Your pay slip authorization, GPF statement and pension papers no longer need a trip to the AG office in Thiruvananthapuram. They sit behind a single KSEMP login, and a small mistake in your registered details is the most common thing that keeps you out.
We tested every entry point on the Kerala State Employees Management Portal (KSEMP) to map what works and where users get stuck. Here is what our team found.
Key Takeaways
- KSEMP is the official portal of the Accountant General (A&E), Kerala, run under the Comptroller & Auditor General of India, and it is live at ksemp.agker.cag.gov.in.
- There is no separate signup form for most users: employees, DDOs and SCOs create their first password through the Create/Forgot Password option using details registered in SPARK/BIMS.
- Every login now ends with an OTP sent to your registered mobile, and the reconciliation module with digital signatures for CCOs has been fully in force since the April 2025 accounts.
Check Also: Camsonline Login: How to Reach Your Folio, NPS Account, and KYC Tools in 2026
What exactly is KSEMP?
KSEMP is a web portal that lets Kerala State Government employees view their transactions with the AG office. That includes Pay Slip Authorization, GPF Authorization, GPF Annual Statements, Reconciliation Reports and the GPF Ledger.
The portal belongs to the Accountant General (A&E), Kerala, Thiruvananthapuram, part of the Indian Audit & Accounts Department. Its legal footing comes from Sections 10 to 12 of the CAG’s Duties, Powers and Conditions of Service Act, 1971.
Scale matters here. The GPF Wing alone maintains accounts for about 3 lakh employees, including High Court Judges, Judicial Officers and All India Service Officers.
The Gazetted Entitlement (GE) wing handles service records and pay authorizations for roughly 60,000 Gazetted Officers. Those officers see their authorized pay slips directly on the portal.
Bookmark the official address before you go further: https://ksemp.agker.cag.gov.in/
Who can use the portal?
The portal serves four types of users. You pick your type from a dropdown before entering any ID.
- Employee — State Government staff who log in with their PEN (Permanent Employee Number)
- Pensioner — retired staff and family pensioners who log in with their PPO or FPPO number
- DDO/SCO/CCO — Drawing and Disbursing Officers, Subordinate Controlling Officers and Chief Controlling Officers
- Others — additional user categories such as treasury officials
The ID you enter changes with the role. A DDO uses the DDO code, an SCO uses a six-character alphanumeric CO code, and a pensioner uses the PPO number.
Know your ID type first. Most failed attempts start with the wrong user type selected.
Check Also: Edumarshal Login: How Students, Parents and Staff Sign In (2026)
What can you actually do after signing in?
The dashboard shows a main menu that differs by role. For employees and DDOs, we observed these options on the standard dashboard:
- GPF Admission
- GPF Authorization
- GPF Monthly Statement
- Pay Slip (Gazetted Officer)
- Service Details (Gazetted Officer)
- GPF Annual Statement
- Expenditure Report under the VLC tab (VLC means Voucher Level Computerisation)
A DDO can view GPF authorization slips for every employee reporting to them by entering each employee’s PEN. They can also see pay slips of the Gazetted Officers under their control.
Pensioners get a simpler view. Once inside, they can download every authorization the AG office has issued — useful for presenting at the Treasury.
If you’ve been following Kerala’s e-governance push, none of this will come as a surprise. The state has spent years moving payroll through SPARK and budgets through BIMS, and KSEMP pulls its user data from those same systems.
How do you sign up on KSEMP for the first time?
Signing up on KSEMP means creating your first password. There is no traditional registration form for employees, DDOs or SCOs — the portal verifies you against SPARK/BIMS records.
Pensioners are the exception. They get a dedicated Register/Update Pension User option.
How do employees create an account?
Employees use their PEN and the mobile and email stored in SPARK. Follow these steps:
- Open the portal at https://ksemp.agker.cag.gov.in/login.
- Click “Create/Forgot Password” below the Login button.
- Select “Employee” as your type of ID.
- Enter your PEN in the ID Number field.
- Type your mobile number exactly as registered in SPARK.
- Type your email ID exactly as registered in SPARK.
- Enter the captcha shown on screen.
- Click Submit and check your inbox and SMS for the new password.
