Using your digital signature in Mozilla Firefox for Windows: Разлика между версии

От Infonotary
Направо към навигацията Направо към търсенето
Редакция без резюме
Редакция без резюме
 
(Не са показани 11 междинни версии от 2 потребители)
Ред 1: Ред 1:
== Before you proceed you must do ==
== Before you proceed you must do ==


* If you have smart card reader and smart card from Infonotary, but you didn't install the drivers for them do the following [[Installation of smart card reader and smart card drivers in Windows]]
* If you have smart card reader and smart card from InfoNotary, but you didn't install the drivers for them do the following [[Installation of smart card reader and smart card drivers in Windows]]


* '''IMPORTANT WHEN USING THE PRODICTS OF MOZILLA!!!:''' When you use Mozilla prodsucts you must know, that it uses direct access to smart cards. When we install succesfully certificates in Mozilla Firefox or Thunderbird , '''WE MUST NOT''' delete them from there, because that way we will delete them from the smart card along the public and private keys!
* '''IMPORTANT :''' In the information message "Please enter the '''master password for InfoNotary'''", enter your PIN code.


'''The prefered way to configure Firefox and Thunderbird is through [https://addons.mozilla.org/firefox/addon/infonotary-configurator-for-mo/ InfoNotary Configurator for Mozilla]. After the extension is installed everything will be configured''' If you prefer to do it manually follow the steps:
* '''IMPORTANT :''' Firefox and Thunderbird use direct access to the smart card. When you have successfully installed your certificates, you '''SHOULD NOT''' delete them from there, as this will also delete the certificate, along with the private and public keys on the smart card. After that, the certificate cannot be restored and a new one must be issued.


== Install Infonotary certificate chain ==
* '''IMPORTANT :''' In order to use your certificate with Firefox and Thunderbird, the reader must be on your computer before opening the program.


Before you can start using the certificate, you must install the Infonotary certificate chain.


Certificate chain for certificates, issued before 08.01.2018 - [http://www.infonotary.com/site/files/INotaryCertChain.p12 INotaryCertChain.p12].
== Install InfoNotary certificate chain ==


Certificate chain for certificates, issued after 08.01.2018 - [http://www.infonotary.com/site/files/InfoNotary_Qualified_eIDAS.p12 InfoNotary_Qualified_eIDAS.p12]


Start '''Mozilla Firefox'''. From the menu, choose '''Options'''.


* '''[[Configuring Firefox ESR v52]]'''
[[Файл:MenuFirefoxquantum.png|350px]]
 
From '''Privacy & Security''', choose '''View Certificates'''.
 
[[Файл:MenuFirefoxquantum1cert.png|750px]]
 
Choose the tab '''Your certificates''' and click on '''Import'''.
 
[[Файл:MenuFirefoxquantum2cert.png|750px]]
 
Specify the path to certification chain - [http://repository.infonotary.com/ra/InfoNotary_Qualified_eIDAS.p12 InfoNotary_Qualified_eIDAS.p12]


<!--You can find Infonotary root certificates in the Installation CD in folder “certificates” or on the web site [http://www.infonotary.com/site/files/INotaryCertChain.p12 INotaryCertChain.p12].
[[Файл:MenuFirefoxquantum3cert.png|500px]]


Start Mozilla Firefox. From '''Tools''' choose '''Options'''.
Leave the field blank and click '''OK'''.


[[Файл:ToolsOption.jpg]]
[[Файл:MenuFirefoxquantum4cert.png]]


Choose the tab '''Advanced''', subsection '''Security''', as it shown and click on '''View Certificates'''.
Newly installed certificates can be found in section '''Authorities'''.


[[Файл:Advanced.jpg]]
[[Файл:MenuFirefoxquantum5cert.png|750px]]


From here the process is analogical for all Mozilla applications.  
In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on '''Edit Trust'''. The easiest way to do this setting for the certificate <!--"'''InfoNotary CSP Root'''" and/or -->"'''InfoNotary TSP Root'''" is to select the two possible options. This will make all the InfoNotary trusted certificates for all operations.


{{Шаблон:Installation_of_Infonotary_Certificate_Chain_for_Mozilla_applications}}
[[Файл:MenuFirefoxquantum6cert.png]]


== Install software security module ==
== Install software security module ==
Ред 36: Ред 45:
In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.
In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.


Start Mozilla Firefox. From '''Tools''' choose '''Options'''.
Start Firefox Quantum. From the menu, choose '''Options'''.
 
