How to copy certificates and security devices to new profiles?

3 replies
1 has this problem
3 views
Last reply by cor-el

4 years ago

28/1/20 05:27 ಪೂರ್ವಾಹ್ನ

Using IE, I can import certificates and set up a security device once. Then when a new user logs onto that computer, their profile already has those certificates and security device set up. I want to do this in Firefox.

Right now, what I'm doing is copying the cert9.db and pkcs.txt files to a central location. Then, when a new user logs in, and they get a new Firefox profile, I copy those files to the new profile, overwriting what's already there. This is working, but it's still too much for non-computer users, and I can't always be there to do it.

I'd like to be able to set it up on the computer, in like an admin mode or something, and then users can come and go as they please, and I never have to worry about it again.

Using IE, I can import certificates and set up a security device once. Then when a new user logs onto that computer, their profile already has those certificates and security device set up. I want to do this in Firefox. Right now, what I'm doing is copying the cert9.db and pkcs.txt files to a central location. Then, when a new user logs in, and they get a new Firefox profile, I copy those files to the new profile, overwriting what's already there. This is working, but it's still too much for non-computer users, and I can't always be there to do it. I'd like to be able to set it up on the computer, in like an admin mode or something, and then users can come and go as they please, and I never have to worry about it again.

Answer 1 · 2020-01-28 05:27:03

cor-el

Moderator
Top 10 Contributor

28/1/20 06:31 ಪೂರ್ವಾಹ್ನ

You should be cautious with copying pkcs11.txt because this file contains an absolute path the the profile folder that is past to the software security device that uses TCP ports to communicate. You can check that yourself by inspecting the file. To do this properly you probably should edit the existing pkcs11.txt and add the part that specifies this security device. Cert9.db should be safe to copy and that file only stores cached intermediate certificate and other installed certificates.