THUNDERBIRD | GPO or Registry | Certificate handling

Basics:

https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx

 

Via Registry:

HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = "mycert.der"

or

Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = "\\MYHOST\Users\username\mycert.pem"

or

Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = "C:\CERTS\mycert.pem"

as REG_EXPAND_SZ.

If you define only a file name without a path Thunderbird searches

%USERPROFILE%\AppData\Local\Thunderbird\Certificates
%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates

for your files.

Via GPO:

Use the user branch. Define full path file location or file names only.

If you specify only a file name Thunderbird searches

%USERPROFILE%\AppData\Local\Thunderbird\Certificates
%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates

ATTENTION:

With version 78.3.2 i run into problems importing binary (DER) certificates. I solved this case by using ASCII (PEM) certs.

I debugged this using STRG+SHIFT+J (Developer tools error console).

 

 

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.