X
Tap here to go to the mobile version of the site.

Support Forum

How can i import RootCA's globaly in Windows 10 for Firefox?

Posted

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md

And i add this file:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["%SYSTEMDRIVE%/Company/ca.crt"]
   }
}

}

Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder:

%USERPROFILE%\AppData\Roaming\Mozilla\Certificates

And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users.

Thanks a lot

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md And i add this file: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["%SYSTEMDRIVE%/Company/ca.crt"] } } } Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder: %USERPROFILE%\AppData\Roaming\Mozilla\Certificates And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users. Thanks a lot

Chosen solution

They should be os slashes.

Can you try

\\

Read this answer in context 1

Additional System Details

Application

  • User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0

More Information

WestEnd
  • Top 25 Contributor
61 solutions 5340 answers

Did you post a request help on their site as well on their script?

Did you post a request help on their site as well on their script?
cor-el
  • Top 10 Contributor
  • Moderator
17334 solutions 156717 answers

See also:

I will move your threads to Firefox for Enterprise.


See also:

  • Bug 1506734 - Allow additional locations for certificate policy import
  • Bug 1474683 - Add support for importing certificates via the policy engine

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
)

See also: *[/questions/1247869] How can i import RootCA's globaly in Ubuntulinux for Firefox? I will move your threads to Firefox for Enterprise. ---- See also: *[https://bugzilla.mozilla.org/show_bug.cgi?id=1506734 Bug 1506734] - Allow additional locations for certificate policy import *[https://bugzilla.mozilla.org/show_bug.cgi?id=1474683 Bug 1474683] - Add support for importing certificates via the policy engine (<i>please do not comment in bug reports<br>https://bugzilla.mozilla.org/page.cgi?id=etiquette.html</i>)
Mike Kaply
  • Moderator
35 solutions 180 answers

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path.

Full paths are only supported in Firefox 65.

Although import enterprise roots should be enough...

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path. Full paths are only supported in Firefox 65. Although import enterprise roots should be enough...

Question owner

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"]
   }
}

}

It thats is meant with double slash? And yes i have Firefox 65.

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"] } } } It thats is meant with double slash? And yes i have Firefox 65.

Modified by boospy

Mike Kaply
  • Moderator
35 solutions 180 answers

Chosen Solution

They should be os slashes.

Can you try

\\

They should be os slashes. Can you try \\