We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Get SEC_ERROR_UNKNOWN_ISSUER when FF is starting and open default https page

  • 3 replies
  • 1 has this problem
  • 18 views
  • Last reply by cor-el

more options

My home page in FF is https://portal.local/ Certificate is enterprise CA signed In windows cert storage root CA certinicate is present In FF setting security.enterprise_roots.enabled;true but when FF startting i have error SEC_ERROR_UNKNOWN_ISSUER. btw if i press F5 on this tab connection is established and i can see my home page. FF on start use internal cert storage ? This trouble start from FF 67.0 in FF 66.05 good work.

My home page in FF is https://portal.local/ Certificate is enterprise CA signed In windows cert storage root CA certinicate is present In FF setting security.enterprise_roots.enabled;true but when FF startting i have error SEC_ERROR_UNKNOWN_ISSUER. btw if i press F5 on this tab connection is established and i can see my home page. FF on start use internal cert storage ? This trouble start from FF 67.0 in FF 66.05 good work.

All Replies (3)

more options

Do you possibly have this root certificate installed in Firefox ?

Does it work if you install this certificate in Firefox and set the trust bit to make it work as a rot certificate ?

  • Options/Preferences -> Privacy & Security
    Certificates: View Certificates
more options

No. This root certificate not installed in FF Yes. If install our root cert in FF site on start FF working fine. But! I don't want use FF cert storage (security.enterprise_roots.enabled;true). In Windows cert storage this cert is installed via AD. When refreshing this page after 10-12 sec after start it's work fine. but on starting FF i have SEC_ERROR_UNKNOWN_ISSUER

more options

Only added certificates are imported if you set this pref.