We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Use self signed certificate on TS 2008R2

  • 6 replies
  • 1 has this problem
  • 37 views
  • Last reply by martijnqui

martijnqui
martijnqui
more options

Hi reader,

We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler.

Users get in Firefox the security prompt sec_error_unknown_issuer. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites?

We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution?

Thanks in advance, Kind regards, Martijn

Hi reader, We are using Firefox on a Terminal server Farm environment with roughly 20 servers. We are using a lot of intranet websites for which we have self signed certificate by our Domain controler. Users get in Firefox the security prompt ''sec_error_unknown_issuer''. As far I have red Firefox does not check for local self signed certificates. Is there a way we could configure for all users they do not see the error above for -> Specific<- (intranet) websites? We dont want the users to add the (certificate) security exception like 20 times for EACH intranet website on 20 differend servers. Is it something I can edit in mozilla.cfg on each server or is there another solution? Thanks in advance, Kind regards, Martijn

Chosen solution

I fixed the issue with manual below:

http://community.spiceworks.com/how_to/15158-firefox-trust-a-local-certificate-authority-for-all-users-and-computers

Read this answer in context 👍 0

All Replies (6)

user293
user293
more options

The certificates are stored in the cert8.db file of the firefox profile folder. You can add the certificates you want on one computer, then copy the cert8.db file into each computer's profile folder (replacing the one that is already there).

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Is there a root certificate available that you could install?

See also:

martijnqui
martijnqui Question owner
more options

@User293 and @Cor-el Thanks for your responds. But I do not prefer to edit settings in an protected profile folder of users.

Is there another way?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options
martijnqui
martijnqui Question owner
more options

I have done tweaking for FireFox before within following files:

C:\Program Files (x86)\Mozilla Firefox\defaults\pref\local-settings.js and C:\Program Files (x86)\Mozilla Firefox\mozilla.cfg

Is there someway I could configure a workaround within the files above? For example disable certificate check for an specific FQDN or for intranet websites?

Kind regards, Martijn

martijnqui
martijnqui Question owner
more options

Chosen Solution

I fixed the issue with manual below:

http://community.spiceworks.com/how_to/15158-firefox-trust-a-local-certificate-authority-for-all-users-and-computers