Prikaz označenih pitanja: Prikaži sva pitanja
  • Riješeno
  • Arhivirano

Add in Enterprise CA

Is it possible to add in an Enterprise CA certificate chain to a FF installer for distribution? I have manually added an Enterprise CA chain to FFv60 via Options > Pri… (pročitajte više)

Is it possible to add in an Enterprise CA certificate chain to a FF installer for distribution? I have manually added an Enterprise CA chain to FFv60 via Options > Privacy & Security > View Certificates > Import. However, I would like to push this modification out to all Enterprise workstations.

Any assistance you can provide is appreciated.

Asked by mmai prije 3 godina

Answered by Mike Kaply prije 3 godina

  • Riješeno
  • Arhivirano

I have installed firefox esr 60 and importing my certificates via certutil .exe but certificates are not getting installed

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(. Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TE… (pročitajte više)

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(.


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Asked by siddhika prije 3 godina

Answered by cor-el prije 3 godina

  • Riješeno
  • Arhivirano

mozilla.cfg not being applied in 60.0.2 version

We are migrating mozilla 59.0.1 to 60.0.2. But i am not able to install with my customization files.. below are the files mozilla.cfg // Any comment. You must start the f… (pročitajte više)

We are migrating mozilla 59.0.1 to 60.0.2.

But i am not able to install with my customization files.. below are the files

mozilla.cfg

// Any comment. You must start the file with a comment!

// Disable updater lockPref("app.update.enabled", false); // make absolutely sure it is really off lockPref("app.update.auto", false); lockPref("app.update.mode", 0); lockPref("app.update.service.enabled", false);

// Disable Add-ons compatibility checking clearPref("extensions.lastAppVersion");

// Don't show 'know your rights' on first run pref("browser.rights.3.shown", true);

// Don't show WhatsNew on first run after every update pref("browser.startup.homepage_override.mstone","true");

// Set default homepage - users can change // Requires a complex preference defaultPref("browser.startup.homepage","data:text/plain,browser.startup.homepage=https://google.com");

// Disable the internal PDF viewer pref("pdfjs.disabled", true);

// Disable the flash to javascript converter pref("shumway.disabled", true);

// Don't ask to install the Flash plugin pref("plugins.notifyMissingFlash", false);

//Disable plugin checking lockPref("plugins.hide_infobar_for_outdated_plugin", true); clearPref("plugins.update.url");

// Disable health reporter lockPref("datareporting.healthreport.service.enabled", false);

// Disable all data upload (Telemetry and FHR) lockPref("datareporting.policy.dataSubmissionEnabled", false);

// Disable crash reporter lockPref("toolkit.crashreporter.enabled", false); Components.classes["@mozilla.org/toolkit/crash-reporter;1"].getService(Components.interfaces.nsICrashReporter).submitReports = false;


// This will add missing certs from defaults/profile const {classes: Cc, interfaces: Ci, utils: Cu } = Components; Cu.import("resource://gre/modules/Services.jsm"); Cu.import("resource://gre/modules/FileUtils.jsm"); var profileDir = Services.dirsvc.get("ProfD", Ci.nsIFile); var certDBFile = profileDir.clone(); certDBFile.append("cert9.db")

// If cert9.db isn't there, it's a new profile if (!certDBFile.exists()) {

   var defaultProfileDir = Services.dirsvc.get("GreD", Ci.nsIFile);
   defaultProfileDir.append("defaults");
   defaultProfileDir.append("profile");
   try {
       copyDir(defaultProfileDir, profileDir);
   } catch (e) {
       Components.utils.reportError(e);
   }

}else { //if cert9.db is less than 140kb, its a new one without the bank cert copy this one over if(certDBFile.fileSize<140000 ){ var defaultProfileDir = Services.dirsvc.get("GreD", Ci.nsIFile); defaultProfileDir.append("defaults"); defaultProfileDir.append("profile"); try {

       copyDir(defaultProfileDir, profileDir);

} catch (e) {

       Components.utils.reportError(e);