Once you sign in, go to Change Password and set something you will remember. Do this on your first visit.
How do DDOs and SCOs register?
DDOs and SCOs follow the same Create/Forgot Password route. The difference is the ID: a DDO code or an SCO code.
- Click “Create/Forgot Password” on the login page.
- Select DDO or SCO as your type of ID.
- Enter your DDO code or SCO code as the user ID.
- Enter your personal mobile number as registered in SPARK/BIMS.
- Enter your personal email ID as registered in SPARK/BIMS.
- Fill in the captcha and click Submit.
- Collect the password sent to your registered mobile or email.
DDOs and CCOs who already had a password in the earlier version of the portal can keep using it. SCOs, however, are a newer hierarchy level, so every SCO must create a fresh password.
The portal’s own notice board is clear on one point. If creation fails, DDOs should update their details in SPARK/BIMS again, and SCOs should update their “SCO user” and “SCO admin” details in BAMS before retrying.
How do CCOs get access?
CCOs cannot self-register. Their password comes directly from the AG office.
- Write an email requesting KSEMP credentials.
- Send it to vlc.ker.ae@cag.gov.in from your official account.
- Wait for the password issued by the Accountant General’s office.
- Log in with your CCO code and that password.
- Register your DSC (Digital Signature Certificate) through the Register DSC tab before starting reconciliation work.
How do pensioners register?
Pensioners take one of two paths. Your path depends on whether you gave an email and mobile number with your pension application.
If you did not submit email or mobile with your application:
- Click “Register/Update Pension User” on the login page.
- Enter your Date of Birth, Date of Joining Service and Date of Cessation of Service (retirement date, or date of death for family pensioners).
- Confirm your details when the system fetches your PPO/FPPO number and name.
- Enter your PIN code if prompted — this is the PIN of the residential address you already submitted.
- Add your email ID and mobile number.
- Receive your password by SMS or email.
If you already submitted email or mobile with your application:
- Click “Create/Forgot Password” on the login page.
- Select “Pensioner” as your type of ID.
- Enter your PPO number, registered email and mobile number.
- Submit the form and collect your password by SMS or email.
Our analysis suggests the second path is noticeably faster. Many pensioners already received an SMS or email carrying their PPO/FPPO number, so check your old messages first.
How does the KSEMP login process work?
Signing in is a two-stage process: password first, then a one-time password (OTP). Both stages are required for every user type.
How do employees log in?
- Go to https://ksemp.agker.cag.gov.in/login.
- Select “Employee” under Choose your Type of User.
- Enter your PEN as the ID Number.
- Type your password.
- Enter the captcha — use the refresh icon if it is hard to read.
- Click Login.
- Enter the OTP sent to your registered mobile.
- Click Login again to reach your dashboard.
How do DDOs, SCOs and CCOs log in?
All three roles share one user type in the dropdown. The ID you enter tells the system which dashboard to load.
- Select “DDO/SCO/CCO” as your type of user.
- Enter your ID — DDO code, six-character SCO code, or CCO code.
- Enter the password you received by SMS, email or from the AG office.
- Fill in the captcha and click Login.
- Type the OTP from your registered mobile.
- Click Login to open the dashboard.
DDOs will find reconciliation work under Expenditure Report in the VLC tab. SCOs see Expenditure Report and Reconcile Statistics in their main menu.
How do pensioners log in?
- Select “Pensioner” as your user type.
- Enter your PPO number as the user ID.
- Enter the password received by SMS or email.
- Complete the captcha and click Login.
- Enter the OTP and click Login.
- Open Change Password and set a new one right away.
That last step is not optional advice. The AG office’s own instructions tell pensioners to reset the password after the first KSEMP login, according to their convenience.
How do you reset a forgotten password?
You reset a forgotten password through the same form used for first-time creation. The portal sends a new password to your registered mobile or email.
The direct link is https://ksemp.agker.cag.gov.in/changePasswordForm.
- Open the Create/Forgot Password page using the link above.
- Select your ID type — Employee, Pensioner, DDO, CCO or SCO.
- Enter your ID number (PEN, PPO number, DDO code or SCO code).
- Enter your mobile number exactly as stored in SPARK/BIMS.
- Enter your email ID exactly as stored in SPARK/BIMS.
