Windows 10 已于2025年10月14日停止支持。如果您正在使用 Windows 10,参见 这篇文章

Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解
Solved 已存档

Use self signed certificate on TS 2008R2

martijnqui 已回复
martijnqui

Hi reader,

We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler.

Users get in Firefox the security prompt sec_error_unknown_issuer. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites?

We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution?

Thanks in advance, Kind regards, Martijn

Hi reader, We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler. Users get in Firefox the security prompt ''sec_error_unknown_issuer''. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites? We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution? Thanks in advance, Kind regards, Martijn
定位到答案原位置

选择的解决方案

所有回复 (6)

The certificates are stored in the cert8.db file of the firefox profile folder. You can add the certificates you want on one computer, then copy the cert8.db file into each computer's profile folder (replacing the one that is already there).

Is there a root certificate available that you could install?

See also:

@User293 and @Cor-el Thanks for your responds. But I do not prefer to edit settings in an protected profile folder of users.

Is there another way?

I have done tweaking for FireFox before within following files:

C:\Program Files (x86)\Mozilla Firefox\defaults\pref\local-settings.js and C:\Program Files (x86)\Mozilla Firefox\mozilla.cfg

Is there someway I could configure a workaround within the files above? For example disable certificate check for an specific FQDN or for intranet websites?

Kind regards, Martijn

选择的解决方案