Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

I have installed firefox esr 60 and importing my certificates via certutil .exe but certificates are not getting installed

  • 7 odgovori
  • 2 ima ovaj problem
  • 135 views
  • Posljednji odgovor poslao siddhika

more options

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(.


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(. ---------------------------------------------------------------------------------------------------------------- Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Izabrano rješenje

All Replies (7)

more options

Odabrano rješenje

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

more options

Yes, the issue is the rename to cert9.db.

more options

yes I already tried with cert9.db but no luck :(


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert9.db cert9.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

more options

I am reading over the internet I guess I have to upgrade my cert8.db to cert9.db

more options

You need to tell certutil to use SQLite (sql). You can either do this with the -d parameter and the sql: prefix (-d sql:.) or by creating an environment variable in the cmd or script file file.

  • set NSS_DEFAULT_DB_TYPE=sql
more options

Yes by default it takes sql type as dbm.

So manually created system environment variable(set NSS_DEFAULT_DB_TYPE=sql ) and tried to run my batch file still its updating cert8.db file not cert9.db file.

Izmjenjeno od strane siddhika

more options

Any update??