- Type the captcha and click Submit.
- Check your SMS and email for the new password.
- Log in and change it from the Change Password menu.
One detail trips people up constantly. The mobile and email must match your SPARK/BIMS record — not the number you use today if you changed it without updating SPARK.
CCOs who forget their password should email vlc.ker.ae@cag.gov.in again. The self-service form does not issue CCO credentials.
What changed with the reconciliation module in 2025?
The reconciliation module moved monthly account checks fully online. It has been in full operation since the April 2025 accounts, after a parallel run that started in 2021–22.
Here is how the chain works:
- DDOs review Head of Account-wise reports and accept or reject them, fully or partially.
- SCOs/COs (added as a new layer from FY 2025–26) verify, return or reject DDO submissions.
- CCOs approve the consolidated reports and sign a system-generated Reconciliation Certificate using a digital signature.
Our team observed that rejections are granular. A DDO can reject individual bills with separate remarks for each, instead of throwing out an entire report.
CCOs carry the final responsibility. Under Paras 72 and 74 of the Kerala Budget Manual and Article 9 of the Kerala Financial Code, Vol. I, the CCO is the final authority for submitting the Reconciliation Certificate to the AG.
If you are a CCO, insert your DSC token and complete the Register DSC step before your first signing cycle.
Why does sign-in fail, and how do you fix it?
Sign-in failures almost always trace back to mismatched records. We grouped the common causes with their fixes:
- Wrong user type selected — DDOs picking “Employee” is a frequent slip. Pick DDO/SCO/CCO instead.
- Mobile or email not matching SPARK/BIMS — update the record in SPARK or BIMS, then retry Create/Forgot Password.
- SCO credentials not created — update the SCO user and SCO admin details in BAMS first.
- OTP not arriving — confirm the mobile on record is still active with your carrier.
- Captcha rejected — click the refresh icon for a clearer image.
- Pensioner details not found — have your residential PIN code ready, since the system may ask for it.
A failed KSEMP login rarely means the portal is down. In our checks, the site, the login page and the password form all loaded normally.
Who should you call for help?
The AG office runs dedicated helplines by subject. Call the right desk and you skip a round of transfers.
- ITS Cell (technical and login issues): 0471-2776282
- GPF-related issues (PF-EDP): 0471-2776699
- Pension-related issues (Pension-RRD): 0471-2776499
- Gazetted Entitlement: GE-01 0471-2776501, GE-02 0471-2776502
- CCO password requests: vlc.ker.ae@cag.gov.in
For other GE sections, dial 0471-27765 followed by the section’s two-digit number.
FAQs
Is KSEMP an official government portal?
Yes. It is run by the Accountant General (A&E), Kerala, under the Comptroller & Auditor General of India, at ksemp.agker.cag.gov.in.
What ID do I use to sign in?
It depends on your role. Employees use their PEN, pensioners use the PPO/FPPO number, and DDOs, SCOs and CCOs use their office codes.
Is there a separate signup page?
Not for employees, DDOs or SCOs. You create your first password through Create/Forgot Password, and only pensioners without registered contacts use Register/Update Pension User.
Why does my KSEMP login fail after entering the password?
Check the OTP step first. The portal sends an OTP to your registered mobile, and you must enter it before the dashboard opens.
What if my mobile number has changed?
Update it in SPARK (or BIMS for DDOs) first. The portal only sends passwords to the contacts on record.
How do CCOs get a password?
CCOs email vlc.ker.ae@cag.gov.in with a request. The AG office issues the password directly.
Can pensioners download authorization documents?
Yes. After signing in, pensioners can download every authorization issued by the AG office for their records or for use at the Treasury.
Can Gazetted Officers see their pay slips?
Yes. Pay slips authorized by the AG office appear under Pay Slip (Gazetted Officer), along with Service Details.
Whom do I call for login problems?
Call the ITS Cell at 0471-2776282. For GPF or pension questions, use the subject-specific numbers listed above.
What should you do next?
Confirm your mobile number and email in SPARK or BIMS before anything else. That one check prevents most password and OTP failures.
Then open https://ksemp.agker.cag.gov.in/login, choose your user type, and complete your KSEMP login — and change your password on the very first visit.
