X
Tap here to go to the mobile version of the site.
Scheduled maintenance: Thursday, April 2, between 3pm and 5pm UTC. This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn’t solve your issue and you want to ask a question, we have our support community waiting to help you at @firefox on Twitter

Support Forum

Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser. How to fix this?

Posted

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

I use cryptographic module PKCS#11 to browse some sites. I load corresponding xxx.dll file : Options>advanced>Certificates>SecurityDevices>Load . The PKCS#11 device appears in the Device Manager list of devices. I can Log in this PKCS#11 reader and view data. "OK", View Certificates - I view this certificate. "OK" and quit Options menu. If I close the FF browser, these settings was lost and I have to install them manually again. How to save these settings ?

Chosen solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape "9.4.4"
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.66.2 for Mozilla browsers
  • MediaPlguin-v-3.3.37.337395
  • DRM Store Netscape Plugin
  • DRM Netscape Network Object
  • Panda ActiveScan 2.0 Plugin for Firefox
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • npTimeGrid
  • Npdsplay dll
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
  • npmedia_dll_special

Application

  • Firefox 52.9.0
  • User Agent: Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0
  • Support URL: https://support.mozilla.org/1/firefox/52.9.0/WINNT/en-US/

Extensions

  • Application Update Service Helper 2.0 (aushelper@mozilla.org)
  • B-Trust Tool 2.2.2 (btrusttool@b-trust.org)
  • Disconnect 5.19.3 (2.0@disconnect.me)
  • Multi-process staged rollout 1.10 (e10srollout@mozilla.org)
  • Pocket 1.0.5 (firefox@getpocket.com)
  • signTextJS plus 0.8.7 (jid1-FkPKYIvh3ElkQO@jetpack)
  • Web Compat 1.0 (webcompat@mozilla.org)
  • Microsoft .NET Framework Assistant 0.0.0 ({20a82645-c095-46ed-80e3-08825760534b}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: ATI MOBILITY RADEON 9600 Series
  • adapterDescription2:
  • adapterDeviceID: 0x4e50
  • adapterDeviceID2:
  • adapterDrivers: ati2dvag
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 088c103c
  • adapterSubsysID2:
  • adapterVendorID: 0x1002
  • adapterVendorID2:
  • crashGuards: []
  • currentAudioBackend: winmm
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'8.56.1.15']
  • directWriteEnabled: False
  • directWriteVersion: 0.0.0.0
  • driverDate: 12-2-2003
  • driverDate2:
  • driverVersion: 6.14.10.6404
  • driverVersion2:
  • featureLog: {u'fallbacks': [], u'features': [{u'status': u'available', u'description': u'Compositing', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'HW_COMPOSITING'}, {u'status': u'blacklisted', u'description': u'Direct3D11 Compositing', u'log': [{u'status': u'available', u'type': u'default'}, {u'status': u'blacklisted', u'message': u'#BLOCKLIST_FEATURE_FAILURE_AMD1', u'type': u'env'}], u'name': u'D3D11_COMPOSITING'}, {u'status': u'blacklisted', u'description': u'Direct3D9 Compositing', u'log': [{u'status': u'available', u'type': u'default'}, {u'status': u'blacklisted', u'message': u'#BLOCKLIST_FEATURE_FAILURE_AMD1', u'type': u'env'}], u'name': u'D3D9_COMPOSITING'}, {u'status': u'unavailable', u'description': u'Direct2D', u'log': [{u'status': u'unavailable', u'message': u'Direct2D requires Direct3D 11 compositing', u'type': u'default'}], u'name': u'DIRECT2D'}, {u'status': u'disabled', u'description': u'Direct3D11 hardware ANGLE', u'log': [{u'status': u'unavailable', u'message': u'D3D11 compositing is disabled', u'type': u'default'}, {u'status': u'disabled', u'message': u'D3D11 compositing is disabled', u'type': u'env'}], u'name': u'D3D11_HW_ANGLE'}]}
  • info: {u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'skia'}
  • isGPU2Active: False
  • numAcceleratedWindows: 0
  • numAcceleratedWindowsMessage: [u'tryNewerDriver', u'8.56.1.15']
  • numTotalWindows: 2
  • supportsHardwareH264: No; Failed to create H264 decoder
  • webgl2Renderer: WebGL creation failed: * Error during ANGLE OpenGL init. * Error during ANGLE OpenGL init. * Exhausted GL driver caps.
  • webglRenderer: WebGL creation failed: * Error during ANGLE OpenGL init. * Error during ANGLE OpenGL init. * Exhausted GL driver caps.
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Basic

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
jscher2000
  • Top 10 Contributor
8952 solutions 73371 answers

Hi stefan9, when you import a personal certificate to Firefox, it should be saved in a file named cert9.db or cert8.db (older versions used cert8.db). Can you tell whether that file -- located in your currently active profile folder -- is updating when you import the certificate? If not, perhaps the file has become corrupted or locked.

Hi stefan9, when you import a personal certificate to Firefox, it should be saved in a file named cert9.db or cert8.db (older versions used cert8.db). Can you tell whether that file -- located in your currently active profile folder -- is updating when you import the certificate? If not, perhaps the file has become corrupted or locked. * [[Profiles - Where Firefox stores your bookmarks, passwords and other user data]]
cor-el
  • Top 10 Contributor
  • Moderator
17856 solutions 161585 answers

Quote: Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser

Aren't security devices stored in secmode.db in Firefox 52 (55+: pkcs11.txt)?

So maybe check for issues with this file.

Quote: ''Firefox 52.9.0 ESR does not remember PKCS#11 device after reopen the browser'' Aren't security devices stored in secmode.db in Firefox 52 (55+: pkcs11.txt)? So maybe check for issues with this file.

Chosen Solution

Thank you jscher2000 and cor-el for your suggestions!

I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains.

I consider the case closed!

Thank you jscher2000 and cor-el for your suggestions! I continue to analyze my case. The bank change the security rules and recommended to use their automatic update patch. Of course I did this. But their patch do not removed their old add-on on my current FF browser. This old add-on prevent saving the new PKCS#11 device data on FF closure. Solution was manually to remove this old add-on and reinstall the trust chains. I consider the case closed!