Certificates

Install and manage certificates in Firefox.

Values

Certificates accepts one or more of the following keys:

ImportEnterpriseRoots (boolean): Trust certificates that have been added to the operating system certificate store by a user or administrator.

ImportEnterpriseRoots only works on Windows and macOS. For Linux discussion, see bug 1600509.
Install (array of strings): Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
- Windows
  - %USERPROFILE%\AppData\Local\Mozilla\Certificates
  - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
- macOS
  - /Library/Application Support/Mozilla/Certificates
  - ~/Library/Application Support/Mozilla/Certificates
- Linux
  - /usr/lib/mozilla/certificates
  - /usr/lib64/mozilla/certificates
  - ~/.mozilla/certificates
A fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.

If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (\\) which means that for UNC paths, you need to escape both (\\\\). If you use group policy, you only need one backslash.

Certificates are installed using the trust string CT,CT,.

Binary (DER) and ASCII (PEM) certificates are both supported.

Examples

{
  "policies": {
    "Certificates": {
      "ImportEnterpriseRoots": true,
      "Install": [
        "cert1.der",
        "/home/username/cert2.pem"
      ]
    }
  }
}

JSON schema

{
  "type": "object",
  "properties": {
    "ImportEnterpriseRoots": {
      "type": "boolean"
    },
    "Install": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  }
}

Windows (GPO)

Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"

macOS

<dict>
  <key>Certificates</key>
  <dict>
    <key>ImportEnterpriseRoots</key>
    <true/> | <false/>
    <key>Install</key>
    <array>
      <string>cert1.der</string>
      <string>/Users/username/cert2.pem</string>
    </array>
  </dict>
</dict>

Compatibility

	Firefox	Firefox ESR	Firefox Enterprise
`Certificates`	Available since 60	Available since 60	Available since 149
`ImportEnterpriseRoots`¹	Available since 60	Available since 60	Available since 149
`Install`	Available since 64	Available since 60.4	Available since 149

macOS support was added in Firefox 63 / Firefox ESR 68.

CCK2 Equivalent: certs.ca (Install)
OMA-URI: Certificates
Preferences Affected: security.enterprise_roots.enabled