Firefox 3.x - Resolve Certificate Issues to Access SAPweb

This page will guide you through installing and renewing certificates in Mozilla Firefox.

Delete Expired and Duplicate Certificates

1. Open Firefox Preferences
   • On Windows: Tools > Options
   • On Linux: Edit > Preferences
   • On Mac OS X: Firefox > Preferences
     
     
     
     
2. Select the "Advanced" pane. Then select the Encryption tab.
   
   
   
   
3. Click "View Certificates".
   
   
   
   
4. Select the expired or duplicate certificate and click the "Delete" button. You will be prompted if you want to delete the certificate. Click OK to continue.
   
   
   
   
5. Confirm that you have one, non-expired certificate.

Install the Personal Certificate

1. Navigate, in Firefox, to http://ca.mit.edu.
2. Enter your Kerberos username and password, and your MIT identification number, and click Next.
   
   
   
   
3. On the page Generate a Private Key, leave the Key Size at the highest grade for your browser. The Certificate Lifetime gives the default number of days until this personal certificate expires. Click Next to accept the defaults.
   
   
   
   Result: The message "Key Generation in progress ..." appears.
   
4. An Alert message confirms that the certificate has been installed, and instructs the user to backup the personal certificate.
   
   
   Note: It is not necessary to backup your personal certificate. If you do wish to backup your personal certificates locally, in Firefox go to Preferences/Options > Advanced > View Certificates, click Backup All, and follow the instructions.
   
5. Your certificate is now installed.

Install the MIT Certificate Authority (CA)

Note: The MIT CA is not needed for Open Enrollment, but is needed for many other MIT certificate-protected sites. Take a moment now to install the MIT CA in Firefox.

1. If you are viewing this page in Firefox, select here to download the MIT CA (Certificate Authority).
   Alternatively, copy and paste the following URL into Firefox: http://ca.mit.edu/mitca.crt
2. Click to check the box Trust this CA to identify web sites.
   
   
   
3. For details on the CA, click the View button. The following window appears.
   
   
   
   
4. Confirm that the CA is from MIT, and that it expires in 2026. Click Close.
5. In the "You have been asked ..." box, click OK.

Still need help? Use the Certificates Help Wizard.