Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

I have installed firefox esr 60 and importing my certificates via certutil .exe but certificates are not getting installed

  • 7 replies
  • 2 have this problem
  • 34 views
  • Last reply by siddhika
  • Solved

siddhika
siddhika

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(.

Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(. ---------------------------------------------------------------------------------------------------------------- Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Chosen solution

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

Read this answer in context 👍 0

All Replies (7)

cor-el
cor-el
  • Top 25 Contributor
  • Moderator

Chosen Solution

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

Mike Kaply
Mike Kaply
  • Moderator
Mozilla Staff

Yes, the issue is the rename to cert9.db.

siddhika
siddhika Question owner

yes I already tried with cert9.db but no luck :(


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert9.db cert9.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

siddhika
siddhika Question owner

I am reading over the internet I guess I have to upgrade my cert8.db to cert9.db

cor-el
cor-el
  • Top 25 Contributor
  • Moderator

You need to tell certutil to use SQLite (sql). You can either do this with the -d parameter and the sql: prefix (-d sql:.) or by creating an environment variable in the cmd or script file file.

  • set NSS_DEFAULT_DB_TYPE=sql
siddhika
siddhika Question owner

Yes by default it takes sql type as dbm.

So manually created system environment variable(set NSS_DEFAULT_DB_TYPE=sql ) and tried to run my batch file still its updating cert8.db file not cert9.db file.

Modified by siddhika

siddhika
siddhika Question owner

Any update??