We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How do I load my own root certificate into firefox

  • 3 replies
  • 0 have this problem
  • 7 views
  • Last reply by cor-el

more options

I have a local only test ca and test web server. How do I load the CA certificate into Firefox. Adding it via "settings" did not work, the browser says Adding a root via "settings" does nothing. When I access a web server it says "the original certificate provided by the server is untrusted", in the issuer name field. It never actually shows the certificate. Adding a file to the appdata area (this is on windows 10) also fails; changing the enterprise ca settings does not work. This used to work.

I have a local only test ca and test web server. How do I load the CA certificate into Firefox. Adding it via "settings" did not work, the browser says Adding a root via "settings" does nothing. When I access a web server it says "the original certificate provided by the server is untrusted", in the issuer name field. It never actually shows the certificate. Adding a file to the appdata area (this is on windows 10) also fails; changing the enterprise ca settings does not work. This used to work.

All Replies (3)

more options

You can use a policy to import a certificate. See:

more options

That page describes placing the certificate in appdata, which didn't work, and the later section references GPO - this is a stand-alone Windows 10 workstation, there is no active directory domain and no group policy. There is no "HKLM\Software\policies\Mozilla..." registry key.

more options

You can use the policies.json file in the distribution folder.

You can use the full path, but you need to escape backslashes (\\).