Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser. How to fix this?

  • 3 replies
  • 1 has this problem
  • 1 view
  • Last reply by stefan9

stefan9
stefan9
more options

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

Chosen solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!

Read this answer in context 👍 0

All Replies (3)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Hi stefan9, when you import a personal certificate to Firefox, it should be saved in a file named cert9.db or cert8.db (older versions used cert8.db). Can you tell whether that file -- located in your currently active profile folder -- is updating when you import the certificate? If not, perhaps the file has become corrupted or locked.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Quote: Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser

Aren't security devices stored in secmode.db in Firefox 52 (55+: pkcs11.txt)?

So maybe check for issues with this file.

stefan9
stefan9 Question owner
more options

Chosen Solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!