Install and Delete MIT Personal Certificate in Firefox

On this page:

Firefox 90 and Above

There are no extra steps beyond using CertAid. Starting with version 90, Firefox automatically finds and offers to use client authentication certificates provided by the operating system on macOS and Windows.

Firefox 89 and Below

Adding personal certificate 

1. Navigate to https://ca.mit.edu/ca/
2. Enter your Kerberos username and password, click Next.
   Result: You will be prompted to authenticate with Duo.
   
   
3. Authenticate with Duo Authentication.
   Result: You will be brought to a page to generate a certificate for download.
   
   
   
4. Input a one-time import password in order to download your personal certificate, click Next.
   Result: You will be prompted to save your certificate to a location of your choice.

This does not change your kerberos password. It is only a password for your file and not your account.

1. Save your personal certificate file to a suitable location.
   Result: Your personal certificate will be saved to that location.
   
   
   
2. From the Menu icon, click on Options (Windows) or Preferences (macOS). Search for "certificates", click on View Certificates.
   Result: The Settings window will open, and then the Certificate Manager will open.
   
   
   
   
   
3. From the Certificate Manager, click on the Your Certificates tab, click on Import.
   Result: You will be brought to a window to select where your certificate will be saved.
   
   
   
4. Navigate to the location of your downloaded personal certificate, click on Open.
   Result: You will be prompted to enter a one-time password.
   
   
   
5. Input the one-time password from step 3, click on Ok.
   Result: You should now see your personal certificate listed.
   
   

Removing personal certificate

1. From the Menu icon, click on Options (Windows) or Preferences (macOS)
2. Search for "certificates", click on View Certificates
3. From the Certificate Manager, click on the Your Certificates tab for Personal Certificates and Authorities for CA
4. Navigate to the certificate, click on Delete

Mac OS extra: Importing Your Firefox Certificate Certificate into keychain access.  

Before trying the follow steps, please create the certificate file using the steps in Adding Personal Certificate above.

1. Open keychain access.
2. Click on login for the keychain we are using.
3. At the top click on file and select import items.
4. Locate the downloaded certificate file and click on it to highlight it in the folder it is saved and click on open.
5. After clicking on open, input the password you set for the certificate file created at step 5 of  Adding Personal Certificate above.
6. This should import the certificate into the keychain.

Note: It is important to Run CertAid and select "Update my identity provider settings" if you use above steps to import your MIT personal certificate into keychain.

Change Firefox to "Ask Every Time" for the Preferred Certificate

1. In the address bar, navigate to about:config
2. Press "Accept the risk and continue"
3. Search for the preference named "security.default_personal_cert"
4. Select the pencil icon to edit its value and change it from "Select Automatically" to "Ask Every Time"

See Also

• Certificates Landing Page
• Firefox Landing Page

Have Questions or Still Need Help?

• Contact the IS&T Service Desk