CalMHSA Learn (LMS System)
Help Desk Ticket (Admin)
EHR Bulletin

MENU

IdenTrust Certificate Expiring Notification

All IdenTrust certificates expire after 2 years and need to be renewed. The IdenTrust system automatically sends renewal notifications by email at 90, 60, 30, 14, 7, and 1-day intervals before your certificate expires.

The email message will look similar to the below image. 

When this email is received, the county will need to contact CalMHSA to request a renewal voucher.  This voucher will allow you to start the process of renewing your voucher.

Important Notes:

  1. IdenTrust strongly recommends you do this procedure from the computer you installed the original active certificate or it is recommended you have a backup copy of it ready during the renewal process. If you don’t have it, you will need to access the IdenTrust portal to regenerate the current active certificate.  You may want to contact IdenTrust for assistance with this process.  

Steps to Complete After Receiving IdenTrust Certificate Expiration Notice:

  1. Contact your county letting them know you have received an expiration notice.
  2. The county needs to contact CalMHSA to request a renewal voucher from Streamline.
  3. CalMHSA will request voucher from Streamline and then send the renewal voucher to your county once we receive it.
  4. The county will give the renewal voucher to you and follow the steps below.

Access the Certificate Management Center (CMC)

You can access the CMC using your (1) active certificate or your (2) account number and password. https://secure.identrust.com/tscmcapp/ You will know you are on the computer with the current active certificate because it will prompt you to choose it at login.  If it doesn’t, then you aren’t on the correct computer.  If you no longer have access to that computer or the certificate, you will need to access the CMC to regenerate it and start the process over.
  1. Renew your certificate with the current active certificate:
    1. To renew a certificate the account holder will need to log into their account using the current active certificate. Then there will be a button that says “Renew” the account holder can  click to start the renewal application.
    2. When logging into the Certificate Management Center (CMC) you should see a pop up of your name. Double click your name to select it.
      • On Windows computers the pop up will be titled, “Credentials Request”. It is asking for the certificate password you set when installing your certificate.
        • Double click your name or click you name and click the “OK button” to select it.
        • If there are multiple certificates on the list, click the certificate with your name that is highest on the list.
    1. On Apple computers the password is the Keychain Access password. The Keychain Access Password is typically the same password used for logging into the computer.
      • Each time you enter the Keychain Access, select “Always allow”. This password will be requested multiple times but selecting “Always allow” will lessen the amount of requests.
  1. Renew your certificate when you don’t have the current active certificate:
    1. Because you don’t have access to your current, active certificate, you will be required to regenerate your current certificate.  You will need to access the CMC with your account number and password to regenerate this certificate and install it in your browser.  Once done, you can start over to renew your certificate.

How to Login to CMC Using Your Certificate:

  1. Login to the CMC: https://secure.identrust.com/tscmcapp/
  2. There will be a pop-up requesting that you to select a certificate.
  3. Click the “ok” button.
  4. Enter the certificate password.
  5. The browser may request the certificate password.
    • It sometimes pops up behind whatever windows you may currently have open.
    • Minimize windows to look for the credential’s request and put in your certificate password.
  6. Finally you will enter the CMC. If you are within 30 days of your expiration date, a blue “Renew” button will be visible
  7. Start your renewal application.
  8. Locate the label “For this Certificate, Would You Like to:”.
  9. Select “Renew Your Certificate” from the drop-down menu.
  10. Click “Continue” and follow the on-screen instructions.

IdenTrust Contact Info

If you have trouble during the IdenTrust portion of the renewal process, especially if you don’t have your current IdenTrust certificate, contact IdenTrust tech support for assistance.

IdenTrust Tech Support:  1-888-248-4447

  • Last Updated: March 25, 2025