Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Hilfe durchsuchen

Vorsicht vor Support-Betrug: Wir fordern Sie niemals auf, eine Telefonnummer anzurufen, eine SMS an eine Telefonnummer zu senden oder persönliche Daten preiszugeben. Bitte melden Sie verdächtige Aktivitäten über die Funktion „Missbrauch melden“.

Weitere Informationen
Gelöst Archiviert

How can i import RootCA's globaly in Windows 10 for Firefox?

boospy

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md

And i add this file:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["%SYSTEMDRIVE%/Company/ca.crt"]
   }
}

}

Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder:

%USERPROFILE%\AppData\Roaming\Mozilla\Certificates

And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users.

Thanks a lot

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md And i add this file: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["%SYSTEMDRIVE%/Company/ca.crt"] } } } Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder: %USERPROFILE%\AppData\Roaming\Mozilla\Certificates And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users. Thanks a lot
Diese Antwort im Kontext lesen

Ausgewählte Lösung

They should be os slashes.

Can you try

\\

Alle Antworten (5)

Did you post a request help on their site as well on their script?

See also:

I will move your threads to Firefox for Enterprise.


See also:

  • Bug 1506734 - Allow additional locations for certificate policy import
  • Bug 1474683 - Add support for importing certificates via the policy engine

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
)

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path.

Full paths are only supported in Firefox 65.

Although import enterprise roots should be enough...

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"]
   }
}

}

It thats is meant with double slash? And yes i have Firefox 65.

Geändert am von boospy

Ausgewählte Lösung

They should be os slashes.

Can you try

\\