On this page:
Certificates are used to authenticate you to web services at MIT. Some sites use certificates directly and others as a way to authenticate with our Touchstone Authentication system. They are a safe way for our web applications to identify you without you needing to type in a username and password. Certificates expire once per year, creating the need to renew them at least this often. They must be installed on each browser for each computer that you plan on using to access certificate-protected sites.
We strongly recommend using CertAid to configure your certificates for Chrome, Internet Explorer, and Safari. It manages the entire certificate setup procedure, giving you a more reliable installation experience. The setup procedure includes installing the MIT CA as well as your personal certificate, optionally deleting old certificates, and setting the correct identity preferences via a single, graphical application.
|CertAid does not run on mobile devices (i.e., Safari)|
|If you have not changed your password in the last year, you will need to do so before you can get certificates. Certaid will give you an error saying you're not logged in if you need to update your password.|
- Internet Explorer & Chrome CertAid 2.2.6 for Windows
- Firefox: Install MIT Personal Certificate in Firefox
- Go to MIT's certificate server website to get the certificates.
- Enter your Kerberos username, password, and MIT ID, then click Next.
- The next page will have settings related to the security key. Leave the default values and click Next.
- The certificate will be installed by the browser.
- If on Chrome, a bar at the top of the page will appear saying "Successfully stored client certificate issued by Massachusetts Institute of Technology". This means that the personal certificate from MIT has been installed in your browser.
- If on Firefox, a popup saying "Your personal certificate has been installed" will appear. Click OK to continue.
- Click on the link where the website says "Click to install the MIT Certificate Authority". This will download file called "mitca.crt".
- Click on the downloaded file. This will open a window. Click Import to complete the certificate setup.
- Installing Root and Personal Certificates on iOS
- Nexus Add & Remove Certificates
- Installing Certificates with Android 7.x or Higher
|IS&T Strongly Recommends Deleting Your Old/Expired Certificates|
Old certificates can confuse browsers and web-sites causing them to fail to authenticate you properly with your active certificates.
If you need to retain access to old user certificates, e.g., for access to encrypted mail, you should export them from your browser and save them for use with your legacy items.
- Delete MIT Personal Certificates in Chrome for Windows
- Delete MIT Personal Certificates for Safari or Chrome on Mac OS X
- Delete MIT Personal Certificates in Internet Explorer
- Delete MIT Personal Certificates in Firefox
- Test Your Certificate
- Troubleshooting Certificates in Internet Explorer (Windows)
- Troubleshooting Certificates in Safari (Mac OS X)
- Troubleshooting Certificates in Firefox (Windows, Mac OS X, and Athena/Linux)
- Google Chrome "Your browser failed to generate a key" error
- Certificate Not Valid Error - Certificate Test Fails
- Why is CertAid not responding on my computer?
- "A client certificate was invalid or not provided." - Mac error message
Send an email to the IS&T Service Desk or call us at 617 253-1101.
|Additional escalation information for Help Staff can be found here: