Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Mulongo oyo etiyamaki na archive. Tuna motuna mosusu soki osengeli na lisalisi

How can i import RootCA's globaly in Windows 10 for Firefox?

  • 5 biyano
  • 1 eza na nkokoso oyo
  • 4 views
  • Eyano yasuka ya Mike Kaply

boospy
boospy
more options

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md

And i add this file:

{ 

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["%SYSTEMDRIVE%/Company/ca.crt"]
   }
}

}

Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder:

%USERPROFILE%\AppData\Roaming\Mozilla\Certificates

And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users.

Thanks a lot

We would like to rollout our CA's also in Windows 10. I following that instruction: https://github.com/mozilla/policy-templates/blob/master/README.md And i add this file: { "policies": { "BlockAboutAddons": true, "BlockAboutConfig": true, "Certificates": { "ImportEnterpriseRoots": true, "Install": ["%SYSTEMDRIVE%/Company/ca.crt"] } } } Syntax is ok, the blocks are working fine. But the certpath is ignored. Only for test i put the cert in the Folder: %USERPROFILE%\AppData\Roaming\Mozilla\Certificates And this is also working fine. But no solution for my problem that i would like to set an full path to the cert, globaly for all users. Thanks a lot

Solution eye eponami

They should be os slashes.

Can you try

\\

Tanga eyano oyo ndenge esengeli 👍 1

All Replies (5)

WestEnd
WestEnd
more options

Did you post a request help on their site as well on their script?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See also:

I will move your threads to Firefox for Enterprise.

See also:

  • Bug 1506734 - Allow additional locations for certificate policy import
  • Bug 1474683 - Add support for importing certificates via the policy engine

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html)

Mike Kaply
Mike Kaply
  • Moderator
more options

When I put %SYSTEMDRIVE%, I meant that as an example. We don't support those substitution parameters. It needs to be a real path.

Full paths are only supported in Firefox 65.

Although import enterprise roots should be enough...

boospy
boospy Nkolo motuna
more options

Hello all and very thanks for the answers :) It is a little pit strange. So after reading that bugreports it should work. Here is my new script:

{ 

"policies": {
  "BlockAboutAddons": true,
  "BlockAboutConfig": true,
     "Certificates": {
     "ImportEnterpriseRoots": true,
     "Install": ["C://Company//bla.crt", "C://Program Files//Mozilla Firefox//distribution//certificates//bla.crt"]
   }
}

}

It thats is meant with double slash? And yes i have Firefox 65.

Ezalaki modifié na boospy

Mike Kaply
Mike Kaply
  • Moderator
more options

Solution eye oponami

They should be os slashes.

Can you try

\\