Certificates for Mac Users

An optional way to renew your MIT Personal Certificates on the Mac using Firefox

  1. Open https://ca.mit.edu/ca/ in your Firefox browser
  2. Enter your Kerberos username and password and click Next

identify

  1. If your Kerberos password has not been changed in the last calendar year you must Change your Kerberos Password

    Your Mac's password will not be automatically updated

  2. DUO second-factor authentication is required

duo

  1. Accept the default "Certificate Life" and enter your Kerberos password twice

generate

  1. Click Next
  2. Save your username-cert.p12 file (this is your MIT Personal certificate) to your computer's Downloads folder
  3. Launch Keychain Access from your Mac's /Applications/Utilities folder

keychain

  1. Male sure the login keychain is selected in the left hand side of the Keychain Access window
  2. Select Import Items… from the File menu

import

  1. Find the username-cert.p12 file in your Mac's Downloads folder and click Open
  2. Enter your Kerberos password and click OK

password

  1. You can test your new MIT Personal Certificate in any browser
  2. Select your certificate from the User Identification Request window and click OK/Continue

test

  1. If prompted to sign in using your "privateKey" enter your Mac's password and click Always Allow

private