Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Building Firefox MSI with Root CAs, ntlm settings, and Add-ons disabled

  • 4 replies
  • 2 have this problem
  • 1 view
  • Last reply by jr_admin

jr_admin
jr_admin
more options

I need to build a Firefox MSI that has one Root CA automatically installed, some NTLM settings configured, and Add-ons disabled by default with users unable to turn it back on. 

I know that Add-ons can be disabled with Firefox running in safe mode.  I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue.  Otherwise I know that I can create a config file for the NTLM settings.

However, I am very stumped with how I would configure the Root CA to automatically be a trusted root. I am going to try monitoring while I add change all of these settings, but I am concerned that the package that I build will not be complete.

I am completely stumped about how to turn off Add-ons. If it is an about:config setting, is there a way to lock down about:config?

Thank you very much for the help guys, I'm always impressed at the level of intelligence found throughout the Mozilla forums.

I need to build a Firefox MSI that has one Root CA automatically installed, some NTLM settings configured, and Add-ons disabled by default with users unable to turn it back on. I know that Add-ons can be disabled with Firefox running in safe mode. I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue. Otherwise I know that I can create a config file for the NTLM settings. However, I am very stumped with how I would configure the Root CA to automatically be a trusted root. I am going to try monitoring while I add change all of these settings, but I am concerned that the package that I build will not be complete. I am completely stumped about how to turn off Add-ons. If it is an about:config setting, is there a way to lock down about:config? Thank you very much for the help guys, I'm always impressed at the level of intelligence found throughout the Mozilla forums.

Chosen solution

you might have look at http://stackoverflow.com/questions/1435000/programmatically-install-certificate-into-mozilla

Read this answer in context 👍 1

All Replies (4)

philipp
philipp
  • Moderator
more options

hello, you can disable the possibility to install addons with the method described at http://kb.mozillazine.org/Locking_preferences and this line in the configuration file: 

lockPref("xpinstall.enabled", false);
jr_admin
jr_admin Question owner
more options

Awesome. Thank you! Do you know how any way to automatically import a trusted certificate?

philipp
philipp
  • Moderator
more options

Chosen Solution

you might have look at http://stackoverflow.com/questions/1435000/programmatically-install-certificate-into-mozilla

jr_admin
jr_admin Question owner
more options

philipp, you've been an amazing help. Thank you so much.