We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Funkcionalnosć toś togo sedła se pśez wótwardowańske źěła wobgranicujo, kótarež maju wašo dožywjenje pólěpšyś. Jolic nastawk waš problem njerozwězujo a cośo pšašanje stajiś, wobrośćo se na našo zgromoźeństwo pomocy, kótarež na to caka, wam na @FirefoxSupport na Twitter a /r/firefox na Reddit pomagaś.

Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

Unable to use client authentication certificates from Windows Certificate Store inside Firefox

  • 2 wótegronje
  • 5 ma toś ten problem
  • 3 naglědy
  • Slědne wótegrono wót pozdemar

pozdemar
pozdemar
more options

We are using Firefox as one of our corporate browsers. We are currently rolling out two factor authentication for mission critical web applications using managed PKI infrastructure. We have enrolled our employees for non-exportable client authentication certificates which are being stored in their internal Windows Certificate Storage.

We can now easily authenticate towards our corporate websites using Internet Explorer or Google Chrome. However, we did not manage to get Firefox to use the client authentication certificate from the Windows Certificate Storage. I understand that Firefox maintains its own certificate storage, but is there a way to configure Firefox to use the client authentication certificates stored in Windows Certificate Storage?

Thank you very much for any feedback including information that it is not possible by design.

We are using Firefox as one of our corporate browsers. We are currently rolling out two factor authentication for mission critical web applications using managed PKI infrastructure. We have enrolled our employees for non-exportable client authentication certificates which are being stored in their internal Windows Certificate Storage. We can now easily authenticate towards our corporate websites using Internet Explorer or Google Chrome. However, we did not manage to get Firefox to use the client authentication certificate from the Windows Certificate Storage. I understand that Firefox maintains its own certificate storage, but is there a way to configure Firefox to use the client authentication certificates stored in Windows Certificate Storage? Thank you very much for any feedback including information that it is not possible by design.

Wót pozdemar změnjony

Wšykne wótegrona (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Did you check this pref on the about:config page?

  • security.enterprise_roots.enabled

See also:

pozdemar
pozdemar Pšašaŕ
more options

cor-el said

Did you check this pref on the about:config page?
  • security.enterprise_roots.enabled
See also:

I have checked this option earlier, but unfortunately that does not solve our problem. security.enterprise_roots.enabled is settings which allows Firefox to trust certificate authorities from Windows Certificate Storage (folder Trusted Root Certification Authorities).

However, what we need is to configure Firefox to use client authentication certificates stored in folder Personal in Windows Certificate Storage during SSL handshake - unlike the previous case, those certs also include corresponding private keys. Thanks for any other suggestions.