Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Certificate transparency on version 135 - security.pki.certificate_transparency.disable_for_hosts missing in GPO ?

  • 2 replies
  • 0 have this problem
  • 8 views
  • Last reply by tomas.jetel

tomas.jetel
tomas.jetel
more options

Hello community,

i would like to ask about how to deploy security.pki.certificate_transparency.disable_for_hosts globally for users? With version 135 a lot of production webapps stopped working and as of now , we have to do manual modification in about:config. Our company has over 300k users , so the possible disruption might arise very quickly and there will be significant loses in production enviroment.

Is there a way how to deploy this specific setting via GPO/SCCM ?

Thank you

Hello community, i would like to ask about how to deploy security.pki.certificate_transparency.disable_for_hosts globally for users? With version 135 a lot of production webapps stopped working and as of now , we have to do manual modification in about:config. Our company has over 300k users , so the possible disruption might arise very quickly and there will be significant loses in production enviroment. Is there a way how to deploy this specific setting via GPO/SCCM ? Thank you

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

I'm not sure why they are not available as the show as supported security prefs in the source code as added in Firefox 134. Do you have the latest updates? 

"security.pki.certificate_transparency.disable_for_hosts",
"security.pki.certificate_transparency.disable_for_spki_hashes",
"security.pki.certificate_transparency.mode",

1931437 - provide a mechanism for enterprises to skip certificate transparency enforcement for specified hosts/certificates

Helpful?

tomas.jetel
tomas.jetel Question owner
more options

We´ve uploaded the lastest admx templates.. and we can see under administrative templates that the "Preferences" are already obsolete and these three PKI settings are not even there..

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.