Illustration of an old FIPS 140-2 DSC USB token with a red cross pointing to a new FIPS 140-3 token with a green tick

If you have been told that your HYP2003 token has changed or that your old DSC token will no longer work for renewal, you are not alone. DSC USB tokens in India are moving from FIPS 140-2 to the newer FIPS 140-3 security standard, and a new version of the popular HYP2003 token has been introduced. This guide explains what is changing, who is affected and what you should do.

⚠️ Dates and rules in this area are still being communicated by Certifying Authorities and token makers. Industry sources refer to 21 September 2026 as the cut-over date for new DSC issuance on FIPS 140-2 tokens. Always confirm the exact position for your certificate with us or your Certifying Authority before ordering.

What is FIPS 140-3?

FIPS 140 is a government security standard for cryptographic hardware, such as the chip inside a DSC token that stores your private key. FIPS 140-3 is the newer version and replaces FIPS 140-2. Tokens certified to the newer standard are what Certifying Authorities are expected to accept for new DSC issuance going forward.

What does this mean for the HYP2003 token?

HYP2003 is one of the most widely used DSC tokens in India. A new FIPS 140-3 version of HYP2003 is now being supplied. It looks and works much like the earlier token, but it is a different model version, so the older and newer tokens are not interchangeable for new DSC downloads after the transition.

Will my existing DSC stop working?

Based on what has been published so far, a DSC already downloaded onto a FIPS 140-2 token is expected to keep working until that certificate expires. The change mainly affects fresh DSC downloads and renewals that would be loaded onto an old-standard token.

What should you do now?

  1. Check your token model. Open your token software and note the model name, series and firmware version. Do not rely on the brand name alone.
  2. Note your DSC expiry date. If it expires in the next few months, plan the renewal early.
  3. If you need a new certificate, ask for a FIPS 140-3 token. This avoids being turned away at the download step.
  4. Do not format or re-initialise your old token unless you have first confirmed your current DSC is not on it.
  5. Keep your drivers updated. New token versions often need updated middleware from the manufacturer.

Can I still use my old token?

Your old token can generally continue to be used for signing with the certificate already stored on it. Whether it can receive a new certificate depends on its exact model and what your Certifying Authority supports. Read our guide on renewing a DSC on an old token for details.

Still stuck? We will fix it with you

Send us a screenshot of the error on WhatsApp. Bizgroww, Kolkata — pan-India DSC support.

💬 Get help on WhatsApp

Frequently Asked Questions

Is the FIPS 140-3 token mandatory?

For new DSC issuance after the transition date, industry notices say yes. Existing certificates on older tokens are expected to remain valid until expiry. Confirm your case with us.

Does the new HYP2003 cost more?

Prices vary by supplier. Message us on WhatsApp for the current price of the new token.

Do I need to buy a token every time I renew?

Not always. It depends on whether your existing token model is still accepted for new downloads.

Will drivers change?

The new version may need updated middleware. We share the correct driver with every token.

Our DSC Services

Related Guides

— Bizgroww | Authorized Registration Authority | Kolkata, India