How to Update Certificate Chain for an Existing Smart Card IDP

Jan 20, 2026

Okta Classic Engine

Okta Identity Engine

Multi-Factor Authentication

Overview

This article outlines the steps needed to update a Smart Card IDP with a new certificate chain using the certificate chain builder.

Applies To

Updating an existing Smart Card IDP requires building a new certificate chain to replace one nearing expiration.
Multi-Factor Authentication (MFA)

Solution

Navigate to Security > Identity Providers.
The configuration settings are accessed by finding the IDP and choosing Actions > Configure Identity Provider.
Before clicking Reset certificate chain, make sure to click Edit at the top right.
Click Reset Certificate Chain.
Add each certificate in the chain using the Browse option.
Select all certificates and click Build Certificate Chain.
1. This should say "Certificate chain successfully built" and not result in any errors if the certificate chain is valid.
To save the changes, click "Update Identity Provider" at the bottom of the page to submit.