MozillaZine

Security Devices for 1500 clients

User Help for Mozilla Firefox
grishkah
 
Posts: 3
Joined: February 13th, 2018, 10:00 am

Post Posted February 13th, 2018, 10:18 am

I need to add CAC reader support for Firefox on approximately 1500 Windows clients. Manually we would add a module pointing to the ActivClient dlls from Options->Advanced->Certificates->Security Devices. Our other preferences are pushed out through mozilla.cfg via GPO but there doesn't seem to be an option for configuring security devices there. The closest related topic I've found was this one: http://forums.mozillazine.org/viewtopic.php?f=7&t=2207387. I don't have enough Firefox knowledge to take the code provided there and make it useful to me. It's also from 2011 so not sure if there may be other options by now. Any ideas?

therube

User avatar
 
Posts: 19040
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Post Posted February 13th, 2018, 12:06 pm

(I'd have no clue as to answers, but...)

Is CAC Common Access Card?
What version of FF will this be for?
Will (does) this device work in FF 58?
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript

grishkah
 
Posts: 3
Joined: February 13th, 2018, 10:00 am

Post Posted February 13th, 2018, 1:13 pm

therube wrote:Is CAC Common Access Card?
What version of FF will this be for?
Will (does) this device work in FF 58?


Yes, DoD Common Access Cards being accessed via ActivID ActivClient 7.1. The FF version we currently get is 52.6.0. Not sure about version 58, we only get what the DoD pushes to us. Manual configuration of the security device works in our version.

dickvl

User avatar
 
Posts: 52395
Joined: July 18th, 2005, 3:25 am

Post Posted February 13th, 2018, 11:04 pm


grishkah
 
Posts: 3
Joined: February 13th, 2018, 10:00 am

Post Posted February 14th, 2018, 8:19 am



Thanks but that doesn't solve the issue at hand. That loads the DoD root certs into the FF NSS store, which doesn't help here. I need to be able to load the ActivClient (smart card middleware) DLL as a security device module across all clients in the enterprise in some sort of scripted fashion or a pushed config file. Otherwise FF does not prompt the user to select a smart card certificate when authenticating to a DoD website.

Return to Firefox Support


Who is online

Users browsing this forum: Energise and 12 guests