Configuring Firefox ESR v52 on Mac OS

от Infonotary
Версия от 13:43, 12 декември 2018 на Inskushev (Беседа | приноси)

(разл) ←По-стара версия | преглед на текущата версия (разл) | По-нова версия→ (разл)
Направо към: навигация, търсене

Before you proceed you must do

  • IMPORTANT WHEN USING THE PRODICTS OF MOZILLA!!!: When you use Mozilla prodsucts you must know, that it uses direct access to smart cards. When we install succesfully certificates in Mozilla Firefox or Thunderbird , WE MUST NOT delete them from there, because that way we will delete them from the smart card along the public and private keys!


YOU CAN DOWNLOAD FIREFOX ESR v52 FROM HERE

Install Infonotary certificate chain

Before you can start using the certificate, you must install the Infonotary certificate chain.

Certificate chain for certificates issued before 08.01.2018 - INotaryCertChain.p12.

Certificate chain for certificates issued after 08.01.2018 - InfoNotary_Qualified_eIDAS.p12


Start Firefox ESR. From the menu choose Preferences.

MenuFirefoxESR.png

Choose the tab Advanced, subsection Security, as it shown and click on View Certificates.

Advanced.jpg

Choose the tab Your certificates and click on Import.

MenuFirefoxquantum2cert.png

Specify the path to certification chain - INotaryCertChain.p12 or InfoNotary_Qualified_eIDAS.p12

ChoosecertMac.png

Leave the field blank and click OK.

MenuFirefoxMacEncryptPass.png

Newly installed certificates can be found in section Authorities.

MenuFirefoxquantum5cert.png

In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on Edit Trust. The easiest way to do this setting for the certificate "InfoNotary CSP Root" and/or "InfoNotary TSP Root" select three possible options. This will make all the InfoNotary trusted certificates for all operations.

MenuFirefoxMacESRTrust.png

Install software security module

In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.

Start Mozilla Firefox. From menu choose Preferences.

MenuFirefoxESR.png

Choose tab Advanced, then Security, as it is shown on the picture and click Security Devices.

Advanced.jpg

From here the procedure is analogical for all Mozilla applications.

To add a new device, select the Load

MenuFirefoxquantum2secdev.png

Change the name of the module (Module Name), as desired.

MenuFirefoxMacQuantumLoadModule.png


Select PKCS # 11 library corresponding to your smart card.

  • OpenSC - /Library/OpenSC/lib/opensc-pkcs11.so
  • Bit4ID - /Library/bit4id/pkcs11/libbit4ipki.dylib
  • Siemens - /usr/local/lib/libsiecap11.dylib


After you click OK, your smart card will appear in the list of available devices.

MenuFirefoxquantum4secdev.PNG