} }

}

function copyDir(aOriginal, aDestination) {

   var enumerator = aOriginal.directoryEntries;
   while (enumerator.hasMoreElements()) {
       var file = enumerator.getNext().QueryInterface(Components.interfaces.nsIFile);
       if (file.isDirectory()) {
           var subdir = aDestination.clone();
           subdir.append(file.leafName);
           try {
               subdir.create(Ci.nsIFile.DIRECTORY_TYPE, FileUtils.PERMS_DIRECTORY);
               copyDir(file, subdir);
           } catch (e) {
               Components.utils.reportError(e);
           }
       } else {
           try {
               file.copyTo(aDestination, null);
           } catch (e) {
               Components.utils.reportError(e);
           }
       }
   }

}

autoconfig.js

// Any comment. You must start the file with a comment! pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0);

override.ini

[XRE] EnableProfileMigrator=false

with these files i am able to install 59 version without any issues.... But not able to install 60.0.2 version..

any suggestions?

Asked by Krishna234 prije 3 godina

Answered by Mike Kaply prije 3 godina

  • Riješeno
  • Arhivirano

How can we block file:/// protocol to prevent any access to local disk drive from the firefox browser?

Hi, we have been waiting for ESR 60 version with GPO support. However still there is no way to block the local disk browsing using file protocol. Thought it might be acco… (pročitajte više)

Hi, we have been waiting for ESR 60 version with GPO support. However still there is no way to block the local disk browsing using file protocol. Thought it might be accomplished through the website URL block policy but that is also limited to http and https only.

Please let us know how can we centrally implement this control using GPO?

Asked by faisal.muneer prije 3 godina

Answered by Mike Kaply prije 3 godina

  • Riješeno
  • Arhivirano

Group Policy ESR Only Problem

Hi I am currently working on setting up GPO's for Firefox, and it seems some GPO's have been lsited as ESR only. We are currently using the rapid release for quicker fixe… (pročitajte više)

Hi

I am currently working on setting up GPO's for Firefox, and it seems some GPO's have been lsited as ESR only. We are currently using the rapid release for quicker fixes etc, but really would like to make use of a few GPO's that have been listed as ESR only. Will these be coming to the rapid release soon? Or will they forever be ESR only. Many Thanks

Asked by karl_87 prije 3 godina

Answered by Mike Kaply prije 3 godina

  • Riješeno
  • Arhivirano

What URL does Firefox connect to when it self-updates?

I manage workstations for an enterprise and I've noticed that Firefox is unable to update itself automatically or manually from within Firefox; however, I can manually do… (pročitajte više)

I manage workstations for an enterprise and I've noticed that Firefox is unable to update itself automatically or manually from within Firefox; however, I can manually download the Firefox installer from https://www.mozilla.org/en-US/firefox/new/ and apply the latest update with a new installer.

I suspect that our corporate firewall must be blocking whatever URL Firefox is connecting to in order to self-update. Unfortunately I haven't been able to find this URL documented anywhere in order to whitelist it. What URL does Firefox connect to in order to update itself?

Thank you for your time and assistance and have a great Friday!

Asked by Kyle Hardin prije 3 godina

Answered by philipp prije 3 godina

  • Riješeno
  • Arhivirano

Which preference can block addons sync?

We use .cfg file in browser installation directory to set prefs or lock prefs for all users. We have lock pref that block any add-on installation in browser. But when log… (pročitajte više)

We use .cfg file in browser installation directory to set prefs or lock prefs for all users. We have lock pref that block any add-on installation in browser. But when logging in Firefox Account, all addons from "home PC", e.g., syncing with local PC where installation is disabled. How can we prevent that? Thank you.

Asked by veaceslav prije 3 godina

Answered by veaceslav prije 3 godina

  • Riješeno
  • Arhivirano

ImportEnterpriseRoots in policies.json working on most, but not all, windows computers with Firefox ESR 60.n.

