This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How do I deploy an SSL certificate to Firefox in my enterprise.

  • 3 replies
  • 1 has this problem
  • 1 view
  • Last reply by philipp

jimmoreland
jimmoreland
more options

We need to deploy an SSL certificate generated by our web content filter to be used for SSL decryption. We have deployed the certificate to all 18k of our Windows PCs, but Firefox, as I'm sure you know, will not use the Windows certificate store.

How does Mozilla suggest we solve this problem? Information on the Internet is outdated and does not seem to work with the latest versions of Firefox.

Is there a simple way for me to do this with group policy? I tried copying the cert8.db file from a working profile to a non-working profile, but the non-working profile simply overwrote the cert8.db file with a new one.

Please assist. I need a simple solution for this problem. I should add that I do not want to purchase third party software or use freeware to solve this issue. Mozilla must have an enterprise tool for this purpose so please help me find it. (fyi I have seen the NSS certutil information from a few years ago. I hope that there is something simpler to use by now).

Thank you for your assistance in this matter.

We need to deploy an SSL certificate generated by our web content filter to be used for SSL decryption. We have deployed the certificate to all 18k of our Windows PCs, but Firefox, as I'm sure you know, will not use the Windows certificate store. How does Mozilla suggest we solve this problem? Information on the Internet is outdated and does not seem to work with the latest versions of Firefox. Is there a simple way for me to do this with group policy? I tried copying the cert8.db file from a working profile to a non-working profile, but the non-working profile simply overwrote the cert8.db file with a new one. Please assist. I need a simple solution for this problem. I should add that I do not want to purchase third party software or use freeware to solve this issue. Mozilla must have an enterprise tool for this purpose so please help me find it. (fyi I have seen the NSS certutil information from a few years ago. I hope that there is something simpler to use by now). Thank you for your assistance in this matter.

All Replies (3)

philipp
philipp
  • Moderator
more options

hi, it's easiest to use the cck2 wizard for that purpose - also see https://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/ about the subject.

jimmoreland
jimmoreland Question owner
more options

Thank you for your response. I do not have the option to spend money to solve this problem. It may be inexpensive, but when Chrome and Internet Explorer work without extra cost it simply makes more sense to do away with Firefox. Who needs the headache?

philipp
philipp
  • Moderator
more options

cck2 wizard is available for free...