IRCTC agent OTP vs DSC: costs and validity

Say you’re about to pay for an IRCTC agent ID and the provider asks, “OTP or DSC?” You nod, because you don’t want to look new. Then you go home and wonder what you actually bought, how long it lasts, and what you’ll pay next year.

This post answers those questions in plain terms. It keeps three things apart that people often lump together: the OTP login, the Class 3 DSC (digital signature certificate), and the running costs of the agent ID itself. It also keeps a pending application separate from a login problem, because they need different help.

What do OTP and DSC cost, and for how long?

As of 18 October 2026, SiOnline’s Standard registration is ₹3,000 including GST. It’s a one-off payment and it’s non-refundable. It is for OTP login. The fees page lists the commercial items in one place.

SiOnline lists a Class 3 DSC login separately, at ₹6,000 including GST for two years. That’s the price and period of the certificate product. It doesn’t tell you that your agent ID, monthly maintenance or other services are paid up for the same two years. They aren’t covered by that figure.

A few plain points about that table.

As of 18 October 2026, the ₹199 minimum wallet balance on SiOnline’s wallet is a held deposit, not specific to IRCTC, FASTag or UTI. It’s money sitting in your wallet, not a fee.

These are SiOnline’s terms. They aren’t a price fixed by IRCTC, and another provider may quote differently.

Don’t put a yearly renewal next to a two-year product price and call it a like-for-like comparison. One is a yearly charge, the other is a certificate that lasts two years, and each covers something different.

Wait to add up a two-year total until you know which items apply and when each one starts. If something in the written quote doesn’t mention tax, ask. Don’t add or remove GST on a guess.

Is a Class 3 DSC required for login?

No. IRCTC’s integration policy for B2B and Internet Cafe PSPs (2 September 2020) says the RSP has the choice to use DSC or OTP if the DSC is purchased. That’s item VI.15 of the integration policy, reopened on 18 October 2026.

So a Class 3 DSC is optional.

What should you do about it? Don’t treat a price list as if it settled a rule. Ask your provider which login your ID will use, whether it’s new or existing. Then keep the answer with the quote. If they rely on a newer document, note who issued it, the date and the clause. The date a message was forwarded to you isn’t the date the rule took effect.

What should you check for OTP, and what for DSC?

If you’re going with OTP

Find out which mobile number is recorded for agent login, and who looks after it. Don’t assume the number you gave at enquiry stage, or a former employee’s phone, is the one on the account.

The fact that the OTP goes to a registered mobile is not permission to pass login OTPs around the shop. One account, one responsible person.

If you’re going with DSC

Name the product and the authorised user before you ask for installation help. The listed price and period tell you nothing about drivers, browsers or moving the certificate to another computer. For those, follow your provider’s current instructions for your own equipment. This guide hasn’t tested any setup, so it won’t guess.

What if you change the computer, the shop or the operator?

These are three different questions, so describe each one to your provider on its own.

A new computer is a technical question. A new location is a registered-address question. A new person at the keyboard is an authorised-user question. The Agent Policy (Annexure A, I.vii) includes an address-change requirement for registered RSPs, so don’t assume that choosing a login method lets you move the whole operation.

And when you hire help, don’t solve it by sharing the password, the login OTP or access to the certificate. If a technician sets up your machine, keep the credentials with you and ask support for the proper route.

A made-up file, to show how to keep your records

This is an invented example, not a real receipt or a real message. Say an existing agent has a document called “Example OTP renewal”, dated 18 October 2026. It names an OTP renewal but doesn’t say when the renewed period starts. Another message mentions a DSC.

The habit here is to write down what you know and what’s missing. Don’t fill an empty receipt box with an assumed payment. Don’t work out a start date from the day a message arrived. If a document uses a different item name from the one you expected, ask whether it’s the same charge or a separate product before you pay again.

Suppose a revised quote then arrives. Compare the item, the period and the tax wording with the earlier one. If something changed, turn it into a precise question: “Which period changed?” Don’t jump to “they’ve upgraded me” or “IRCTC added a new charge.” Save the new quote as its own dated version.

What to ask your provider before you pay

Keep this list next to the phone. Ask for the answers in writing, by message or email, so you have them later.

1. Which login rule applies to my ID, OTP or DSC, and which IRCTC document does that answer rest on?
2. What exactly is in the price you’ve quoted, and does it say “including GST” in so many words?
3. How long does each item last, and from which date does that period start?
4. What do I pay again next year, and what do I pay every month?
5. Which mobile number will be recorded for my agent login, and how do I change it if I need to?
6. If I want a DSC later, is it an add-on to an ID I already hold, and what does it cost then?

None of this makes you a difficult customer. A provider who has the answers will give them to you quickly. If an answer is vague, that tells you something too.

Setting up a fixed counter

Think about how you’ll work day to day. Do you have one desk and one computer, or does a second person sit in sometimes? Say so when you enquire. Don’t assume that having a fixed desk automatically makes a DSC the right choice, or the wrong one.

Decide who looks after the login and the renewals, and where you’ll keep the notes. It’s a bad setup when only one outside person understands how your login works and you can’t reach them later.

If you want to practise before you go live, use a practice checklist on paper: sign-in, a customer’s booking OTP, and a renewal date are three different things. Don’t try it out on another outlet’s live credentials. A demo on someone else’s ID isn’t your own appointment.

Is it a pending application, a login failure or a renewal?

Each one needs different help, so work out which you have before you write to anyone.

For a pending SiOnline application, the first instalment is due at signup, the second after document verification, and the ID is created only after full payment. IRCTC issues and activates the ID. The IRCTC agent registration page covers that task.

If you’re already an agent and can’t sign in, go to agent login help and the support route. Send the exact message and your account reference. Never send a password or a login OTP.

Two habits will save you money. Don’t buy a product again just to see if it fixes a sign-in problem. And don’t file a new registration because an existing login failed. Ask what action is actually needed, and keep the written reply with your records.

Don’t mix up the login OTP with the customer’s OTP

They’re different codes for different jobs. The Agent Policy sends the login OTP to the RSP’s registered mobile. It separately describes cancellation authentication sent to the passenger. And the Tatkal announcement published by PIB on 11 June 2025 describes a different OTP for bookings through authorised agents and reservation counters.

So when a message says “OTP”, ask which one it means. Is it your own sign-in, an identity check, or a passenger’s transaction? That one question is more useful than changing your login method before you know what’s wrong.

Questions before choosing or renewing

Does the two-year DSC remove the yearly ID renewal? No. The two-year period belongs to the certificate. Nothing in the stated terms says it covers agent-ID renewal, so treat each item separately and get the written schedule.

Is OTP the right choice for everyone? Not automatically. Which rule applies to your ID is still a confirmation point. Ask your provider about your actual ID before you choose or pay.

Can changing my login method fix a pending application? First find out which stage the application is at. Document checking, payment, ID creation and sign-in are four different steps.

What should I keep? The answer you got on the permitted login, the current quote, item-by-item dates, receipts and your account reference. Prices and rules move, so check again before the next payment.

Sources and checks

• IRCTC integration policy, item VI.15, reopened 18 October 2026.
• IRCTC Agent Policy, effective 29 November 2019; registration, login, sharing and address duties, reopened 18 October 2026.
• IRCTC ICS norms, certificate requirement, reopened 18 October 2026.
• Indian Railways Tatkal announcement, published by PIB, 11 June 2025; transaction authentication scope, reopened 18 October 2026.