CertAid 2.2.6 for Windows
On this page:
Using CertAid for Windows to Install Certificates on Windows
|
- If you have not already done so, download and install CertAid for Windows. Note: it is recommended to create a start menu shortcut when prompted by the installer. Skipping this step can result in accidentally running the installer again, instead of CertAid itself.
- Launch the CertAid for Windows application from Start > Programs.
(If you have just installed the program, the installer will launch it for you.)
- If your Windows user account has administrator privileges, you will be given the option to change settings for all users on the system (this does not affect personal certificates). Most users should accept the default option and click Next.
Result: The Welcome to CertAid screen is displayed.
- Select Request or renew an MIT certificate and click Continue.
Result: The Verify Your Identity screen is displayed.
- Enter your MIT Kerberos username and password, and two-factor (Duo) authentication choice, and click Continue.
Result: If you used the "Duo Push," "SMS Passcode" or "Call Me" option, you will receive a push notification or call. If you used a Duo or Yubikey passcode, proceed to step 5.
- Complete your Duo two-factor authentication by accepting the push or entering the code you're given by SMS or phone call.
Result: The Request Certificate screen is displayed. You may also see a security warning about the MIT Certificate Authority. Click *Yes* to continue.
- Enter a Certificate Life, or leave the default value (the maximum certificate life), and click Continue.
Note: Most users should accept the default value.
Result: The Install Your Certificates screen is displayed.
- The Install Your Certificates window displays the progress of installing the MIT Certificate Authority and your personal certificate. Once these steps are completed, click Finish.
- If CertAid finds one or more existing certificates, it will display the following dialog box asking to delete them.
If you have used S/MIME for email encryption, do not delete your certificates. Click No.
For more information, see Should I Delete My Old or Expired Personal Certificate?. - Click Yes to delete older certificates.
Using CertAid to Configure Internet Options without installing Personal Certificates
- Follow the steps above to install and launch CertAid for Windows.
- If your Windows user account has administrator privileges, you will be given the option to change settings for all users on the system. Most users should accept the default option and click Next.
Result: The Welcome to CertAid screen is displayed.
- Select Configure Internet Options and click Next. This option does not affect personal certificates.
Result: The Install Your Certificates screen is displayed.
- The Setup Certificates window displays the progress of installing the MIT Certificate Authority, the Client CA, Trusted domains, etc. Once these steps are completed, click Finish.
The "Personal Certificate" section will be grayed out since it is not used in this mode. - If you get the dialog box shown below, click Yes.
If CertAid finds one or more existing certificates, it will display the following dialog box asking to delete them.
If you have used S/MIME for email encryption, do not delete your certificates. Click No.
For more information, see Q: Should I Delete My Old or Expired Personal Certificate?. - Click Yes to delete older certificates.
1 Comment
comments.show.hideApr 13, 2020
Susan Riley Hart
Rather than just mentioning that this doesn't work for Microsoft Edge, please list the browsers for which it does work. And does it work for Firefox? (The earlier version didn't.) Thanks!