Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

How can i import RootCA's globaly in Windows 10 for Firefox?

  • 5 fhreagra
  • 1 leis an bhfadhb seo
  • 19 views
  • Freagra is déanaí ó Mike Kaply

more options

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md

And i add this file:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["%SYSTEMDRIVE%/Company/ca.crt"]
   }
}

}

Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder:

%USERPROFILE%\AppData\Roaming\Mozilla\Certificates

And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users.

Thanks a lot

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md And i add this file: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["%SYSTEMDRIVE%/Company/ca.crt"] } } } Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder: %USERPROFILE%\AppData\Roaming\Mozilla\Certificates And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users. Thanks a lot

Réiteach roghnaithe

They should be os slashes.

Can you try

\\

Read this answer in context 👍 1

All Replies (5)

more options

Did you post a request help on their site as well on their script?

more options

See also:

I will move your threads to Firefox for Enterprise.


See also:

  • Bug 1506734 - Allow additional locations for certificate policy import
  • Bug 1474683 - Add support for importing certificates via the policy engine

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
)

more options

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path.

Full paths are only supported in Firefox 65.

Although import enterprise roots should be enough...

more options

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script:

{

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"]
   }
}

}

It thats is meant with double slash? And yes i have Firefox 65.

Athraithe ag boospy ar

more options

Réiteach Roghnaithe

They should be os slashes.

Can you try

\\