You are here: Foswiki>TIG Web>CertificatesIntro>CertificatesFirefox (revision 9)EditAttach

Getting Certificates Instructions - Mozilla Firefox

1. Install CSAIL Master CA
2. Install the CSAIL Client Certificate in Firefox.

Installing CSAIL Master Certificate Authority

First, install the CSAIL Master Certificate Authority, which allows your browser to trust secure CSAIL websites, by following this link: CSAIL Master CA Certificate
  • You should see the "Downloading Certificate" window pop-up. Check all three boxes shown and click on the "View" to verify the certificate.

  • You should check that this certificate is valid by clicking on the 'View' button. The certificate should have the correct fingerprints.
    • SHA1 (02:6A:27:D6:0C:97:11:A4:72:66:80:4B:09:38:9F:2D:3D:99:4D:DF)
    • MD5 (13:81:2D:FA:34:41:CC:CA:BF:D1:85:91:91:63:CE:A7)

Obtaining CSAIL Client Certificate for your Browser

Instructions below tell you how to obtain a client certificate for your browser. A client certificate proves who you are to secure CSAIL websites.
  • Prepare your browser to securely store the certificate. (This process sets a password Firefox will use to encrypt your certificate, which is important in case somebody — perhaps due to incorrect permissions on your home directory, or physical access to a backup tape — gets access to your Firefox profile directory. If you think you’ve already set a password, you should still go through this process to make sure.)
    1. Open Firefox Preferences (GNU/Linux: Edit->Preferences. Mac: Firefox->Preferences. Windows: Firefox->Options->Options)
    2. Click on the "Advanced" tab and select one of the operating systems below for instruction on how to get to "Security Devices."
    3. Select "Software Security Device", then click Change Password.
    4. If "Current password" is "(not set)", enter a password that will protect your client certificates. (If there is a current password you wish to keep, hit "Cancel"; if you don't know the password, see bottom section.)
    5. Click "OK" twice to get back to the Encryption tab of Options->Advanced.
    6. Under Certificates, choose "Select one automatically"
  • Follow this link to the certificate request page and log on to your Kerberos account when prompted. Do not let Firefox save your Kerberos password if it asks you to!
  • Make sure you read the directions on that page. Since they are pretty long on that page, here they are summarized for the hurried:
    1. From the drop-down menu on that page, select the longest key length available.
    2. Click the submit button, then enter the password you just chose above.
    3. After a short pause, you should see "Your personal certificate has been installed." (Standard certificate usage for web authentication does not require backing them up.)


Troubleshooting

If you are experiencing strange issues, this could be caused by old or corrupt certificates. Please delete your CSAIL Client and Master Certificate Authority in order to redo the certificate install process. To begin, start Firefox and go to "Preferences" -> "Advanced" -> "Certificates" ("Encryption" on Mac and GNU/Linux on Firefox 22 and below) -> "View Certificates." Under the "Your Certificates" tab, highlight your MIT CSAIL Client Certificate and press the delete button in the menu below to delete it. Then, select the "Authorities" tab in the same Certificate Manager and locate the CSAIL Master Certificate Authority. Select the item and press the "Delete or Distrust..." button in the menu below.

Here are picture tutorials for Windows 7, Mac, and GNU/Linux:

Resetting the "software security device" password

  • If you've forgotten/misplaced the master password that guards your certificates, Firefox offers a way to reset that password. Use this as a last resort, as all information the password protects will be lost after it's reset.
  • Copy and paste this URL into your Address Bar: chrome://pippki/content/resetpassword.xul
Topic attachments
I Attachment Action Size Date Who Comment
Auto_Select.PNGPNG Auto_Select.PNG manage 24.0 K 05 Aug 2013 - 22:08 FrankZhou  
Certificate_Viewer.PNGPNG Certificate_Viewer.PNG manage 51.8 K 05 Aug 2013 - 17:51 FrankZhou  
Delete_Client_Certificate_Linux.PNGPNG Delete_Client_Certificate_Linux.PNG manage 93.3 K 08 Aug 2013 - 17:15 FrankZhou  
Delete_Client_Certificate_Mac.PNGPNG Delete_Client_Certificate_Mac.PNG manage 211.5 K 08 Aug 2013 - 17:16 FrankZhou  
Delete_Client_Certificate_Windows.PNGPNG Delete_Client_Certificate_Windows.PNG manage 171.7 K 08 Aug 2013 - 17:16 FrankZhou  
Delete_Master_Certificate_Linux.PNGPNG Delete_Master_Certificate_Linux.PNG manage 133.5 K 08 Aug 2013 - 17:16 FrankZhou  
Delete_Master_Certificate_Mac.PNGPNG Delete_Master_Certificate_Mac.PNG manage 313.1 K 08 Aug 2013 - 17:16 FrankZhou  
Delete_Master_Certificate_Windows.PNGPNG Delete_Master_Certificate_Windows.PNG manage 174.6 K 08 Aug 2013 - 17:16 FrankZhou  
Downloading_Certificate.PNGPNG Downloading_Certificate.PNG manage 35.4 K 05 Aug 2013 - 17:37 FrankZhou  
Firefox_Advanced_Linux.PNGPNG Firefox_Advanced_Linux.PNG manage 53.2 K 05 Aug 2013 - 22:01 FrankZhou  
Firefox_Advanced_Mac.PNGPNG Firefox_Advanced_Mac.PNG manage 127.5 K 06 Aug 2013 - 15:40 FrankZhou  
Firefox_Advanced_Windows.PNGPNG Firefox_Advanced_Windows.PNG manage 28.6 K 05 Aug 2013 - 21:55 FrankZhou  
Firefox_Options.pngpng Firefox_Options.png manage 16.3 K 05 Aug 2013 - 21:27 FrankZhou  
Firefox_Options_Linux.PNGPNG Firefox_Options_Linux.PNG manage 70.6 K 05 Aug 2013 - 21:37 FrankZhou  
Firefox_Options_Mac.PNGPNG Firefox_Options_Mac.PNG manage 53.9 K 06 Aug 2013 - 15:27 FrankZhou  
Set_Password_Windows.PNGPNG Set_Password_Windows.PNG manage 43.7 K 05 Aug 2013 - 22:15 FrankZhou  
Submitting_Client_Cert_Request.PNGPNG Submitting_Client_Cert_Request.PNG manage 64.9 K 05 Aug 2013 - 21:45 FrankZhou  
Edit | Attach | Print version | History: r12 | r10 < r9 < r8 < r7 | Backlinks | View wiki text | Edit WikiText | More topic actions...
Topic revision: 20 Sep 2013, JaySekora
 

MIT Computer Science and Artificial Intelligence Laboratory

 

  • About CSAIL
  • Research
  • News + Events
  • Resources
  • People

This site is powered by Foswiki MIT: Massachusetts Institute of Technology