This article covers the two methods for installing PKCS 11 modules into Firefox.

Users can use the preferences dialog to install or remove PKCS 11 module.

Extensions can programmatically manage PKCS 11 modules using the nsIPKCS11 programming interface.

NOTE: there is currently a bug in Firefox where international characters may cause problems.

E-mail Im okay with Mozilla handling my info as explained in this Privacy Policy.

Sign up now Hide Newsletter Sign-up MDN Web Docs Web Technologies Learn Web Development About MDN Feedback About MDN Web Docs Store Contact Us Firefox MDN Mozilla 2005- 2020 Mozilla and individual contributors.

If you havent already created an account, you will be prompted to do so after signing in.

If the certificates do not appear in the list, please see the note below.

If your certificates are not in the list and you are using other middleware, you can contact your CCSA for more information on the middleware requirements for your organization.

You can find their contact information on our Contact Us tab.

Please wait until you see a confirmation dialog indicating the tool is finished.

Before proceeding, try to ensure the latest version of ActivClient is installed by going to the ActivClient website to check the latest version.

Before installing the latest version, please uninstall any previous versions of ActivClient.

If using an older version of ActivClient, these instructions will assist with proper configuration.

Browse to the location of the ActivClient PKCS11 library, acpkcs211.dll.

However, these instructions can be used to confirm proper configuration for older versions of ActivClient.

Also ensure When an OCSP server connection fails, treat the certificate as invalid is checked.

At this time, the best advice for obtaining a card reader is through working with your home component.

In addition, please review the DoD CAC Reader Specifications for more information regarding card reader requirements.

In order for your machine to recognize your CAC certificates and DoD websites as trusted, the installer will load the DoD CA certificates on OS X.

Please refer to this page for specific installation instructions.

This can make it appear that your certificates are issued by roots other than the DoD Root CA 2 and can prevent access to DoD websites.

Most CACs are supported by the Smartcard Services package, however Oberthur ID One 128 v5.5 CACs are not.

Third party middleware is available that will support these CACS; two such options are Thursby Softwares PKard and Centrifys Express for Smart Card.

Mozilla Firefox For Mac And Using Cac