Home » Public Key Infrastructure/Enabling (PKI/PKE) » End Users » Getting Started » Firefox on Linux

To configure Firefox to communicate with the CAC, follow these steps to install the DoD root and intermediate certification authority (CA) certificates into the Firefox NSS trust store, load the CoolKey library, and ensure the Online Certificate Status Protocol (OCSP) is being used to perform revocation checking.
Install the DoD Root and Intermediate CA Certificates

  1. Download the DoD PKI PKCS#7 CA certificate bundle. Save the file locally. Extract the zip file and navigate to the extracted directory structure.
  2. Open Firefox.
  3. Click Edit > Preferences in the Firefox menu bar.
    4. Firefox menu
  4. In the Preferences window, go to Advanced > Certificates > View Certificates.
  5. Select the Authorities
  6. Click Import…
    7. Certificate Manager
  7. In the Import window, change the file type to All Files and then select Certificates_PKCS7_v<version>_DoD.der.p7b from the directory extracted in step 1. Click Open.
  8. In the Downloading Certificatewindow, check the following three checkboxes to trust the DoD Root CA 2 Certificate Authority:
    • Trust this CA to identify websites
    • Trust this CA to identify email users
    • Trust this CA to identify software developers
  9. Click OK.
    NOTE: All root and intermediate certificates will be imported. These certificates will show up under the “U.S. Government” heading in the Certificate Manager. To verify the root certificate authority is trusted, select “DoD Root CA 2” and click the Edit Trust… button. All three checkboxes should be checked.
  10. Click OKto close the Certificate Manager
  11. Click Close to close the Firefox Preferences window.