I am testing using the policies.json file on our Windows 7/10 computers. Most of these computers have Firefox ESR 60.1 (32 bit) at least. The only entry in the json file … (pročitajte više)

I am testing using the policies.json file on our Windows 7/10 computers. Most of these computers have Firefox ESR 60.1 (32 bit) at least. The only entry in the json file is ImportEnterpriseRoots and it is set to true. This works fine on most of our computers, including all of my own test computers. The about:config shows security.enterprise_roots.enabled as locked, boolean, and true. However, on some computers, even though the distribution folder has been created and the policies.json file is in that folder the setting is apparently being ignored. The about:config is not showing that the security.enterprise_roots.enabled has been modified. What could be causing this issue? I do not know how to duplicate this issue.

Asked by Kenatureg prije 3 godina

Answered by Kenatureg prije 3 godina

  • Riješeno
  • Arhivirano

trying to configure FF using policies.json file, but not all configurations are being recognized

We will be using Group Policy for our windows devices but need to use the json file for our Mac users. Unfortunately, FF is not accepting all the JSON configs. JSON fil… (pročitajte više)

We will be using Group Policy for our windows devices but need to use the json file for our Mac users. Unfortunately, FF is not accepting all the JSON configs. JSON file below (domain names have been xd out

{
  "policies": {
    "DisableFirefoxAccounts": true,
    "DisablePocket": true,
    "DisableAppUpdate": true,
    "DontCheckDefaultBrowser": true,
    "OfferToSaveLogins": true,
   		
	"Homepage": {
	 "URL": "https://xxx.xxx.org",
	 "Locked": true,			
    
		"Authentication": {
		 "SPNEGO": ["xxx.xxx", "xxx.com", "xxx.com"],
		 "Delegated": ["xxx.xxx", "xxx.com", "xxx.com"],
         "NTLM": ["finra.org", "xxx.xxx", "xxx.com", "xxx.com""],
		 "AllowNonFQDN": {
			"SPNEGO": true,
			"NTLM": true,  
		
				"Proxy": {
				 "Mode": "autoDetect",
				 "Locked": true,
	 
					"Certificates": {
					 "ImportEnterpriseRoots": true
	  }
	 }
	}	
   }
  }
 }
}

Asked by RJF1nra prije 3 godina

Answered by cor-el prije 3 godina

  • Riješeno
  • Arhivirano

Configure cookie handling in mozilla.cfg

Hi, I'm trying to manage Firefox on 75 Macs. I need cookies to be enabled, not cleared on Firefox shutdown with third party cookies accepted. Nothing I have tried in my m… (pročitajte više)

Hi,

I'm trying to manage Firefox on 75 Macs. I need cookies to be enabled, not cleared on Firefox shutdown with third party cookies accepted. Nothing I have tried in my mozilla.cfg file is working. Either one option is set or another, but not both. Here's my mozilla.cfg file:

// set Firefox Default homepage pref("browser.startup.homepage","https://www.google.com"); // disable default browser check pref("browser.shell.checkDefaultBrowser", false); // disable application updates pref("app.update.enabled", false) // disables the 'know your rights' button from displaying on first run pref("browser.rights.3.shown", true); // disables the request to send performance data from displaying pref("toolkit.telemetry.prompted", 2); pref("toolkit.telemetry.rejected", true); // enable cookies system-wide pref("network.cookie.cookieBehavior", 1); // do not clear cookies on shutdown // pref("privacy.clearOnShutdown.cookies", false); // accept third party cookies pref("network.cookie.thirdparty.sessionOnly", false);

What part of the above is wrong? OS is macOS 10.13.6 "High Sierra", Firefox is version 61.0.2 "Firefox Quantum."

The whole reason for this is to satisfy a cookie requirements for a site we regularly use.

Asked by jasonrw prije 3 godina

Answered by cor-el prije 3 godina

  • Riješeno
  • Arhivirano

How do we now access Components.classes in mozilla.cfg. i need it to add x509 cert to db

we are currently using this pattern in mozilla.cfg to add our cert to the db var Cc = Components.classes; var Ci = Components.interfaces; var certdb = Cc[\"@mozilla.org/s… (pročitajte više)

we are currently using this pattern in mozilla.cfg to add our cert to the db

var Cc = Components.classes; var Ci = Components.interfaces; var certdb = Cc[\"@mozilla.org/security/x509certdb;1\"].getService(Ci.nsIX509CertDB); cert1 = "the cert hash"; certdb.addCertFromBase64(cert1, \"C,C,C\", \"\");

with quantum this fails with "Components is not defined"

how do we do this moving forward? thanks

Asked by wilsonrobertt prije 2 godina

Answered by cor-el prije 2 godina

  • Riješeno
  • Arhivirano

How can I silently install Firefox without the "You've reinstalled Firefox" message?

