Generate your client certificate

To generate your client certificate, you need to use Microsoft Internet Explorer.

In version 69, Firefox stopped supporting browser-related certificate generation. If you need to use Firefox to generate your client certificate, do one of the tasks below:

• Use Internet Explorer to generate your client certificate. Then, install the certificate in the Firefox store. See Managing Your Client Certificate.
• Use Firefox 68 or older versions to generate your client certificate.
• Use Firefox ESR or a portable copy of Firefox to generate your client certificate. See Keygen support to be dropped with Firefox 69.

By default, Microsoft Edge browser does not support key generation. You can configure it to use IE-mode though, which allows you to generate keys.

For more information on enabling IE-mode for Edge, see https://docs.microsoft.com/en-us/deployedge/edge-ie-mode.

Internet Explorer installs client certificates in the Windows Certificate Store. Chrome, Microsoft Edge, and Internet Explorer can access and use these client certificates. To use a client certificate with Firefox, you need to export a copy from the Windows Store. Then, install it in Firefox.

Firefox installs client certificates in the Firefox certificate store. Only Firefox can access these certificates. To use the client certificate with Chrome, Safari, Microsoft Edge, or Internet Explorer, you need to export a copy from the Firefox certificate store. Then, install the client certificate in the operating system's certificate store.

For more information see Managing Your Client Certificate.