1

We have a website that authenticates the user using a certificate. The certificate is installed by the IT department and I can't export it with the private key.

When I navigate the website with Chrome or MS Edge they prompt me to choose the certificate I want to use. I assume they query the Windows certificate storage for that. The Firefox doesn't "see" that certificate.

How can I use the certificate authentication with Firefox?

6

If you want to use a certificate installed in the Windows certificate store you need some kind of connector between the CryptoAPI provided by Windows and the PKCS standard used by Firefox. One example is P11CAPI that was originally intended for smartcards but should work for any installed certificate in the Windows certificate store.

Once you download the DLL that matches the bitness of Firefox you use follow the instructions in the above link (paraphrased in part below) to use the Windows certificate store in Firefox:

  1. Inside Firefox, go to Options → Privacy & Security → Certificates → Security Devices → Load
  2. Enter a module name (I recommend "p11-capi") and browse to the .DLL file.
  3. Click OK enough times to close out the various dialogs that have been opened.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.