Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Building Firefox MSI with Root CAs, ntlm settings, and Add-ons disabled

  • 4 ŋuɖoɖowo
  • 2 masɔmasɔ sia le wosi
  • 6 views
  • Nuɖoɖo mlɔetɔ jr_admin

jr_admin
jr_admin
more options

I need to build a Firefox MSI that has one Root CA automatically installed, some NTLM settings configured, and Add-ons disabled by default with users unable to turn it back on. 

I know that Add-ons can be disabled with Firefox running in safe mode.  I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue.  Otherwise I know that I can create a config file for the NTLM settings.

However, I am very stumped with how I would configure the Root CA to automatically be a trusted root. I am going to try monitoring while I add change all of these settings, but I am concerned that the package that I build will not be complete.

I am completely stumped about how to turn off Add-ons. If it is an about:config setting, is there a way to lock down about:config?

Thank you very much for the help guys, I'm always impressed at the level of intelligence found throughout the Mozilla forums.

I need to build a Firefox MSI that has one Root CA automatically installed, some NTLM settings configured, and Add-ons disabled by default with users unable to turn it back on. I know that Add-ons can be disabled with Firefox running in safe mode. I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue. Otherwise I know that I can create a config file for the NTLM settings. However, I am very stumped with how I would configure the Root CA to automatically be a trusted root. I am going to try monitoring while I add change all of these settings, but I am concerned that the package that I build will not be complete. I am completely stumped about how to turn off Add-ons. If it is an about:config setting, is there a way to lock down about:config? Thank you very much for the help guys, I'm always impressed at the level of intelligence found throughout the Mozilla forums.

Ŋuɖoɖo si wotia

you might have look at http://stackoverflow.com/questions/1435000/programmatically-install-certificate-into-mozilla

Xle ŋuɖoɖo sia le goya me 👍 1

All Replies (4)

philipp
philipp
  • Moderator
more options

hello, you can disable the possibility to install addons with the method described at http://kb.mozillazine.org/Locking_preferences and this line in the configuration file: 

lockPref("xpinstall.enabled", false);
jr_admin
jr_admin Biabia la
more options

Awesome. Thank you! Do you know how any way to automatically import a trusted certificate?

philipp
philipp
  • Moderator
more options

Ɖɔɖɔɖo si wotia

you might have look at http://stackoverflow.com/questions/1435000/programmatically-install-certificate-into-mozilla

jr_admin
jr_admin Biabia la
more options

philipp, you've been an amazing help. Thank you so much.