Access Keys:
Skip to content (Access Key - 0)

CertAid for Windows

On this page:

Using CertAid for Windows to Install Certificates on Windows



  • MIT WIN.MIT.EDU domain users do not need to use the CertAid for Windows. This applies to Windows Windows 7, 8.1, and 10.
  • These instructions do not apply to the Microsoft Edge browser available in Windows 10.
  • Microsoft .NET Framework is required: https://www.microsoft.com/en-us/download/details.aspx?id=53344
  • Screens may vary lightly depending on your version of Windows and CertAid.



  1. If you have not already done so, download and install CertAid for Windows. You can watch the video at http://web.mit.edu/ist-train/CertAid/ for the steps to installing and launching CertAid.

  2. Launch the CertAid for Windows application from Start > Programs.
    (If you have just installed the program, the installer will launch it for you.)

    welcome to certaid screen

  3. If your Windows user account has administrator privileges, you will be given the option to change settings for all users on the system (this does not affect personal certificates). Most users should accept the default option and click Next.
    Result: The Welcome to CertAid screen is displayed.

    welcome to certaid screen

  4. Select Request or renew an MIT certificate and click Continue.
    Result: The Verify Your Identity screen is displayed.

    verify your identity screen

  5. Enter your MIT Kerberos username, Kerberos password, and MIT ID number, and click Continue.
    Result: The Request Certificate screen is displayed.

    request certificate screen

  6. Enter a Certificate Life, or leave the default value (the maximum certificate life), and click Continue.
    Note: Most users should accept the default value.
    Result: The Install Your Certificates screen is displayed.

    install your certificates screen
  7. The Install Your Certificates window displays the progress of installing the MIT Certificate Authority and your personal certificate. Once these steps are completed, click Finish.

    If you get the dialog box below, click Yes.

    security warning screen


    If CertAid finds one or more existing certificates, it will display the following dialog box asking to delete them.

    multiple certificates found screen
    If you have used S/MIME for email encryption, do not delete your certificates. Click No.
    For more information, see Q: Should I Delete My Old or Expired Personal Certificate?.


  8. Click Yes to delete older certificates.

  9. The MIT now offers two-factor authentication! window displays the url to enroll in Duo Two-Factor Authentication.

    duo two factor authorization message

    Follow the URL to enroll a device for Duo Two-Factor Authentication

  10. Click OK.

Using CertAid to Configure Internet Options without installing Personal Certificates

  1. Follow the steps above to install and launch CertAid for Windows.

  2. If your Windows user account has administrator privileges, you will be given the option to change settings for all users on the system. Most users should accept the default option and click Next.

    choose only settings for your username

    Result: The Welcome to CertAid screen is displayed.

    welcome to certaid screen

  3. Select Configure Internet Options and click Next. This option does not affect personal certificates.
    Result: The Install Your Certificates screen is displayed.

    install your certificates screen

  4. The Setup Certificates window displays the progress of installing the MIT Certificate Authority, the Client CA, Trusted domains, etc. Once these steps are completed, click Finish.

    The "Personal Certificate" section will be grayed out since it is not used in this mode.
  5. If you get the dialog box shown below, click Yes.

    security warning screeen

    If CertAid finds one or more existing certificates, it will display the following dialog box asking to delete them.

    multiple certificates found screen
    If you have used S/MIME for email encryption, do not delete your certificates. Click No.
    For more information, see Q: Should I Delete My Old or Expired Personal Certificate?.


  6. Click Yes to delete older certificates.

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

July 17, 2017

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-certaid c-certaid Delete
certaid certaid Delete
ie ie Delete
internet internet Delete
explorer explorer Delete
certificate certificate Delete
c-windows-10 c-windows-10 Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki