Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How can i import RootCA's globaly in Windows 10 for Firefox?

  • 5 replies
  • 1 has this problem
  • 19 views
  • Last reply by Mike Kaply

more options

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md

And i add this file:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["%SYSTEMDRIVE%/Company/ca.crt"]
   }
}

}

Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder:

%USERPROFILE%\AppData\Roaming\Mozilla\Certificates

And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users.

Thanks a lot

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md And i add this file: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["%SYSTEMDRIVE%/Company/ca.crt"] } } } Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder: %USERPROFILE%\AppData\Roaming\Mozilla\Certificates And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users. Thanks a lot

Chosen solution

They should be os slashes.

Can you try

\\

Read this answer in context 👍 1

All Replies (5)

more options

Did you post a request help on their site as well on their script?

more options

See also:

I will move your threads to Firefox for Enterprise.


See also:

  • Bug 1506734 - Allow additional locations for certificate policy import
  • Bug 1474683 - Add support for importing certificates via the policy engine

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
)

more options

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path.

Full paths are only supported in Firefox 65.

Although import enterprise roots should be enough...

more options

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"]
   }
}

}

It thats is meant with double slash? And yes i have Firefox 65.

Modified by boospy

more options

Chosen Solution

They should be os slashes.

Can you try

\\