GSTN Advisory: emSigner Version 3.3 and the FIPS 140-2 to FIPS 140-3 Migration Framework for GST Portal DSC Users

Overview

The Goods and Services Tax Network (GSTN) released an advisory dated September 19, 2026, addressed to all users of the GST Portal — including assessees and tax officers — who rely on Digital Signature Certificates (DSCs) for authentication and signing purposes. The advisory introduces emSigner version 3.3, a new iteration of the signing utility designed to ensure compatibility with updated cryptographic hardware issued from September 21, 2026 onwards. Alongside this, the Controller of Certifying Authorities (CCA) has published a companion migration framework detailing the transition from FIPS 140-2 to FIPS 140-3 cryptographic standards. Both documents together outline what users must do, when they must do it, and what exceptions apply.

Why This Advisory Matters

The transition to FIPS 140-3 is not merely a technical upgrade — it represents a fundamental shift in how cryptographic modules are validated, governed, and deployed within India's PKI (Public Key Infrastructure) ecosystem. For assessees and tax officers using DSCs on the GST Portal, this directly impacts whether their digital signing tools will continue to function after September 21, 2026, particularly when new or renewed tokens are involved.

Part A: GSTN Advisory on emSigner Version 3.3

What Is emSigner and Why Is It Being Updated?

emSigner is the utility application used on the GST Portal to enable DSC-based signing of returns, applications, and other documents. With the CCA mandating a migration away from FIPS 140-2 dongles for fresh issuances from September 21, 2026, the existing emSigner versions are unable to recognise or work with newly issued FIPS 140-3-compliant USB tokens. emSigner v3.3 bridges this gap by providing native compatibility with these new-generation dongles while retaining backward compatibility with older tokens.

Who Needs to Upgrade — and Who Does Not?

The advisory draws a clear distinction between two categories of users:

Category 1: Users with Existing Valid Certificates

• Assessees and officers whose current DSC and USB dongle are functioning normally as of September 21, 2026 do not need to take any immediate action.
• They may continue using whichever version of emSigner is currently installed on their system.
• However, if any of the following issues arise, upgrading to emSigner v3.3 is recommended:
  • Signing failures during document submission on the GST Portal
  • The DSC certificate not appearing in the selection list despite correct token driver installation

Note: emSigner v3.3 is backward compatible, meaning it will also support older FIPS 140-2 dongles that are still within their validity period.

Category 2: Users with Newly Issued or Renewed Tokens (on or after September 21, 2026)

• Any assessee or tax officer who receives a new USB dongle on or after September 21, 2026 — whether because a fresh DSC was issued or an existing certificate was renewed into a new dongle — must upgrade to emSigner v3.3.
• Older versions of emSigner will not function with dongles issued from September 21, 2026 onwards.

Step-by-Step Upgrade Process for emSigner v3.3

Step 1: Verify Minimum System Requirements

Before downloading the new version, ensure that the system (desktop, laptop, or all-in-one) used for DSC-based signing on the GST Portal meets the following specifications:

1.1 Operating System and Hardware

1.2 Java Environment

Critical: Users running Java 9 or higher must downgrade to Java 1.8 before installing emSigner v3.3. Higher Java versions will cause compatibility failures.