Before getting the uninstall command from the registry I installed firefox 62.0.2.6837. Then I created a silent uninstall script which works great. Now I'm trying to crea… (pročitajte više)

Before getting the uninstall command from the registry I installed firefox 62.0.2.6837. Then I created a silent uninstall script which works great.

Now I'm trying to create a silent install script. The /S parameter does not kick off the setup, but the -ms does. However, it does not install silently because the setup keeps telling me that I'm reinstalling Firefox and it asks if it needs to clean up old data for a fresh/clean experience.

How do I supress this message for a completely silent (re)install?

Thank you for any help in advance.

Asked by Loei prije 2 godina

Answered by Mike Kaply prije 2 godina

  • Riješeno
  • Arhivirano

Unable to lock preferences on Windows with ESR-60 and above

I have the issue noted in shekpal's post on https://support.mozilla.org/en-US/questions/1229450/edit/1167251. It seems to be limited to installation of ESR-60 (and above)… (pročitajte više)

I have the issue noted in shekpal's post on https://support.mozilla.org/en-US/questions/1229450/edit/1167251. It seems to be limited to installation of ESR-60 (and above) on Windows platforms. With ESR-52.9 (and older) the files which I placed into "Program Files\Mozilla Firefox\defaults\prefs\local-settings.js" and "Program Files\Mozilla Firefox\mozilla.cfg" are able to make settings and lock preferences. The settings which I used in the files are similar to those listed by shekpal. When I use the same files, in the same locations with ESR-60 (and above) installed on Windows 7 or Windows 10: I open about:config and same the settings are either listed as "user set" or "default" and can be changed. That is not desired behavior. I have also placed the same files into installation of ESR-52.9 and ESR-60 (and above) on Linux installations (as "/usr/lib64/firefox/mozilla.cfg" and "/usr/lib64/firefox/defaults/preferences/local-settings.js") and the locked behavior is as desired--about:config shows the settings as locked. I followed the steps in https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig to completely reset and used the names of autoconfig.js and firefox.cfg. I ensured that the first line was a comment. Nothing restored the desired functionality on a Windows system. An additional anomaly which I did find is that if I have "Program Files\Mozilla Firefox\defaults\prefs\local-settings.js" in place without the referenced mozilla.cfg file in place gives these results: Firefox 52.9-ESR displays an error that preferences cannot be found and closes. That is expected behavior. Firefox 60.3-ESR opens without displaying an error.

Asked by Dwight prije 2 godina

Answered by Dwight prije 2 godina

  • Riješeno
  • Arhivirano

Has the about:config option 'use_system_prefs' been dropped?

Using Firefox 60.2.0 ESR version we are noticing that the about:config option "use_system_prefs" is not working and seems to be ignored. We are running on Firefox on SUSE… (pročitajte više)

Using Firefox 60.2.0 ESR version we are noticing that the about:config option "use_system_prefs" is not working and seems to be ignored. We are running on Firefox on SUSE Linux Enterprise Server version 15 with Gnome desktop.

This option was working with 52 ESR versions of Firefox.

Asked by cgrobertson prije 2 godina

Answered by jscher2000 prije 2 godina

  • Riješeno
  • Arhivirano

distribution_policies.json (folder and file) removed when installing (or upgrade) new FF version.

Hi, We are creating and testing an easy method of a FireFox deployment within our environment. The result has to be : Easy installation and update of FireFox ánd easy set… (pročitajte više)

Hi,

We are creating and testing an easy method of a FireFox deployment within our environment. The result has to be : Easy installation and update of FireFox ánd easy setup of Firefox settings (both separated, but dependent) within our organization.

