Add internal server to exception-list "Server" for many clients

[Malte Riemer]

Hi,

 

we would like to add an internal server with a self-signed certificate to the exception list, so that there is no error displaying while entering that website. I know, it’s not the best way, but we have no other possibilities yet.

 

Here are the steps to fix it on Firefox manually:

1. Open Firefox and go to `about:config`.
2. Search for the preference `security.enterprise_roots.enabled`.
3. Set the value of this preference to `true`.
4. In Firefox, go to `about:preferences#privacy > Certificates > View Certificates`.
5. Click the "Servers" tab and click on "Add Exception."
6. Add the URL plus the port, like this: `interna...@blabla.com:1234`.
7. Restart the browser.

 

This is a way to do it manually, but we have to do it for about over 6000 clients. Is there a way to do it via Win-Group-Policies? I did not find something for that.

If not can I do it via editing an providing the user.js for every profile?

 

Kind regards

Malte

Der Schutz Ihrer personenbezogenen Daten ist der Stadt Münster ein wichtiges Anliegen. Die Datenschutzerklärung finden Sie unter folgendem Link: https://www.stadt-muenster.de/datenschutz.html

[Mike Kaply]

There's no way to do it via policy, but you can put a file into the profile directory.

If you look in the profile after you add the override, there is a file called cert_override.txt.

If you put this file in the profile for the other clients, the cert will be overridden.

Mike

--
You received this message because you are subscribed to the Google Groups "enter...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enterprise+...@mozilla.org.
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/a51908541bac4bfa8bdc89a1f42c88a1%40citeq.de.