# Renewal of MTLS certificate
source: https://developer.mastercard.com/cross-border-services/documentation/api-basics/oauth2-mtls-cert-renewal/index.md

The Key Management Portal (KMP) is an application available in [Mastercard Connect](https://mastercardconnect.com) as a self-service portal for Mastercard customers, which allows them to request and exchange keys and certificates with Mastercard.
You may initiate certificate renewal process in KMP before the certificate expires.

#### Step 1: Obtain access to KMP: {#step-1-obtain-access-to-kmp}

* Sign in to [Mastercard Connect](https://mastercardconnect.com).
* Click Store in the top menu.

<!-- -->

* Search for Key Management Portal. You can also select Administration under Business capabilities to narrow down the results. ![kmp-tile](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_01.png)

<!-- -->

* On the Key Management Portal card, select Request.
* Select Security Officer Level 1 access.
* Click Request access.

Note: To access KMP, you must be signed up to [Mastercard Connect](https://mastercardconnect.com). Please contact your Mastercard representative to get help with Mastercard Connect Signup.

#### Step 2: Login to the Key Management Portal {#step-2-login-to-the-key-management-portal}

1. Sign in to [Mastercard Connect](https://mastercardconnect.com).
2. Click My Items. ![kmp-sign-in](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_02.png)
3. Click on the Key Management Portal card to Open it.

#### Step 3: Locate the certificate requiring renewal {#step-3-locate-the-certificate-requiring-renewal}

1. Find the certificate of interest in the Certificates Inventory. ![Certificates-Inventory](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_06.png)
2. Open the certificate by clicking the Reference link. ![open-certificate](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_07.png)
3. On the Certificate Details screen, select Actions \> Renew Certificate. ![renew-certificate](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_09.png)

#### Step 4: Initiate Certificate Renewal {#step-4-initiate-certificate-renewal}

1. The request form appears already prepopulated with information contained in the expiring certificate record in KMP ![pre-populated-form](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_39.png)
2. Upload your CSR file generated in compliance with the DN requirements which can be found in the Support Page
3. Click Next
4. Review the CSR values to ensure they match the Expiring Certificate DN Details and adhere to the DN Requirements.
5. Enter Subject Alternate Names (SAN) if necessary (domain names need to be comma-separated)
6. Click Submit
1. Enter the Expiring Certificate Serial Number
2. The Expiring Certificate DN and the DN Requirements appear ![dn-requirements](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_37.png)
3. Upload your CSR file generated in compliance with the DN requirements which can be found in the Support Page
4. Click Next
5. Review the CSR values to ensure they match the DN Requirements. ![review-csr](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_38.png)
6. Enter Subject Alternate Names (SAN) if necessary (domain names need to be comma-separated)
7. Click Submit
Note: Note: If you are viewing a certificate which has been renewed in the portal, you will not be able to download it. KMP allows you to download only the latest version of a given certificate. To find the latest version of the certificate you're viewing, click the Renewed By link to open the next version. ![find-latest-version-of-cert](https://static.developer.mastercard.com/content/cross-border-services/documentation/images/kmp_10.png)