[[Файл:MenuFirefoxquantum.png|350px]]
 
From '''Privacy & Security''', choose '''Security Devices'''.
 
[[Файл:MenuFirefoxquantum1secdev.png|750px]]
 
To add a new device, choose '''Load'''.
 
[[Файл:MenuFirefoxquantum2secdev.png|750px]]
 
Change the name of the module (Module Name), as desired.
 
[[Файл:MenuFirefoxquantum3secdev.png]]
 
Select PKCS # 11 library corresponding to your smart card.
 
* '''IDPrime''' - C:\WINDOWS\system32\eTPKCS11.dll


[[Файл:ToolsOption.jpg]]
* '''Siemens''' - C:\WINDOWS\system32\siecap11.dll


Choose tab '''Advanced''', then '''Security''', as it is shown on the picture and click '''Security Devices'''.
* '''Charismathics''' - C:\WINDOWS\system32\cmP11.dll


[[File:Advanced.jpg]]
* '''Bit4id''' - C:\WINDOWS\system32\bit4ipki.dll
 
In case you use 64 bits version of Firefox or Thunderbird and Charismathics smart card, path to library is C:\WINDOWS\system32\cmP1164.dll.
 
After you click '''OK''', your smart card will appear in the list of available devices.
 
[[Файл:MenuFirefoxquantum4secdev.PNG|750px]]
 
 
 
<!--== Configuring Mozilla Firefox for Windows==
* '''[[Configuring Firefox ESR v52]]'''
* '''[[Configuring Firefox Quantum]]'''-->


From here the procedure is analogical for all Mozilla applications.


{{Install software security module in Mozilla applications}}-->


[[Категория:Инсталация и използване на удостоверения за електронен подпис]]
[[Категория:Инсталация и използване на удостоверения за електронен подпис]]
[[Категория:Windows]]
[[Категория:Windows]]
[[Категория:Помощ]]
[[Категория:Помощ]]

Текуща версия към 09:34, 7 септември 2023

Before you proceed you must do

  • IMPORTANT : In the information message "Please enter the master password for InfoNotary", enter your PIN code.
  • IMPORTANT : Firefox and Thunderbird use direct access to the smart card. When you have successfully installed your certificates, you SHOULD NOT delete them from there, as this will also delete the certificate, along with the private and public keys on the smart card. After that, the certificate cannot be restored and a new one must be issued.
  • IMPORTANT : In order to use your certificate with Firefox and Thunderbird, the reader must be on your computer before opening the program.


Install InfoNotary certificate chain

Start Mozilla Firefox. From the menu, choose Options.

MenuFirefoxquantum.png

From Privacy & Security, choose View Certificates.

MenuFirefoxquantum1cert.png

Choose the tab Your certificates and click on Import.

MenuFirefoxquantum2cert.png

Specify the path to certification chain - InfoNotary_Qualified_eIDAS.p12

MenuFirefoxquantum3cert.png

Leave the field blank and click OK.

MenuFirefoxquantum4cert.png

Newly installed certificates can be found in section Authorities.

MenuFirefoxquantum5cert.png

In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on Edit Trust. The easiest way to do this setting for the certificate "InfoNotary TSP Root" is to select the two possible options. This will make all the InfoNotary trusted certificates for all operations.

MenuFirefoxquantum6cert.png

Install software security module

In order to use you digital certificate with Mozilla based applications like Firefox, Thunderbird etc., you must register PKCS#11 module, for your smart card. It is nessesary to install the drivers for the smart card before that.

Start Firefox Quantum. From the menu, choose Options.

MenuFirefoxquantum.png

From Privacy & Security, choose Security Devices.

MenuFirefoxquantum1secdev.png

To add a new device, choose Load.

MenuFirefoxquantum2secdev.png

Change the name of the module (Module Name), as desired.

MenuFirefoxquantum3secdev.png

Select PKCS # 11 library corresponding to your smart card.

  • IDPrime - C:\WINDOWS\system32\eTPKCS11.dll
  • Siemens - C:\WINDOWS\system32\siecap11.dll
  • Charismathics - C:\WINDOWS\system32\cmP11.dll
  • Bit4id - C:\WINDOWS\system32\bit4ipki.dll

In case you use 64 bits version of Firefox or Thunderbird and Charismathics smart card, path to library is C:\WINDOWS\system32\cmP1164.dll.

After you click OK, your smart card will appear in the list of available devices.

MenuFirefoxquantum4secdev.PNG