-Servicemen's Widow / Dependent Certificates Mediclaim or similar insurance cards Student SSC / HSC / graduation / post graduation degrees Birth certificate School leaving certificate Electricity bill Mobile / Telephone bill Identity card or Registration certificate issued by the Professional Body to which the applicant is affiliated (e.g. ID Card with Name and Membership Number of a Chartered Accountant issued by the ICAI). This document can currently be submitted only by Chartered Accountants, Company Secretaries, Cost Accountants, Bankers and Doctors.

Stage 1 – Digital ID Online enrollment

You can begin your enrollment process at this URL:

https://digitalid.safescrypt.com/rcaiclass3/digitalidCenter.htm

Step 1 : Submit Information about Yourself

Please submit the following information about yourself. Please remember that this information must be accurate, as it will be displayed in your Digital Certificate . You must also provide this same information in your Certificate Application Attestation Form.

• First and last name in full. No abbreviations are permitted (Mandatory)
• E-mail address (Mandatory)
• City, State, Country (Mandatory)
• Permanent address and PIN Code (Mandatory)

Step 2 : Challenge Phrase

Next, you must provide a "challenge phrase". You will require this pass-phrase when you want to renew, replace or revoke your certificate. SafeScrypt does not have access to your challenge phrase, and it is your responsibility to safeguard this pass-phrase.

Note : In the event you forget your pass-phrase, and you want your certificate to be revoked, you can contact our Customer Support team for the "Revocation Letter" template. You need to fill in the required information and courier the completed letter to us at the earliest.

Step 3 : Cryptographic Service Provider (CSP)

Internet Explorer (IE) browser users must select the Microsoft Enhanced Cryptographic Provider option from the drop-down list box. Remember, this option generates and stores your Private Key in the IE browser itself.

If you have a smart card or USB token to store your Digital Certificate, select the Datakey RSA CSP from the drop-down list box.

NOTE: If your IE CSP options do not include the Microsoft Enhanced Cryptographic Provider, then you must update your browser with the appropriate service packs from the Microsoft Windows Update site (these are free updates) before you continue with the enrollment. If the Datakey RSA CSP option is not available, you must install the Datakey RSA drivers that come along with the smartcard or USB token.

Only these CSP's will give you Private Keys that are 1024 bits in length. The Indian IT Act 2000 specifies that Digital Signatures will be awarded legal recognition only if they are created with Private Keys that are 1024 bits in length.

Netscape/Mozilla browser users must select the length of the Key Pairs to be generated. Select the 1024 or 2048(High Grade) option. Besides, t he Indian IT Act 2000 specifies that Digital Signatures will be awarded legal recognition only if they are created with Private Keys that are 1024 bits or higher in length.

Generally speaking, the longer the keys, the more secure will be the encrypted communication.

Step 4 : Submit your Payment Information

You can select any one of the payment options listed here.

* Availability of payment options to a subscriber will be at the sole discretion of SafeScrypt.

Step 5 : Read the Subscriber Agreement and click the "Accept" button

This will submit your registration information to SafeScrypt.

Note: As your enrollment is getting submitted, the Web page will display a few popup windows that tell you that your Key-Pair is getting generated and will be stored in the certificate store you selected (i.e. IE, Netscape or I-Key). Please select “Yes” or “Accept” or “OK”, wherever you are prompted to do so.

Stage 2 – Post-enrollment (Identity Validation)

Once you complete the online enrollment, the last screen that is displayed will confirm your enrollment and will also explain the post-enrollment procedures. If you experience any difficulty submitting your order, please contact SafeScrypt at +91-80-26555104 or send us an e-mail at
consumerid_support@safescrypt.com.

Note : You must reference your First Name, Last Name (e.g. Anurag Shah) and E-mail address (e.g. anuragshah@safescrypt.com), exactly as you entered during the enrollment, in all communications to SafeScrypt regarding your Digital Certificate.

Step 6 : Documents to be Submitted

You must submit the following documents. These documents enable SafeScrypt to validate your application for the Digital Certificate.

1. Certificate Application Attestation Form

SafeScrypt requires this form for validating your identity prior to issuing your Digital Certificate.

You must present yourself to your banker who will perform the "persona-verification" function. The banker will attest your name, signature and photograph based on the records with the bank and will declare the same in the Certificate Application Attestation Form.

You must:

• Complete the form as per the instructions given
• Have your banker attest the letter
• Submit all documentation to SafeScrypt either through the SafeScrypt authorized agents or by courier to the postal address in this document

Your Name, E-mail id and Address that you enter in this form must be exactly as you have provided in the online enrollment. If these details do not match or if the details are found to be false, we will not be able to complete the validation and your certificate will not be issued.

Who is the Banker?

Your Banker is the Branch Manager of the bank where you hold a valid bank account. The Banker may also be any other employee of the same bank of the same or higher grade.

You can send your documentation to us either through the SafeScrypt Authorized Agents or by courier to the following address.

SafeScrypt Customer Support
SafeScrypt Limited,
667-668 Keshava Towers,
11th Main, 4th Block, Jayanagar,
Bangalore – 560011. INDIA.

Phone No: +91-80-26555104
Fax: +91-80-26555093
E-mail: consumerid_support@safescrypt.com

Step 7 : Certificate Issuance

SafeScrypt will begin the validation process after our Validation Team has received all the duly completed documents. If there is any discrepancy in the information received by way of the online enrollment and the documents you submitted, SafeScrypt will send you an e-mail with the instructions to either re-enroll with the correct details or to submit corrected documents. The validation will resume only after the corrected information has been received.

Once the validation process is completed and your payment has been confirmed, SafeScrypt will issue your Digital Certificate. You will receive an e-mail with a URL, a PIN number and the instructions to pick up your Digital Certificate.

Step 8 : Certificate Pickup

In the SafeScrypt E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. Click the 'Submit' button to proceed.

Note: Please remember to pick up the Digital Certificate using the same computer and browser that was used to enroll for the Digital Certificate.

The next screen you will see is the option to install the certificate in the browser you want to use. Click the 'Install' button.
 

Verify that your Digital ID pickup has been successful

  IE users

1. To verify that your Digital ID has been installed in IE, IE Browser and click on the 'tools' button at the top of the browser window.
2. Choose "Content" option from next screen
3. Click on  'Certificates',   under "Personal" tab You should see your digital ID

Netscape/Mozilla Users

1. To verify that your Digital ID has been installed in Netscape, open Netscape Communicator and click on the 'Security' button at the top of the browser window.
2. Under 'Certificates', click on "Yours".  You should see your digital ID

Congratulations!! Now you are ready to use your Digital Certificate.