KB No. 04: Using Firefox with Olfeo SaaS
Description
This knowledge base article will guide you through configuring Firefox for optimal use with the Olfeo SaaS Mail Agent.
Background
In order for traffic from Firefox to be properly covered by Olfeo SaaS, HTTPS traffic must be decrypted. To do this, Olfeo SaaS issues entity certificates on behalf of the sites visited. In order for the TLS security chain to be respected, Firefox must have the Olfeo SaaS Certification Authority (CA) certificate to confirm that the entity certificates issued are valid because they were issued by a certification authority (CA) that Firefox "knows."
This CA certificate is installed (and updated if necessary) by the Olfeo SaaS Mail Agent in the OS certificate store.
By default, Firefox uses its own certificate store.
Without specific instructions, Firefox will not recognize the CA certificate and the connection will fail with a Firefox error message such as ERR_TUNNEL_CONNECTION_FAILED (or similar).
The challenge here is to ensure that Firefox uses the Windows certificate store.
Prerequisites
You must:
- Have a Windows computer with Firefox installed and an account with administrator rights on that computer.
Procedure
- Open Firefox
- Type about:config in the address bar
- If necessary, accept the warnings.
- Enter enterprise_roots.enabled in the preferences search bar to add a new Boolean configuration item and set its value to 'true'.
Tags: Firefox, Agent, ERR_TUNNEL, UC-04