Access Keys:
Skip to content (Access Key - 0)

Installing Root and Personal Certificates on iOS

On this page:

*You CANNOT install certificates on the mobile device without creating a passcode for it. This feature cannot be changed as it is an iOS design configuration setup by Apple, not MIT. If you prefer to keep your phone unlocked, please do not attempt to install certificates on the device.

*It is HIGHLY RECOMMENDED that you set a passcode for your device before you proceed with certificate installation. Failure to do so may cause complications with installing the certificates.

*If you currently have a personal certificate on your iOS device and wish to renew your personal certificate you must first remove your old personal certificate. Please follow these instructions on how to Deleting Personal Certificates from an iOS device before continuing.

Information about which websites have been tested to work with MIT personal certificates

Installing the MIT Root Certificate

Note: The MIT Root Certificate does not need to be renewed every year. If you are looking to renew your MIT Personal Certificate you may skip this section.

  1. Open Safari and go to MIT's Certificates page
  2. On the Mobile Certificates Page select the first link Obtain the MIT Root CA.
    Mobile Certificates Select page 

  3. On the Install Profile screen select Install.
    Install profiles screen 

  4. Enter the passcode you set for your device.
    enter passcode prompt 

    The next screen may display a warning that the Certificate Authority will add the certificate to the list of trusted certificates on your device. This should not affect any of your personal settings. To continue, select Install at the top right to proceed.

  5. The MIT Root CA should now be installed.
    Profile Installed screen 

  6. Click Done.

Installing your Personal MIT Certificate.

  1. Open Safari and go to MIT's Certificates page ].
  2. Select Obtain Your Personal Certificate.
    Mobile Certificates Select page 

  3. You will be prompted to enter in your Kerberos ID, and password. Once you have done so, click Get Certificate

4. With the new version of certificates, you will then be prompted for Duo Verification. 


5. On the following page you will be given a random 4-digit validation number. It is very important to remember this number as it will be required in the following steps to verify your certificates (Do not confuse it with your passcode). Write it down and click Continue

validation password 

  1. From the Install Profile screen click Install.
    Install profile screen 

  2. Type in your device passcode. If you have not setup a passcode your iOS device, you will be prompted to create one at this step.
    enter passcode prompt 
    Creating a passcode is an important part of protecting your data. Each time your turn on or wake up your device, it will ask for a passcode before you can use the device. If your device supports Touch ID, you can use your fingerprint instead of a passcode. 

  3. Next, you will now be asked for the 4-digit random number that was generated in step 4. Type this number in and click Next.
    enter password screen 

  4. Your personal certificate should now be installed. Click Done.
    profile installed screen 
    Your personal certificate my be listed as "Not Verified". This is expected, and will not impact the functionality of the certificate.
    Not all MIT certificate protected websites support iOS devices. Please contact the website owner/creator with specific compatibility issues or questions.

IS&T Contributions

Documentation and information provided by IS&T staff members

Last Modified:

January 03, 2019

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
c-ipad c-ipad Delete
certificates certificates Delete
ios ios Delete
ios9 ios9 Delete
ios10 ios10 Delete
ios11 ios11 Delete
ios12 ios12 Delete
iphone iphone Delete
duo duo Delete
2fa 2fa Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
This product/service is:
Easy to use
Difficult to use

This article is:
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki