Compare Revisions
How to disable the Enterprise Roots preference
Revision 186885:
Revision 186885 by michro on
Revision 186892:
Revision 186892 by AliceWyman on
Keywords:
Firefox version 65; Antivirus; Enterprise Roots Preference; TLS connection error
Search results summary:
This article explains how to disable the Enterprise Roots preference without compromising security.
How to disable the Enterprise Roots preference to fix TLS connection errors caused by antivirus software, without compromising security.
Content:
[[Template:aboutconfigwarning]]
Firefox may display a TLS connection error when your antivirus software prevents data from being sent to your browser. This happens when your antivirus software fails to register itself with Firefox as a valid issuer of TLS certificates.
Mozilla has added the Enterprise Roots preference to Firefox as a solution to the problem. This preference can be used to import any root certificate authorities (CAs) that have been added to the operating system to resolve your TLS connection error. You can determine if a website is relying on an imported root by clicking the '''Information''' icon from the address bar.
With Firefox version 68, when a TLS connection error occurs, Firefox automatically enables the Enterprise Roots preference and attempts to connect again. If the issue is resolved, then the Enterprise Roots preference remains enabled. However, you may want to disable this behavior, so this article explains how to do just that without compromising security.
<br /><br />
To modify this behavior and prevent Firefox from automatically enabling the import of CAs that have been added to the operating system when a TLS connection error occurs:
#[[Template:aboutconfig]] A list of preferences displays.
#Type '''security.certerrors.mitm.auto_enable_enterprise_roots''' in the Search box above the list of preferences.
#Double-click on the {pref security.certerrors.mitm.auto_enable_enterprise_roots} preference to change its value from {pref true} to {pref '''false'''}.
<br />
To prevent CAs that have been added to the operating system from being automatically imported each time Firefox restarts:
#[[Template:aboutconfig]] A list of preferences displays.
#Type '''security.enterprise_roots.enabled''' in the Search box above the list of preferences.
#Double-click on the {pref security.enterprise_roots.enabled} preference to change its value from {pref true} to {pref '''false'''}.
[[Template:aboutconfigwarning]]
Firefox may display a [https://wikipedia.org/wiki/Transport_Layer_Security TLS] connection error when your antivirus software prevents data from being sent to your browser. This happens when your antivirus software fails to register itself with Firefox as a valid issuer of TLS certificates.
Mozilla has added an Enterprise Roots preference to Firefox as a solution to the problem. This preference can be used to import any root [https://wikipedia.org/wiki/Certificate_authority certificate authorities] (CAs) that have been added to the operating system, to resolve your TLS connection error. You can determine if a website is relying on an imported root certificate by clicking the ''Site Information'' [[Image:Site Info button]] icon in the address bar.
Starting with [[Find what version of Firefox you are using|Firefox version]] 68, when a TLS connection error occurs Firefox will automatically enable the Enterprise Roots preference and attempts to connect again. If the issue is resolved, then the Enterprise Roots preference remains enabled. However, you may want to disable this behavior, so this article explains how to do just that without compromising security.
You can modify this behavior and prevent Firefox from automatically enabling the import of CAs that have been added to the operating system when a TLS connection error occurs, as follows:
#[[Template:aboutconfig]]
#Type '''enterprise''' in the ''Search'' field above the list of preferences.
#Double-click on the preference {pref security.certerrors.mitm.auto_enable_enterprise_roots} to change its value from {pref true} to {pref '''false'''}.
To prevent CAs that have been added to the operating system from being automatically imported each time Firefox restarts:
#In the ''about:config'' page, search for '''enterprise''' as explained above.
#Double-click on the preference {pref security.enterprise_roots.enabled} to change its value from {pref true} to {pref '''false'''}.