Renew Your MIT Personal Certificates

CertAid

Installing your MIT Personal Certificates allows you to continue using important MIT web services, including filling out your time sheet, accessing your benefits, or viewing MIT websites.


Using CertAid (Recomended)

  1. Establish a VPN connection with MIT

  2. Double-click on the CertAid icon on your desktop

  3. Click Next

  4. Click Next

  5. Enter your Kerberos username and password

  6. Select your DUO two-factor authentication method of choice

  7. Accept the default "Certificate Life" and click Next

  8. Wait for the first four green circles to be populated and then click Finish

  9. You can test your new MIT Personal Certificate here

  10. Select your certificate from the User Identification Request window and click OK

  11. If you changed your Kerberos password while renewing your MIT Personal Certificate establish a VPN connection, press Windows Key + L to lock your laptop, and log back in using your new Kerberos password. Failure to log back in using your new Kerberos password could prevent you from logging into your computer in the future.

Manually Renewing Mozilla Firefox (Experts Only)

  1. Establish a VPN connection with MIT

  2. Open https://ca.mit.edu/ca/ in your Firefox browser

  3. Enter your Kerberos username and password and click Next

  4. Complete your DUO two-factor authentication

  5. Accept the default "Certificate Life" and enter your Kerberos password twice

  6. Click Next

  7. Firefox will give you the option to Open with or Save your YOURUSERNAME-cert.p12 file (this is your MIT Personal certificate). Choose Save File and click OK

  8. To install your MIT personal certificate enter about:preferences#privacy into your Firefox addressbar and press Return

  9. Scroll to the bottom of the page and press View Certificates to open the Certificate Manager

  10. Click Import…

  11. Find the YOURUSERNAME-cert.p12 file you previously downloaded (most likely located in your Downloads folder) and click Open

  12. Enter your Kerberos password and click OK

  13. You can test your new MIT Personal Certificate here

  14. Select your certificate from the User Identification Request window and click OK

  15. If you changed your Kerberos password while renewing your MIT Personal Certificate establish a VPN connection, press Windows Key + L to lock your laptop, and log back in using your new Kerberos password. Failure to log back in using your new Kerberos password could prevent you from logging into your computer in the future.