The encryption key pair is used by the subscriber for receiving encrypted messages which is encrypted using subscriber's public key. The subscriber fills in the application and submits to eMudhra or it's authorized RAs along with the identification and address proof. The RA verifies the application, id proof and address proof and approves the request. The Subscriber provides a password in the portal for protecting the encryption certificate. The server generates the encryption key, escrows and makes it available for the customer in the portal. The subscriber needs to login with the credentials sent to his digital id and download the encryption certificate from the portal.