Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

New Windows Security pop up with Thunderbird 91

  • 2 replies
  • 1 has this problem
  • 1 view
  • Last reply by christ1

opoplawski1
opoplawski1
more options

With the update to TB 91, we are seeing the attached pop up when composing a signed or encrypted email. I find this a little surprising because we are storing our email certificates directly in TB rather than in the windows certificate store. Could anyone shed more light on the changes to the way TB is dealing with signing certificates? Thanks.

With the update to TB 91, we are seeing the attached pop up when composing a signed or encrypted email. I find this a little surprising because we are storing our email certificates directly in TB rather than in the windows certificate store. Could anyone shed more light on the changes to the way TB is dealing with signing certificates? Thanks.
Attached screenshots

All Replies (2)

opoplawski1
opoplawski1 Question owner
more options

Also, it seems like TB will try to make use of a smartcard if one is present even when configured to use a local TB cert for encryption.

christ1
christ1
  • Top 25 Contributor
more options

Try to set the pref security.enterprise_roots.enabled to false. For more information see https://bugzilla.mozilla.org/show_bug.cgi?id=1726442

Also, it seems like TB will try to make use of a smartcard if one is present even when configured to use a local TB cert for encryption.

If the private key is on the smartcard only, there's no way around that. The private key is needed to sign messages, and to read encrypted messages. If the private key is also present in the Thunderbird certificate store, then what is the point of using a smartcard at all?