We were unable to back port osclient certs to Firefox 68. The Firefox 78 ESR will be out soon and will have this functionality.

You could theoretically take the osclientcerts.dll from Firefox 77 and use policy to add that DLL as a new security device and it should work on Firefox 68.

Hi Mike,

thanks for your answer. I copied the osclientcerts DLL from Firefox 77 to the root of firefox 68esr and added module manually to 68esr. This worked fine - the certificates are now listed in firefox 68esr and working. To avoid adding the cryptography module manually on each firefox, is there a possibility to load the dll via script,.... batch or powershell or regkey or similar ?

Appriciate for your help. Kind regards Tom

You could use the SecurityDevices policy (which boils down to a regkey)

https://github.com/mozilla/policy-templates/blob/master/README.md#securitydevices

Hi again,

is it possible, that security.osclientcerts.autoload doesn't work anymore with version 69.10.0 ? It worked well with 69.9.0 and after the update the Cryptographie module needs to be loaded by hand again.

Kind regards Tom

I assume you mean 68.10.10? Firefox should have preserved the PKCS configuration. It works after you readd it as a security module?

I'm going to assume everything is working with 78?