DSC token will not sign in the window

The USB token hangs from the laptop like a small fridge magnet. The LED is red. You have GSTR-3B filled. You clicked Submit with DSC. A blank signer window floated up, or emSigner said it was running and then nothing. Java errors if you still have an old note on the wall. The night watchman wants the lights off. Companies and LLPs cannot finish with EVC the way a proprietor often can. Without a signature, the return is still a draft.

You unplug the token, plug it in again, and hit Submit five times. Five empty windows. The token PIN you remember from last quarter may not be the PIN the new token vendor set. Panic clicking locks some tokens. Then the night is over in a worse way.

This is a login-and-sign problem, not a tax-rate problem. The portal will not file until emSigner and the token agree on a certificate whose PAN belongs to the authorized signatory mapped on GST.

What this is doing to the shop

A company GSTIN that needs DSC cannot use “OTP on owner mobile” as a substitute if Rule 26 still requires digital signature for that entity type. Check what the submit screen offers tonight: DSC, EVC, or e-sign. If only DSC is enabled, you must fix the token.

If the token works on the vendor’s test tool but not on GST, emSigner or the browser is the gap. If it works nowhere, the token or driver is the gap. If the certificate list opens but your name is missing, you may have plugged the accountant’s token for another company, or the DSC PAN does not match the signatory PAN.

Deadline does not care. Check this month’s official last date on Returns Dashboard. Late fee is official. Do not file a wrong 3B from a phone using someone else’s login just because the token failed.

Where to click on the GST portal

gst.gov.in.

Download emSigner: before login, many screens still expose Register / Update DSC. Open it. Use instructions on installing signer utility and download the emSigner build that matches your Windows or Linux. Install. After install, find emSigner, Run as administrator. It should say it is running on a local port (often 1585 on Windows — if the installer text differs, follow the current GST instruction page).

Register the certificate: login → Register / Update DSC (also reached from My Profile on some layouts). Select the authorized signatory PAN. The signer window must list the certificate. Enter token PIN. Registration is a one-time map of that DSC to that user. If you never registered, filing-time sign can fail even if the token blinks.

Filing sign: Services → Returns → Returns Dashboard → GSTR-1 or GSTR-3B → file → Submit with DSC. The same emSigner window must appear. Choose the certificate, PIN, done. Acknowledgement is the proof, not the LED.

Who can sign: the name in the verification drop-down must be an authorized signatory. A director’s token for a person not added on GST will not help. Fix signatory under registration amendment (non-core) on a working day if the person changed — that is a separate article-length job. Tonight, use a token that already belongs to a mapped signatory.

Do not download emSigner from random “GST DSC fix” sites. Use gst.gov.in.

What to try tonight

First, close Chrome completely. Start emSigner as administrator. Confirm the running message. Then open gst.gov.in and login. Order matters. Browser first, dead emSigner second, is a common fail.

Second, use a current Chrome or Edge. Disable the ad blocker on gst.gov.in. Allow pop-ups for the signer. Old Internet Explorer notes on the wall are fossils. GST’s current help talks to modern browsers plus emSigner, not to a 2017 Java applet you remember.

Third, plug the token into a rear USB port on a desktop, not a dying hub. Wait until Windows sees the smart card. Install the token vendor driver (eMudhra, Capricorn, Pantoken / TrustChain, and others — use the vendor’s official driver for your model). “Pantoken” in shop slang usually means the USB PKI token plus its utility. Open the vendor utility. If the certificate is expired, stop. You need a renewed DSC, not a GST trick.

Fourth, check expiry date on the certificate. Filing with an expired DSC fails. Renewal is with the certifying authority, not GSTN.

Fifth, match PAN. DSC PAN must be the authorized signatory’s PAN. Company’s PAN on a person’s token, or the reverse, is a classic blank list.

Sixth, enter the PIN slowly. After failed PINs, wait. Some tokens lock. Unlock, if the vendor allows, with the unlock code from the token paperwork — not with a guess.

Seventh, try one other PC only if that PC has emSigner from gst.gov.in and the same token drivers. Carrying the token to a cyber cafe that “does GST” risks PIN theft. Prefer a known machine.

Eighth, if EVC is legally available for your constitution and the screen offers it, you can file with EVC tonight and deal with DSC tomorrow. Do not force EVC if the portal hides it for companies.

Mistakes that make the night longer

Installing three versions of emSigner on top of each other. Uninstall old, reboot, install the copy from the GST instruction page.

Running emSigner without administrator rights so port bind fails.

Sharing the token PIN on WhatsApp with a “helper.”

Registering DSC against the wrong signatory, then wondering why the drop-down certificate is rejected.

Keeping GSTR-3B open for two hours while you fight the token, then signing a stale session. Save the return. Sign in a fresh short session.

When to stop and get local help

Stop if the certificate is expired or the token is locked.

Stop if no authorized signatory’s DSC is in the building and the entity must use DSC.

Stop if emSigner never starts (port in use, antivirus kill, office policy). An IT person plus your GST practitioner together is faster than another download.

Bring GSTIN, signatory PAN, token, PIN paperwork, screenshot of the exact error. Do not send the PIN in the screenshot. File on gst.gov.in when the window finally lists the right name.

FAQ

emSigner says it is running. Why is the GST window still empty?

The portal talks to emSigner on the local port. If the browser blocks it, if a second emSigner is holding the port, or if you launched GST before emSigner, the list stays empty. Close the browser, run emSigner as administrator, allow the site, retry Register / Update DSC first, then file. Install token drivers so Windows exposes the certificate to emSigner. A lit USB LED only means power, not a listed certificate.

Does the DSC PAN have to match the authorized signatory?

Yes. GST maps the digital signature to the authorized signatory. A token issued on another person’s PAN will not sign that user’s returns. Add the person as authorized signatory through the proper registration amendment if they should sign, then register their DSC. Do not borrow a random company’s token to “just file tonight.”

Do I still need Java for GST DSC?

The current GST path is emSigner plus browser, not the old Java applet many shops remember. Follow the install page linked from Register / Update DSC on gst.gov.in. If an old Java note is taped near the till, ignore it unless the official instruction page still mentions it for your operating system. Update emSigner from GST, not from a forwarded setup.exe.

The token is a Pantoken / USB dongle. Where do I enter the PIN?

After Submit with DSC (or Register DSC), emSigner or the token middleware asks for the PIN. That PIN is set with the certifying authority or token vendor, not by GSTN. GST login password is different. If the PIN window never appears, the certificate was never listed. Fix drivers and emSigner first. If the PIN window appears and fails, you have a PIN or lock issue — use vendor unlock steps, not a new GST challan.

GST Atka is not a GSTN office. File on gst.gov.in. Rules change. Do not evade tax. Personal case: get local help.