Generate your client certificate

After your CertCentral administrator implements two-factor authentication or resets your client certificate, you must generate a client certificate the next time you sign in to your account.

To generate your client certificate, use Internet Explorer (IE).

In version 69, Firefox stopped supporting browser-related certificate generation. If you need to use Firefox to generate your client certificate, do one of the tasks below to use Firefox for signing in to CertCentral:

• Use Internet Explorer to generate your client certificate. Then install the certificate in the Firefox store. See Managing Your Client Certificate.
• Use Firefox 68 or older versions to generate your client certificate.
• Use Firefox ESR or a portable copy of Firefox to generate your client certificate. See Keygen support to be dropped with Firefox 69.

Each time you sign in to CertCentral, use your client certificate to complete the two-factor authentication to sign in process.

Internet Explorer installs client certificates in the Windows Certificate Store. Chrome, Microsoft Edge, and Internet Explorer can access and use these client certificates. To use a client certificate with Firefox, you need to export a copy from the Windows Store. Then install it in Firefox.

Firefox installs client certificates in the Firefox certificate store. Only Firefox can access these certificates. To use the client certificate with Chrome, Safari, Microsoft Edge, or Internet Explorer, you need to export a copy from the Firefox certificate store. Then install the client certificate in the operating system's certificate store.

For more information see Managing Your Client Certificate.

Immediately contact your CertCentral account administrator so they can reset your client certificate. Then sign in to your CertCentral account and generate a new client certificate.