Configuring Firefox ESR v52

Before you proceed you must do

• If you have smart card reader and smart card from Infonotary, but you didn't install the drivers for them do the following Installation of smart card reader and smart card drivers in Windows

• IMPORTANT WHEN USING THE PRODICTS OF MOZILLA!!!: When you use Mozilla prodsucts you must know, that it uses direct access to smart cards. When we install succesfully certificates in Mozilla Firefox or Thunderbird , WE MUST NOT delete them from there, because that way we will delete them from the smart card along the public and private keys!

The prefered way to configure Firefox and Thunderbird is through InfoNotary Configurator for Mozilla. After the extension is installed everything will be configured If you prefer to do it manually follow the steps:

Install Infonotary certificate chain

Before you can start using the certificate, you must install the Infonotary certificate chain

Certificate chain for certificates, issued before 08.01.2018 - INotaryCertChain.p12.

Certificate chain for certificates, issued after 08.01.2018 - InfoNotary_Qualified_eIDAS.p12

Start Mozilla Firefox. From Tools choose Options.

Choose the tab Advanced, subsection Security, as it shown and click on View Certificates.

From here the process is analogical for all Mozilla applications.

Click the Import button and specify the path to certification chain - InfoNotary_Qualified_eIDAS.p12

Leave the field blank and click OK.

Upon successful installation of the certification chain message appears:

Newly installed certificates can be found in section "Authorities":

In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on Edit Trust. The easiest way to do this setting for the certificate "InfoNotary TSP Root" is to select all three possible options. This will make all the InfoNotary trusted certificates for all operations.

Install software security module

In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.

Start Mozilla Firefox. From Tools choose Options.

Choose tab Advanced, then Security, as it is shown on the picture and click Security Devices.

From here the procedure is analogical for all Mozilla applications.

To add a new device, select the Load

Change the name of the module (Module Name), as desired.

Select PKCS # 11 library corresponding to your smart card.

• Siemens - C:\WINDOWS\system32\siecap11.dll

• Charismathics - C:\WINDOWS\system32\cmP11.dll

• Bit4id - C:\WINDOWS\system32\bit4ipki.dll

In case you use 64 bits version of Firefox or Thunderbird and Charismathics smart card, path to library is C:\WINDOWS\system32\cmP1164.dll.

After you click OK, your smart card will appear in the list of available devices.