[Mozilla Enterprise] Can't modify security.enterprise_roots.enabled to true

[Mike Kaply]

If the setting is true, this is probably a case of intermediate
certificates not being read by Firefox.

This bug has been opened:

https://bugzilla.mozilla.org/show_bug.cgi?id=1473573

Mike

On Mon, Nov 26, 2018 at 10:05 AM Sean Wang <Sean_Wang at symantec.com> wrote:

> Hi experts,
>
>
>
>         I tried to run cert_install.bat to modify the
> security.enterprise_roots.enabled to true on Firefox 63.
>
> Local-settings.js and umbrella.cfg are copied to the right place as the
> cert_install.bat does. Somehow some endpoints work but some fail. Do you
> have idea about any possibility for the unexpected result? Thank you.
>
>
>
> *Cert_install.bat*
>
>
>
> @echo off
>
>
>
> rd d:\Cert_tmp /S/Q
>
> md d:\Cert_tmp
>
> xcopy . d:\Cert_tmp /D/K/E/Y/C/I/H
>
> start "d:\Cert_tmp" certutil.exe -addstore Root .\fireglass.cer
>
> copy .\umbrella.cfg "C:\Program Files (x86)\Mozilla Firefox"
>
> copy .\umbrella.cfg "C:\Program Files\Mozilla Firefox"
>
> copy .\local-settings.js "C:\Program Files (x86)\Mozilla
> Firefox\defaults\pref"
>
> copy .\local-settings.js "C:\Program Files\Mozilla Firefox\defaults\pref"
>
>
>
> *umbrella.cfg*
>
>
>
> //
>
> lockPref("security.enterprise_roots.enabled", true);
>
>
>
>
>
> *local-settings.js*
>
>
>
> pref("general.config.obscure_value", 0);
>
> pref("general.config.filename", "umbrella.cfg");
>
>
>
>
>
> Best Regards,
>
>
>
> *Sean Wang*
>
> Sr. Systems Engineer, Taiwan, Symantec Corporation
>
> *Office*: +8862 8729 1328
>
> *Mobile*: +886 972 852 208
>
> Sean_Wang at symantec.com
>
>
>
>
>
>
> _______________________________________________
> Enterprise mailing list
> Enterprise at mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-request at mozilla.org with a subject of "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20181126/bbe0f160/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6785 bytes
Desc: not available
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20181126/bbe0f160/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6785 bytes
Desc: not available
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20181126/bbe0f160/attachment-0005.png>