Fermilab Computing Division
Search

Installing the PKCS #11 Module for Mozilla Products

When you obtain a KCA certificate with NetIdMgr, it places the certificate in the default location for storing personal certificates, the Windows "My" Certificate Store. Applications that make use of the Windows certificate store will be able to immediately use the certificate. However, the Mozilla family of products don't use the Windows certificate store by default.

NetIdMgr has a PKCS #11 module for Mozilla products that exposes the Windows certificate store and allows Mozilla products to use these certificates transparently. However, you must manually add the module to each Mozilla application that needs to use your KCA certificates.

Note: The PKCS #11 module exposes all the certificates in your Windows certificate store, not just the KCA certificates.

To install the PKCS #11 module for Firefox 2.x:

  1. In Firefox, click Tools, then click Options.... The Options dialog appears.

  2. Click the Advanced icon. The Advanced Options pane appears.

    he advanced options dialog in Firefox with the Encryption tab selected

    (click to enlarge)

  3. Click the Encryption tab.

  4. Click Security Devices.

  5. Click Load.

    Security Device Manager dialog in Firefox

    (click to enlarge)

  6. In the Module filename box, type C:\Program Files\Secure Endpoints\KCA Plugin\kpkcs11.dll and click OK to close the Options dialog box.

    Load PKCS#11 Device dialog box in Firefox

    (click to enlarge)

  7. Quit and restart Firefox.

  8. Test your certificate in Firefox using Fermilab's "Test My Certificate" page.

Written from Windows XP Professional. Information compiled and maintained by CSI Group.
Last modified on 2007 May 24.
Address comments about this page to csi-help@fnal.gov.