How to add the Kaspersky Endpoint Security for Windows root certificate to the Mozilla Firefox or Thunderbird certificate storage
This article concerns:
- Kaspersky Endpoint Security 12.0.0 for Windows (version 12.0.0.465)
- Kaspersky Endpoint Security 11.11.0 for Windows (version 11.11.0.452)
- Kaspersky Endpoint Security 11.10.0 for Windows (version 11.10.0.399)
- Kaspersky Endpoint Security 11.9.0 for Windows (version 11.9.0.351)
- Kaspersky Endpoint Security 11.8.0 for Windows (version 11.8.0.384)
- Kaspersky Endpoint Security 11.7.0 for Windows (version 11.7.0.669)
- Kaspersky Endpoint Security 11.6.0 for Windows (version 11.6.0.394)
- Kaspersky Endpoint Security 11.5.0 for Windows (version 11.5.0.590)
With the help of the root certificate Kaspersky Endpoint Security for Windows deciphers and analyzes the encrypted traffic. The root certificate is added to the OS certificate storage upon the application installation.
Mozilla Firefox and Thunderbird use their own certificate storage. To avoid errors related to the control of encrypted traffic, Kaspersky Endpoint Security for Windows reconfigures Mozilla Firefox and Thunderbird to make them use not theirs storages but the system certificate storage as well.
If you disable this option in the application settings, add the Kaspersky root certificate to the Mozilla Firefox and Thunderbird certificate storage manually. Otherwise the applications will be unable to open HTTPS-pages.
How to add the Kaspersky root certificate to the Mozilla Firefox or Thunderbird certificate storage
- Open Control Panel → Network and Internet. Select Manage browser add-ons in the Internet Options section.
- Go to the Content tab and click Certificates.
- Go to the Trusted Root Certification Authorities tab, select the Kaspersky Endpoint Security for Windows root certificate and click Export.
- Finish the export with the help of the Certificate Export Wizard.
- Click Next → Next, leave the export settings default.
- In the File name field, enter the full path to the folder to which you want to export the certificate. Enter any name for the file with the .cer extension. For example: С:\Users\Administrator\Documents\Kaspersky Lab.cer
-
Click Next.
-
- Click Done.
- Open Mozilla Firefox.
- Click
→ Settings.
- Open Privacy & Security, scroll down and click View Certificates.
- Go to the Authorities tab and click Import.
- Select the certificate you got at step 5.
- Select Trust this CA to identify websites and Trust this CA to identify email users. Click OK.
The Kaspersky root certificate will be imported to the Mozilla Firefox and Thunderbird storage.
How to reconfigure Mozilla Firefox and Thunderbird to make them use the system certificate storage
- In the Mozilla Firefox address bar, enter about:config.
- Click Accept the Risk and Continue.
- In the search field, enter security.enterprise_roots.enabled. Click
to toggle the value to true.
- Make sure that the value of the string is true. If the switch is grayed out, the Kaspersky application settings are already applied in the browser and no additional actions are required.
Mozilla Firefox and Thunderbird will be reconfigured to use the system certificate storage.
