This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser. How to fix this?

  • 3 replies
  • 1 has this problem
  • 1 view
  • Last reply by stefan9

stefan9
stefan9
more options

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

Chosen solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!

Read this answer in context 👍 0

All Replies (3)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Hi stefan9, when you import a personal certificate to Firefox, it should be saved in a file named cert9.db or cert8.db (older versions used cert8.db). Can you tell whether that file -- located in your currently active profile folder -- is updating when you import the certificate? If not, perhaps the file has become corrupted or locked.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Quote: Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser

Aren't security devices stored in secmode.db in Firefox 52 (55+: pkcs11.txt)?

So maybe check for issues with this file.

stefan9
stefan9 Question owner
more options

Chosen Solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!