KB No. 2791: CONFIGURING FIREFOX TO USE THE WINDOWS CERTIFICATE STORE VIA GPO
Objective
Set up a GPO to force Firefox to use the Windows certificate store.
Steps
1. Use theADMX templateprovided by Mozilla.
DOWNLOAD THE LATEST UPDATED VERSION
2. Unzip the archive.
3. Copy the two files,firefox.admxandmozilla.admx, as well as thefr-FRfolder containing the filesfirefox.admlandmozilla.adml, to yourC:\Windows\SYSVOL\sysvol\Policies\PolicyDefinitions folder.
4. Create a user GPO dedicated to Firefox.
4.1 Open the "Group Policy Management" tool.
4.2 Create and name a GPO object.
4.3 Edit the "Firefox" GPO, then Certificate Settings.
4.4 Enableimporting enterprise root certificates.
Result
1. Force the GPO on a user workstation to verify that it is applied correctly:gpupdate /forceor possiblyrestart the user session.
2. Check that the settings are correct in the Firefox browser. Open Firefox, enter about:config in the address bar, and accept any warnings if necessary. If everything went well, thesecurity.entreprise_roots.enabledoption should be grayed out and set totrue.
Sources