Access Keys:
Skip to content (Access Key - 0)

Install and Delete MIT Personal Certificate in Firefox

On this page:

Firefox 90 and Above

There are no extra steps beyond using CertAid. Starting with version 90, Firefox automatically finds and offers to use client authentication certificates provided by the operating system on macOS and Windows.

Firefox 89 and Below

Adding personal certificate 

  1. Navigate to
  2. Enter your Kerberos username and password, click Next.
    Result: You will be prompted to authenticate with Duo.

  3. Authenticate with Duo Authentication.
    Result: You will be brought to a page to generate a certificate for download.

  4. Input a one-time import password in order to download your personal certificate, click Next.
    Result: You will be prompted to save your certificate to a location of your choice.
This does not change your kerberos password. It is only a password for your file and not your account.

  1. Save your personal certificate file to a suitable location.
    Result: Your personal certificate will be saved to that location.

  2. From the Menu icon, click on Options (Windows) or Preferences (macOS). Search for "certificates", click on View Certificates.
    Result: The Settings window will open, and then the Certificate Manager will open.

  3. From the Certificate Manager, click on the Your Certificates tab, click on Import.
    Result: You will be brought to a window to select where your certificate will be saved.

  4. Navigate to the location of your downloaded personal certificate, click on Open.
    Result: You will be prompted to enter a one-time password.

  5. Input the one-time password from step 3, click on Ok.
    Result: You should now see your personal certificate listed.

Removing personal certificate

  1. From the Menu icon, click on Options (Windows) or Preferences (macOS)
  2. Search for "certificates", click on View Certificates
  3. From the Certificate Manager, click on the Your Certificates tab for Personal Certificates and Authorities for CA
  4. Navigate to the certificate, click on Delete

Mac OS extra: Importing Your Firefox Certificate Certificate into keychain access.  

Before trying the follow steps, please create the certificate file using the steps in Adding Personal Certificate above.

  1. Open keychain access.
  2. Click on login for the keychain we are using.
  3. At the top click on file and select import items.
  4. Locate the downloaded certificate file and click on it to highlight it in the folder it is saved and click on open.
  5. After clicking on open, input the password you set for the certificate file created at step 5 of  Adding Personal Certificate above.
  6. This should import the certificate into the keychain.
Note: It is important to Run CertAid and select "Update my identity provider settings" if you use above steps to import your MIT personal certificate into keychain.

Change Firefox to "Ask Every Time" for the Preferred Certificate

  1. In the address bar, navigate to about:config
  2. Press "Accept the risk and continue"
  3. Search for the preference named "security.default_personal_cert"
  4. Select the pencil icon to edit its value and change it from "Select Automatically" to "Ask Every Time"

See Also

Have Questions or Still Need Help?

IS&T Contributions

Documentation and information provided by IS&T staff members

Last Modified:

June 30, 2022

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
firefox firefox Delete
personal personal Delete
certificate certificate Delete
install install Delete
c-firefox-certs c-firefox-certs Delete
69 69 Delete
manual manual Delete
delete delete Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
This product/service is:
Easy to use
Difficult to use

This article is:
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki