Is PKI legally valid in India under the IT Act?

Yes. Public Key Infrastructure (PKI) is legally recognized in India under the Information Technology Act, 2000. The Act grants legal validity to digital signatures backed by licensed Certifying Authorities.

Under the IT framework:

  • Digital signatures based on PKI are legally enforceable
  • Certificates must be issued by licensed CAs
  • Secure authentication methods must be followed

PKI-based digital signatures carry evidentiary value in courts and regulatory proceedings, making them compliant for contracts, filings and enterprise transactions.