I recently bought myself a Smartcard-HSM (which is of importance here because it doesn't allow export or import of private keys).

Now I've used the "famous" XCA application to create a small CA on the Smartcard (created root CA key + cert annd client key + cert).

I've imported the root-certificate into Firefox (38.0.5) with all trust bits disabled (the "CA" is meant to issue client-certs only).

Now if I go into Settings -> Advanced -> Certificates -> Show Certificates, it prompts me for my UserPIN (which I enter correctly) and then just shows me the certificates created previously in software and not the two private keys which should be on the token.

So how can I make my private keys / certificates of my own CA usable in Firefox?


I've resolved the error.

After a restart of Firefox / Windows the certificates were found by Firefox and available to me for standard operations.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.