Applying and Installing the Mpesa Digital Certificate

Rai Omido

The live M-PESA website is certificate-based. This means that to be able to access it, you are required to have an M-PESA digital certificate installed on your computer.

# Applying for the certificate

To apply for an M-PESA digital certificate, you first of all need to send a blank email to M-PESACertpassword@safaricom.co.ke. In a few minutes time, you will receive an automated response with a linkusername, and password to the certificate request website.

Apparently, apart from requiring you to use Internet Explorer on Windows, it turns out that the certificate issuing website cannot work in the later versions of Internet Explorer. It only works in IE 7. So, if you're lucky enough to be working on a Windows machine, but don't have IE 7, you'll need to do some tweaking to your current version of IE in order to get the website to work properly.

What I mean is, during the certificate application and installation process, if you try to visit the website, it will ask you to provide your authentication credentials and will open gracefully. However, when you try to initiate a new Certificate request by providing the required details, you might get an error saying "This page has not finished loading yet. Please wait a few seconds and try again.". This might also be the case if you try to use any other browser besides Internet Explorer. If this is the case for you, you can try the following solution.

Open Internet Explorer and try the following;

  1. Add the certificate request website to trusted sites.
    • Go to Tools > Internet Options Security Trusted Sites > Sites Add this website to the zone > Add
  2. Enable these scripting options
    • Go to Tools > Internet Options > Security > Custom Level Scripting
      • Active scripting - Enable
      • Allow websites to prompt for information using scripted windows - Enable
  3. Emulate IE 7 in your version of IE
    • Got to Tools > F12 Developer Tools > Emulation 
      • Document mode - 7
      • User agent string - Internet Explorer 7
    • Each time you close the developer tools, you have to repeat the last step (3).
    • This step is only necessary when requesting and installing a new certificate.

If this method worked, you should now be able to see a prompt asking you to allow the website to perform a digital certificate installation operation on your behalf. Click yes and proceed to provide and submit your details appropriately.

Once you successfully apply for the certificate, you have to keep coming back to the certificate issuing website to confirm that the certificate has been issued, as they do not notify you when they issue it. The next time you come back to the website, you do not need to request a new certificate again. You can check the status of your last application by clicking on View the status of a pending certificate request.

# Installing the Certificate

Once you have your certificate issued, you can follow the following simple steps to install the certificate.

Login to the certificate authority website if you haven't done that yet, at https://vmtke.ca.vodafone.com/certsrv

Click on "View the status of a pending certificate request"

Rai Omido view status of Mpesa Digital Certificate

If the certificate has been issued, you will see a window as shown below. Click on the option “Install this certificate

Mpesa Digital Certificate issued

A Web Access confirmation prompt will appear asking you to confirm the operation. Click on "Yes"

  • You will be prompted to open or save the file. Choose "open".
  • Once open, select "install certificate"
  • A certificate import wizard will pop up, click Next.
  • Click "Place all certificates in the following store" 
  • Select "Trusted Root Certification Authorities"
  • Click on "next"
  • Click on "finish"
  • You will see a prompt asking you to confirm the certificate installation. Select "Yes"

At the point, the certificate has not been installed yet. We only imported it. The final step is to install it.

Go back to the certificate authority website, and click on "Install this certificate". You will be directed to a page that confirms certificate installation.

Now you are ready to access the M-PESA business administrator portal. You can access it either in Google Chrome, Internet Explorer or the new Microsoft Edge, using the following link; https://org.ke.m-pesa.com/.

Rai Omido Mpesa G2 Portal