This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Add in Enterprise CA

  • 5 replies
  • 1 has this problem
  • 1 view
  • Last reply by mmai

mmai
mmai
more options

Is it possible to add in an Enterprise CA certificate chain to a FF installer for distribution? I have manually added an Enterprise CA chain to FFv60 via Options > Privacy & Security > View Certificates > Import. However, I would like to push this modification out to all Enterprise workstations.

Any assistance you can provide is appreciated.

Is it possible to add in an Enterprise CA certificate chain to a FF installer for distribution? I have manually added an Enterprise CA chain to FFv60 via Options > Privacy & Security > View Certificates > Import. However, I would like to push this modification out to all Enterprise workstations. Any assistance you can provide is appreciated.

Chosen solution

If you're using group policy, we have a policy for it. Otherwise, you can set the preference:

security.enterprise_roots.enabled

to true.

See:

https://mike.kaply.com/2016/09/01/upcoming-changes-to-root-certificates-in-firefox-on-windows/

Read this answer in context 👍 0

All Replies (5)

Mike Kaply
Mike Kaply
  • Moderator
more options

What platform are you on? There is no mechanism to push out a cert yet, but on Windows, you can have it use the operating system certs.

mmai
mmai Question owner
more options

In a Windows environment.

Do you happen to have the steps/process for enabling FireFox to pull directly from system certs?

Mike Kaply
Mike Kaply
  • Moderator
more options

Chosen Solution

If you're using group policy, we have a policy for it. Otherwise, you can set the preference:

security.enterprise_roots.enabled

to true.

See:

https://mike.kaply.com/2016/09/01/upcoming-changes-to-root-certificates-in-firefox-on-windows/

Mike Kaply
Mike Kaply
  • Moderator
more options

Did security.enterprise_roots.enabled work for you?

mmai
mmai Question owner
more options

Yes it did thank you so much!