Confirm, administrator
5,526
edits
Changes
→Changing Root Certificate Trust Bit Settings
'''Important:''' Deleting a root certificate that is in the default root store is equivalent to turning off all of the trust bits for that root. Therefore, even though the root certificate will re-appear in the Certificate Manager, it will be treated as though you changed the trust bits of that root certificate to turn them all off.
== Importing a Root Certificate ==
Root certificates may be imported and their "trust bits" set for various purposes, so that the software in question can use the CA certificates to verify certificates for SSL servers, S/MIME email users, and digitally-signed code objects without having to ask users for further permission or information.
The following describes how to manually import a root certificate into your installation of Firefox and other Mozilla products.
'''Important:''' This change will be permanent, such that it can only be changed again by you. This change will not be affected by upgrading to newer versions of Mozilla software.
[[Firefox]]
# Open the '''Options/Preferences''' window:
#* On Windows: Pull down the '''Tools''' menu and select '''Options…'''
#* On Mac: Pull down the '''Firefox''' menu and select '''Preferences...'''
#* On Linux: Pull down the '''Edit''' menu and select '''Preferences'''
# Select '''Advanced'''
# Select '''Encryption'''
# Click on '''View Certificates''' to open the '''Certificate Manager'''
# Select '''Authorities'''
#* Note: The root certificates with "Builtin Object Token" as the Security Device are the root certificates that are included by default in Mozilla products.
# Click on '''Import...'''
# Select the file of the Root Certificate that you want to import
# Select/Unselect the check-boxes indicating the trust bits, then click on '''OK'''
# Click on '''OK''' in the '''Certificate Manager'''
# Close the '''Options/Preferences''' window
[[Thunderbird]]
# Open the '''Options/Preferences''' window:
#* On Windows: Pull down the '''Tools''' menu and select '''Options…'''
#* On Mac: Pull down the '''Thunderbird''' menu and select '''Preferences...'''
#* On Linux: Pull down the '''Edit''' menu and select '''Preferences'''
# Select '''Advanced'''
# Select '''Certificates'''
# Click on '''View Certificates''' to open the '''Certificate Manager'''
# Select '''Authorities'''
#* Note: The root certificates with "Builtin Object Token" as the Security Device are the root certificates that are included by default in Mozilla products.
# Click on '''Import...'''
# Select the file of the Root Certificate that you want to import
# Select/Unselect the check-boxes indicating the trust bits, then click on '''OK'''
# Click on '''OK''' in the '''Certificate Manager'''
# Close the '''Options/Preferences''' window
[[SeaMonkey]]
# Open the '''Preferences''' window:
#* On Windows: Pull down the '''Edit''' menu and select '''Preferences'''
#* On Mac: Pull down the '''SeaMonkey''' menu and select '''Preferences...'''
#* On Linux: Pull down the '''Edit''' menu and select '''Preferences'''
# Select '''Privacy & Security'''
# Select '''Certificates'''
# Click on '''Manage Certificates''' to open the '''Certificate Manager'''
# Select '''Authorities'''
#* Note: The root certificates with "Builtin Object Token" as the Security Device are the root certificates that are included by default in Mozilla products.
# Click on '''Import...'''
# Select the file of the Root Certificate that you want to import
# Select/Unselect the check-boxes indicating the trust bits, then click on '''OK'''
# Click on '''OK''' in the '''Certificate Manager'''
# Close the '''Preferences''' window
# Close and restart SeaMonkey
== Changing Root Certificate Trust Bit Settings ==
Root certificates that are included by default have their "trust bits" set for various purposes, so that the software in question can use the CA certificates to verify certificates for SSL servers, S/MIME email users, and digitally-signed code objects without having to ask users for further permission or information.
The following describes how to change these settings in your installation of Firefox and Thunderbirdother Mozilla products.
'''Important:''' This change will be permanent, such that it can only be changed again by you. This change will not be affected by upgrading to newer versions of Mozilla software.