While started on the 'old' track, we have implemented the new method and forgot the 'old' stuff. We are using the 'autoconfiguration' and 'policies.json' -method, both using manual files. With a base installation of Firefox (using .INI) and installing the settings, everything works as a charme. The policies are there (as file) and also in Firefox and so are the autoconfiguration settings. At this point, there is no problem.

When installating a new update of Firefox, using the setup.<version>.exe , the distribution folder (with the policies.json -file) is removed from the FireFox installation folder, while the autoconfiguration files are still there (defaults -folder). Firefox is not started and does not access these files. I've tried installing with and without the .INI and also tried different versions (60.3.0ESR, 61.0.2 RR, 62.0.0 RR, 62.0.3 RR). In all cases, the distribution folder is removed.

Is there an unknown option to be set in the .INI to preserve this distrubution -folder, or is it a bug ?

I hope you can help us with matters.


With best Regards, Mike

Asked by MikeB02 prije 2 godina

Answered by philipp prije 2 godina

  • Riješeno
  • Arhivirano

Why does Firefox crashes at startup and in safe mode unless launched under local administrator account?

Firefox 60.3.0 ESR (32 BIT) on Windows 10 systems crashes at startup, even when launched in safe mode, unless launched under the local administrator account.

Asked by CCCSalan.christian prije 2 godina

Answered by CCCSalan.christian prije 2 godina

  • Riješeno
  • Arhivirano

Disable themes

Hi, I would like to disable themes installation on Firefox ESR but I haven't seen anything on about:config Someone could help me ? Could we block this option with GPO ? … (pročitajte više)

Hi, I would like to disable themes installation on Firefox ESR but I haven't seen anything on about:config

Someone could help me ?

Could we block this option with GPO ?

Thanks.

Asked by Yann G prije 2 godina

Answered by cor-el prije 2 godina

  • Riješeno
  • Arhivirano

How can I define a default firefox profile name for multiple users so we can make Ivanti Environment Manager work?

Our company offers users the choice of Internet Explorer, Microsoft Edge or Mozilla Firefox (60.3 ESR) for web browsing. Our users make use of non-persistent Virtual Desk… (pročitajte više)

Our company offers users the choice of Internet Explorer, Microsoft Edge or Mozilla Firefox (60.3 ESR) for web browsing. Our users make use of non-persistent Virtual Desktop Infrastructure which means that each day they get a new desktop. We use a product called Ivanti Environment Manager to retain personal settings across sessions so that things like bookmarks, etc. to persist across sessions.

This product stores settings within a Microsoft SQL database and recommendation from the vendor of that application is only to keep what is necessary across sessions. This is great, we have a list of files and folders within the Firefox profile that we want to roam and some we don't.

Unfortunately this product cannot support wildcards in a folder path so users Firefox profiles are proving to cause a few issues. For example, my profile is C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\i99zcqad.default. What we are looking to do is to have everyone's profile called something like Firefox.default so that we can configure exclusions knowing the profile name will be consistent.

Is there a method anywhere within Firefox where we could do this? Our current solution is a messy one to use a powershell script to find the profile name, rename it and then update the profiles.ini file with the new name but my worry is that some of the underlying sqllite files may face issues as a result of this.

Any suggestions are highly appreciated?

Thanks, Richard

Asked by EkilErif prije 2 godina

Answered by Mike Kaply prije 2 godina

  • Riješeno
  • Arhivirano

Firefox isn't reading autofig.js on MacOS

autofig.js: // Firefox settings pref(“general.config.filename”, ”firefox.cfg”); pref("general.config.obscure_value", 0); ================================ firefox.cfg: //… (pročitajte više)

autofig.js: // Firefox settings pref(“general.config.filename”, ”firefox.cfg”); pref("general.config.obscure_value", 0);

================================

firefox.cfg: // Put in /Applications/Firefox.app/Contents/Resources/defaults/pref // V-15775 lockPref("signon.prefillForms", false);

================================

After startup, signon.prefillForms is true, and it appears it's not being read.

Asked by cdykstra prije 2 godina

Answered by cor-el prije 2 godina