Certificates Landing Page

On this page:

Overview

Certain web applications at MIT require authentication using a personal certificate rather than Touchstone. Install a personal certificate in each web browser you use to access a site requiring certificate authentication. Personal certificates expire every year on July 30.

Get Certificates

If you have not changed your password in the past year, you will need to do so before you can get certificates. Certaid will give you an error saying you're not logged in if you need to update your password. If your Windows computer is on the MIT domain and you are not on campus, please see: Remote Domain Computers and Password Changes.

Android

• Installing Certificates on Android

iOS

• Installing Root and Personal Certificates on iOS

Using CertAid (Windows and Mac)

IS&T strongly recommends using CertAid to configure your certificates for Chrome, Safari, and Firefox 90 and above. CertAid manages the entire certificate setup procedure, giving you a more reliable installation experience. The setup procedure includes installing the MIT CA (Certificate Authority) as well as your personal certificate, optionally deleting old certificates, and setting the correct identity preferences via a single, graphical application.

CertAid does not run on mobile devices (i.e., iOS and Android devices)

• Change your password
• Reset forgotten password
• Install/Renew Certificates with CertAid

Windows

• Edge, Chrome, and Firefox 90+: CertAid 2.2.6 for Windows

  Microsoft Edge needs to at least be installed on the Windows machine in order to fully run.

MacOS X

• Safari, Chrome, and Firefox 90+: CertAid 2.2.6 for MacOS

Other

• Manually Install and Delete MIT Personal Certificate in Firefox- For both Windows and MacOS

Deleting Old Certificates

IS&T Strongly Recommends Deleting Your Old/Expired Certificates Old certificates can confuse browsers and web-sites causing them to fail to authenticate you properly with your active certificates. The easiest way is to use Certaid (see above).

If you need to retain access to old user certificates, e.g., for access to encrypted mail, you should export them from your browser and save them for use with your legacy items.

• Delete MIT Personal Certificates in Chrome for Windows
• Delete MIT Personal Certificates for Safari or Chrome on Mac OS X
• Manually Delete MIT Personal Certificates in Firefox

Troubleshooting

• Test Your Certificate
• Certificate Not Valid Error - Certificate Test Fails
• "A client certificate was invalid or not provided." - Mac error message
• What to do if a browser or App is prompting for a password after updating my certificate?

For More Information

• What is an MIT personal web certificate?
• What is stored in an MIT Personal Certificate?
• MIT Sites That Require Certificate Authentication

Still Need Help?

Send contact the IS&T Service Desk or call us at 617 253-1101.