Objective

Set up a GPO to force Firefox to use the Windows certificate store.

Steps

1. Use the ADMX template provided by Mozilla.

DOWNLOAD THE LATEST VERSION

2. Unzip the archive.

3. Copier les deux fichiers firefox.admx et mozilla.admx, ainsi que le répertoire fr-FR contenant les fichiers firefox.adml et mozilla.adml dans votre répertoire C:\Windows\SYSVOL\sysvol\<votre nom de domaine>\Policies\PolicyDefinitions.

4. Create a user GPO dedicated to Firefox.

4.1 Open the "Group Policy Manager" tool.

4.2 Creating and naming a GPO object.

4.3 Modify the Firefox GPO, then Certificate settings.

4.4 Enable import of company root certificates.

Results

1. Force the GPO on a user workstation to verify its correct application: gpupdate /force or, if necessary, restart the user session.

2. Check that your Firefox browser settings are correct. Open Firefox, enter about:config in the address bar, and if necessary accept the warnings. If all has gone well, the security.entreprise_roots.enabled option should be greyed out and set to true.

Sources

• https://github.com/mozilla/policy-templates/releases
• https://github.com/mozilla/policy-templates#proxy
• https://support.mozilla.org/fr/kb/setting-certificate-authorities-firefox