Installing and Renewing Certificates in Internet Explorer 7 and 8 for Windows XP

This page will guide you through installing MIT certificates in Internet Explorer 7 and 8 on Windows XP.

NOTE: Internet Explorer 8 is not yet supported by IS&T.

Run the Certificate Tool for Internet Explorer

NOTE: If you have previously obtained an MIT personal certificate, as well as installed the MIT Certificate Authority, in Internet Explorer on this computer, you may be able to skip this step. If you're unsure, it's best to run the tool.

The Certificate Installer Tool installs the MIT Certification Authority (MIT CA) and the MIT Client Certificate.

1. Download the Certificate Installer Tool for Internet Explorer.
   
   
2. When prompted to Run or Save the Certificate Tool, select Run.
   
   
   
3. When prompted about an Unknown Publisher, select Run.
   
   
   
4. In the Welcome window, click Next.
   
   
   
5. In the Ready to Install window, click Install.
   
   
   
6. In the Installation Complete window, click Finish.
   
   
   
7. A message is displayed stating that you may need to restart your system to get the personal certificate. Click Okay.
   
   
   
8. Restart the machine.
   
   

Install the MIT Personal Certificate.

1. Navigate, in Internet Explorer, to http://ca.mit.edu.
   
   
   
2. Enter your MIT identification information and click Next.
   
   
3. Click Next. A warning will appear.
   
   
   
4. Click Yes. The dialog box for creating an exchange key (or browser password) will appear.
   
   Steps 11-13 are recommended, but optional.
   
   
   
5. IS&T recommends changing the default security level from Medium to High. Click Set Security Level. The Security Level dialog box will appear.
   
   
   
6. Click the radio button for High, then click Next. The dialog box to create a browser password will appear.
   
   
   
7. Enter and confirm your password, then click Finish. You will be returned to the initial exchange key box.
   
   Note: Do not make this the same as your Kerberos password. This password is for your MIT certificates on this particular IE7 browser. When you go to a secure web page requiring your MIT certificate, you will be prompted to enter this password.
   
   
8. In the exchange key box, click OK. A warning will appear.
   
   
   
9. Click Yes. The MIT page confirming installation of your new personal certificate should be displayed.

Delete Expired Certificates

1. In Internet Explorer, go to Tools > Internet Options. The following window will appear.
   
   
   
2. Click Content to access the Content tab.
   
   
   
3. Click Certificates. The Certificates window will appear.
   
   
   
4. Select any extra or expired certificates and click Remove. A warning will appear.
   
   
   
5. Click Yes, and confirm that you have one, non-expired certificate.