How to delete certificate authority from installation folder instead?
Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10?
Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers)
Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient.
upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)
All Replies (5)
What certificate(s) is this about and who is the issuer?
It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder.
If this is a problem with security software then you should fix it there.
It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say.
But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort:
https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?
You could check the Enterprise help pages to see whether they mention how you would remove certificates.