Access Keys:
Skip to content (Access Key - 0)

Install and Delete MIT Personal Certificate in Firefox

On this page:

Overview

Unlike other browsers Firefox is unable to utilize certificates installed by CertAid.

Above version 70

Adding personal certificate 
  1. Navigate to https://ca.mit.edu/ca/
  2. Enter your Kerberos username and password, click Next.
    Result: You will be prompted to authenticate with Duo.

  3. Authenticate with Duo Authentication.
    Result: You will be brought to a page to generate a certificate for download.


  4. Input a one-time import password in order to download your personal certificate, click Next.
    Result: You will be prompted to save your certificate to a location of your choice.
This does not change your kerberos password. It is only a password for your file and not your account.




  1. Save your personal certificate file to a suitable location.
    Result: Your personal certificate will be saved to that location.


  2. From the Menu icon, click on Options (Windows) or Preferences (macOS). Search for "certificates", click on View Certificates.
    Result: The Settings window will open, and then the Certificate Manager will open.




  3. From the Certificate Manager, click on the Your Certificates tab, click on Import.
    Result: You will be brought to a window to select where your certificate will be saved.


  4. Navigate to the location of your downloaded personal certificate, click on Open.
    Result: You will be prompted to enter a one-time password.


  5. Input the one-time password from step 3, click on Ok.
    Result: You should now see your personal certificate listed.

Removing personal certificate
  1. From the Menu icon, click on Options (Windows) or Preferences (macOS)
  2. Search for "certificates", click on View Certificates
  3. From the Certificate Manager, click on the Your Certificates tab for Personal Certificates and Authorities for CA
  4. Navigate to the certificate, click on Delete

Below Version 70

Adding personal certificate
  1. Navigate to https://ca.mit.edu/ca/.
    Result: You will be prompted to enter your Kerberos username and password.


  2. Enter your Kerberos username and password, click Next.
    Result: You will be prompted to authenticate with Duo.

  3. Authenticate with Duo Authentication.
    Result: You will be brought to a page to generate a private key.

  4. Leave default options for Key Size and Certificate Life, click on Next.
    Result: You will receive an alert stating your certificate has been installed.

  • Note: It is not necessary to backup your personal certificate. If you do wish to backup your personal certificates locally, from the menu bar go to Preferences/Options > Advanced > View Certificates, click Backup All, and follow the instructions.
Removing personal certificate
  1. From the Menu icon, click on Preferences/Options
  2. Search for "certificates", click on View Certificates
  3. From the Certificate Manager, click on the Your Certificates tab for Personal Certificates and Authorities for CA
  4. Navigate to the certificate, click on Delete

After you're done installing (and possibly deleting) your personal certificate, please follow the directions in Install the MIT CA (Certificate Authority) in Firefox to install a CA for Firefox as well. While a personal certificate verifies you are who you say you are to web servers, a CA is required to verify the authenticity of web servers to your browser. Both are important for secure connections.

Mac OS extra: Importing Your Firefox Certificate Certificate into keychain access.  

Before trying the follow steps, please create the certificate file using the steps in Adding Personal Certificate above.

  1. Open keychain access.
  2. Click on login for the keychain we are using.
  3. At the top click on file and select import items.
  4. Locate the downloaded certificate file and click on it to highlight it in the folder it is saved and click on open.
  5. After clicking on open, input the password you set for the certificate file created at step 5 of  Adding Personal Certificate above.
  6. This should import the certificate into the keychain.
Note: It is important to Run CertAid and select "Update my identity provider settings" if you use above steps to import your MIT personal certificate into keychain.

See Also

Have Questions or Still Need Help?

Updated kb: Install and Delete MIT Personal Certificate in Firefoxhttp://kb.mit.edu/confluence/x/ShhS

Added section on importing Firefox generated certificates into chain manually. 
@here 

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

July 26, 2021

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
firefox firefox Delete
personal personal Delete
certificate certificate Delete
install install Delete
c-firefox-certs c-firefox-certs Delete
69 69 Delete
manual manual Delete
delete delete Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki