mirror of
https://github.com/rn10950/RetroZilla.git
synced 2024-07-08 02:10:14 +02:00
416 lines
18 KiB
HTML
416 lines
18 KiB
HTML
<?xml version="1.0" encoding="utf-8"?>
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
|
|
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"[
|
|
<!ENTITY % brandDTD SYSTEM "chrome://branding/locale/brand.dtd" >
|
|
%brandDTD;
|
|
]>
|
|
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>Certificate Manager</title>
|
|
<link rel="stylesheet" href="chrome://help/locale/helpFileLayout.css"
|
|
type="text/css"/>
|
|
</head>
|
|
<body>
|
|
|
|
<div class="boilerPlate">This document is provided for your information only.
|
|
It may help you take certain steps to protect the privacy and security of
|
|
your personal information on the Internet. This document does not, however,
|
|
address all online privacy and security issues, nor does it represent a
|
|
recommendation about what constitutes adequate privacy and security
|
|
protection on the Internet.</div>
|
|
|
|
<h1 id="certificate_manager">Certificate Manager</h1>
|
|
|
|
<p>This section describes how to use the Certificate Manager. For more
|
|
information on using certificates, see <a href="using_certs_help.xhtml">Using
|
|
Certificates</a>.</p>
|
|
|
|
<p>If you are not currently viewing the Certificate Manager window, follow
|
|
these steps:</p>
|
|
|
|
<ol>
|
|
<li>Open the <span class="mac">&brandShortName;</span>
|
|
<span class="noMac">Edit</span> menu and choose Preferences.</li>
|
|
<li>Under the Privacy & Security category, click Certificates. (If no
|
|
subcategories are visible, double-click Privacy & Security to expand
|
|
the list.)</li>
|
|
<li>Click Manage Certificates.</li>
|
|
</ol>
|
|
|
|
<div class="contentsBox">In this section:
|
|
<ul>
|
|
<li><a href="#your_certificates">Your Certificates</a></li>
|
|
<li><a href="#other_peoples_certificates">Other People's
|
|
Certificates</a></li>
|
|
<li><a href="#web_site_certificates">Website Certificates</a></li>
|
|
<li><a href="#authorities">Authorities</a></li>
|
|
</ul>
|
|
</div>
|
|
|
|
<h2 id="your_certificates">Your Certificates</h2>
|
|
|
|
<p>The Your Certificates tab in the <a href="#certificate_manager">Certificate
|
|
Manager</a> displays the certificates on file that identify you. Your
|
|
certificates are listed under the names of the organizations that issued
|
|
them:</p>
|
|
|
|
<ul>
|
|
<li>If you can't see certificate names under an organization's
|
|
name, double-click the name.</li>
|
|
<li>To select a certificate, click its name.</li>
|
|
<li>To select more than one certificate, hold down the Control key and click
|
|
their names.</li>
|
|
</ul>
|
|
|
|
<p>To perform the following actions, select one or more certificates and click
|
|
one of the following buttons:</p>
|
|
|
|
<ul>
|
|
<li><strong>View</strong>: Display detailed information about the selected
|
|
certificates.</li>
|
|
<li><strong>Backup</strong>: Initiate the process of saving the selected
|
|
certificates. A window appears that allows you to choose a password to
|
|
protect the backup. You can then save the backup in a directory of your
|
|
choice.</li>
|
|
<li><strong>Delete</strong>: Delete the selected certificates.</li>
|
|
</ul>
|
|
|
|
<p>These actions do not require a certificate to be selected:</p>
|
|
|
|
<ul>
|
|
<li><strong>Import</strong>: Import a file containing one or more
|
|
certificates that were previously backed up. When you click Import,
|
|
Certificate Manager first asks you to locate the file that contains the
|
|
backup. The names of certificate backup files typically end in
|
|
<tt>.p12</tt>; for example, <tt>MyCert.p12</tt>. After you select the file
|
|
to be imported, Certificate Manager asks you to enter the password that you
|
|
set when you backed up the certificate.</li>
|
|
<li><strong>Backup All</strong>: Initiate the process of saving all the
|
|
certificates stored in the
|
|
<a href="glossary.xhtml#software_security_device">Software Security
|
|
Device</a>.
|
|
|
|
<p><strong>Note</strong>: Certificates on smart cards cannot be backed up.
|
|
Whether you select some of your certificates and click Backup, or click
|
|
Backup All, the resulting backup file will not include any certificates
|
|
stored on smart cards or other external security devices. You can only
|
|
back up certificates that are stored on the built-in Software Security
|
|
Device.</p>
|
|
</li>
|
|
</ul>
|
|
|
|
<h3 id="choose_a_certificate_backup_password">Choose a Certificate Backup
|
|
Password</h3>
|
|
|
|
<p>A certificate backup password protects one or more certificates that you are
|
|
backing up from the <a href="#your_certificates">Your Certificates</a> tab in
|
|
the Certificate Manager.</p>
|
|
|
|
<p>The Certificate Manager asks you to set this password when you back up
|
|
certificates, and requests it when you attempt to import certificates that
|
|
have previously been backed up.</p>
|
|
|
|
<ul>
|
|
<li><strong>Certificate backup password</strong>: Type your backup password
|
|
into this field.</li>
|
|
<li><strong>Certificate backup password (again)</strong>: Type your backup
|
|
password again. If you don't type it the second time exactly as you
|
|
did the first time, the OK button remains inactive. If this happens, try
|
|
typing the new password again.</li>
|
|
</ul>
|
|
|
|
<p>If someone obtains the file containing a certificate that you have backed up
|
|
and successfully imports the certificate, that person can send messages or
|
|
access websites while pretending to be you. This can be a problem, for
|
|
example, if you digitally sign important email messages or manage your bank
|
|
or investment accounts over the Internet.</p>
|
|
|
|
<p>Therefore, it's important to select a certificate backup password that
|
|
is difficult to guess. The <strong>password quality meter</strong> gives you
|
|
a rough idea of the quality of your password as you type it based on factors
|
|
such as length and the use of uppercase letters, lowercase letters, numbers,
|
|
and symbols. It does not guarantee that your password cannot be guessed,
|
|
however.</p>
|
|
|
|
<p>For further guidelines, see
|
|
<a href="passwords_help.xhtml#choosing_a_good_password">Choosing a Good
|
|
Password</a>.</p>
|
|
|
|
<p>It's also important to record the password in a safe place—and
|
|
not anywhere that's easily accessible to someone else. If you forget
|
|
this password, you can't import the backup of your certificate.</p>
|
|
|
|
<h3 id="delete_your_certificates">Delete Your Certificates</h3>
|
|
|
|
<p>Before deleting one of your own expired certificates from the
|
|
<a href="#your_certificates">Your Certificates</a> tab in the Certificate
|
|
Manager, make sure you won't need it again some day for reading old
|
|
email messages that you may have encrypted with the corresponding private
|
|
key.</p>
|
|
|
|
<h2 id="other_peoples_certificates">Other People's Certificates</h2>
|
|
|
|
<p>The Other People's tab in the <a href="#certificate_manager">Certificate
|
|
Manager</a> displays email certificates you have on file that identify other
|
|
people.</p>
|
|
|
|
<p>When people send you digitally signed email messages, Certificate Manager
|
|
imports their certificates automatically. You can use these certificates to
|
|
send encrypted messages to those people.</p>
|
|
|
|
<p>Other people's certificates are listed under the names of the
|
|
organizations that issued them:</p>
|
|
|
|
<ul>
|
|
<li>If you can't see certificate names under an organization's
|
|
name, double-click the name.</li>
|
|
<li>To select a certificate, click its name.</li>
|
|
<li>To select more than one certificate, hold down the Control key and click
|
|
their names.</li>
|
|
</ul>
|
|
|
|
<p>To perform the following actions, select one or more certificates and click
|
|
one of the following buttons:</p>
|
|
|
|
<ul>
|
|
<li><strong>View</strong>: Display detailed information about the selected
|
|
certificates.</li>
|
|
<li><strong>Delete</strong>: Delete the selected certificates.</li>
|
|
</ul>
|
|
|
|
<h3 id="delete_email_certificates">Delete Email Certificates</h3>
|
|
|
|
<p>Before deleting someone else's certificate from the
|
|
<a href="#other_peoples_certificates">Other People's</a> tab in the
|
|
Certificate Manager, make sure you won't need it again some day to send
|
|
encrypted email to that person or to verify digital signatures on messages
|
|
from that person.</p>
|
|
|
|
<h2 id="web_site_certificates">Website Certificates</h2>
|
|
|
|
<p>The Websites tab in the Certificate Manager displays certificates you have
|
|
on file that identify websites.</p>
|
|
|
|
<p>Website certificates are grouped under the names of the organizations that
|
|
issued them:</p>
|
|
|
|
<ul>
|
|
<li>If you can't see certificate names under an organization's
|
|
name, double-click the name.</li>
|
|
<li>To select a certificate, click its name.</li>
|
|
<li>To select more than one certificate, hold down the Control key and click
|
|
their names.</li>
|
|
</ul>
|
|
|
|
<p>To perform the following actions, select one or more certificates and click
|
|
one of the following buttons:</p>
|
|
|
|
<ul>
|
|
<li><strong>View</strong>: Display detailed information about the selected
|
|
certificates.</li>
|
|
<li><strong>Edit</strong>: View or change the trust settings that Certificate
|
|
Manager associates with the selected certificates. You can use these
|
|
settings to designate a website certificate as one that you trust or
|
|
don't trust for identification purposes.</li>
|
|
<li><strong>Delete</strong>: Delete the selected certificates.</li>
|
|
</ul>
|
|
|
|
<h3 id="edit_web_site_certificate_trust_settings">Edit Website Certificate
|
|
Trust Settings</h3>
|
|
|
|
<p>When you select a website certificate from the
|
|
<a href="#web_site_certificates">Websites</a> tab in the Certificate Manager
|
|
and click Edit, you see a window entitled <q>Edit website certificate trust
|
|
settings</q>. Here you specify whether you want to trust the selected
|
|
certificate for identifying the website and setting up an encrypted
|
|
connection.</p>
|
|
|
|
<p>The dialog box contains these elements:</p>
|
|
|
|
<ul>
|
|
<li><strong>The certificate <q><em>name of certificate</em></q> was
|
|
issued by</strong>: Provides information about the
|
|
<a href="glossary.xhtml#certificate_authority">certificate authority</a>
|
|
that issued this certificate.</li>
|
|
<li><strong>Edit certificate trust settings</strong>:
|
|
<ul>
|
|
<li><strong>Trust the authenticity of this certificate</strong>: If you
|
|
select this option, Certificate Manager will henceforth trust this
|
|
certificate for the purposes of identifying this website or setting up
|
|
an encrypted connection. If you select this option and then attempt to
|
|
visit the website, your browser will access the site with few, if any,
|
|
warnings.</li>
|
|
<li><strong>Do not trust the authenticity of this certificate</strong>:
|
|
If you select this option, Certificate Manager will no longer trust
|
|
this certificate for the purposes of identifying this website or
|
|
setting up an encrypted connection. If you select this option and
|
|
then attempt to visit the website, you will see one or more warning
|
|
messages before you can access the site.</li>
|
|
</ul>
|
|
</li>
|
|
<li><strong>Edit CA Trust</strong>: Click this button to specify trust
|
|
settings for the certificate authority (CA) that issued the website
|
|
certificate. These settings allow you to trust or not to trust different
|
|
kinds of certificates issued by that certificate authority. For example,
|
|
you can choose to trust all website certificates issued by the
|
|
authority.</li>
|
|
</ul>
|
|
|
|
<p>Click OK to confirm your choice.</p>
|
|
|
|
<h3 id="delete_web_site_certificates">Delete Website Certificates</h3>
|
|
|
|
<p>Before deleting a website certificate from the
|
|
<a href="#web_site_certificates">Websites</a> tab in the Certificate
|
|
Manager, make sure that you won't need it again for the purposes of
|
|
identifying a website and setting up an encrypted connection.</p>
|
|
|
|
<h2 id="authorities">Authorities</h2>
|
|
|
|
<p>The Authorities tab in the <a href="#certificate_manager">Certificate
|
|
Manager</a> displays the certificates you have on file that identify
|
|
<a href="glossary.xhtml#certificate_authority">certificate authorities
|
|
(CAs)</a>.</p>
|
|
|
|
<p>CA certificates are grouped under the names of the organizations that issued
|
|
them:</p>
|
|
|
|
<ul>
|
|
<li>If you can't see CA certificate names under an organization's
|
|
name, double-click the name.</li>
|
|
<li>To select a CA certificate, click its name.</li>
|
|
<li>To select more than one CA certificate, hold down the Control key and
|
|
click their names.</li>
|
|
</ul>
|
|
|
|
<p>To perform these actions, select the certificates on which you want to act
|
|
and click one of these buttons:</p>
|
|
|
|
<ul>
|
|
<li><strong>View</strong>: Display detailed information about the selected
|
|
certificates.</li>
|
|
<li><strong>Edit</strong>: View or change the settings that Certificate
|
|
Manager associates with the selected certificates. You can use these
|
|
settings to designate what kinds of certificates, if any, you trust that
|
|
are issued by the corresponding CAs.</li>
|
|
<li><strong>Delete</strong>: Delete the selected certificates.</li>
|
|
</ul>
|
|
|
|
<p>To ensure that an entire
|
|
<a href="glossary.xhtml#certificate_chain">certificate chain</a> of CAs are
|
|
all trusted, you need to edit the root CA certifiate only.</p>
|
|
|
|
<p>To import the chain, you click a link on a web page provided by the CA. You
|
|
can then use the authorities tab to locate the root certificate and edit its
|
|
trust settings.</p>
|
|
|
|
<p>The root and intermediate CAs all appear under the same organization. The
|
|
root certificate is the one that lists itself as the the issuer.</p>
|
|
|
|
<p><strong>If you download an intermediate CA</strong>: If you download an
|
|
intermediate CA certificate that chains to a root certificate already marked
|
|
as trusted in your browser, you don't have to indicate what purposes you
|
|
trust it for. Intermediate certificates automatically inherit the trust
|
|
settings of their roots.</p>
|
|
|
|
<h3 id="edit_ca_certificate_trust_settings">Edit CA Certificate Trust
|
|
Settings</h3>
|
|
|
|
<p>When you select a CA certificate from the
|
|
<a href="#authorities">Authorities</a> tab in the Certificate Manager and
|
|
click Edit, you see a window entitled <q>Edit CA certificate trust
|
|
settings</q>. Here you specify the kinds of certificates you trust this CA
|
|
to certify. If you deselect all the checkboxes, Certificate Manager will not
|
|
trust any certificates issued by this CA.</p>
|
|
|
|
<p>The settings have these effects:</p>
|
|
|
|
<ul>
|
|
<li><strong>This certificate can identify websites</strong>: Certificate
|
|
Manager will trust certificates issued by this CA for the purpose of
|
|
identifying websites and encrypting website connections. If you deselect
|
|
this checkbox, Certificate Manager will not trust website certificates
|
|
issued by this CA.</li>
|
|
<li><strong>This certificate can identify mail users</strong>: Certificate
|
|
Manager will trust certificates issued by this CA for the purpose of
|
|
signing or encrypting email. If you deselect this checkbox, Certificate
|
|
Manager will not trust email certificates issued by this CA.</li>
|
|
<li><strong>This certificate can identify software makers</strong>:
|
|
Certificate Manager will trust certificates issued by this CA for the
|
|
purpose of identifying software makers. If you deselect this checkbox,
|
|
Certificate Manager will not trust such certificates issued by this
|
|
CA.</li>
|
|
</ul>
|
|
|
|
<p>Click OK to confirm the settings you have selected.</p>
|
|
|
|
<h3 id="delete_ca_certificates">Delete CA Certificates</h3>
|
|
|
|
<p>Before deleting a CA certificate from the
|
|
<a href="#authorities">Authorities</a> tab in the Certificate Manager,
|
|
make sure that you won't need it again to validate certificates issued
|
|
by that CA. If you delete the only valid certificate you have for a CA,
|
|
Certificate Manager will no longer trust any certificates issued by that
|
|
CA.</p>
|
|
|
|
<h2 id="device_manager">Device Manager</h2>
|
|
|
|
<p>This section describes the options available in the Device Manager window.
|
|
For background information and step-by-step instructions on the use of the
|
|
Device Manager, see
|
|
<a href="using_certs_help.xhtml#managing_smart_cards_and_other_security_devices">Managing
|
|
Smart Cards and Other Security Devices</a>.</p>
|
|
|
|
<p>If you are not currently viewing the Device Manager window, follow these
|
|
steps:</p>
|
|
|
|
<ol>
|
|
<li>Open the <span class="mac">&brandShortName;</span>
|
|
<span class="noMac">Edit</span> menu and choose Preferences.</li>
|
|
<li>Under the Privacy & Security category, click Certificates. (If no
|
|
subcategories are visible, double-click Privacy & Security to expand
|
|
the list.)</li>
|
|
<li>In the Certificates panel, click Manage Security Devices.</li>
|
|
</ol>
|
|
|
|
<p>The Device Manager lists each available PKCS #11 module, and the security
|
|
devices managed by each module below the module's name.</p>
|
|
|
|
<p>When you select a module or device, information about the selected item
|
|
appears in the middle of the window, and some of the buttons on the right
|
|
side of the window become available. In general, you perform an action on
|
|
a module or device by selecting its name and clicking the appropriate
|
|
button:</p>
|
|
|
|
<ul>
|
|
<li><strong>Log In</strong>: Log into the selected security device. After you
|
|
have logged in to the device, the frequency with which you will be asked to
|
|
enter the master password for the device depends on the
|
|
<a href="passwords_help.xhtml#master_password_timeout">Master Password
|
|
Timeout</a> settings.</li>
|
|
<li><strong>Log Out</strong>: Log out of the selected security device. After
|
|
you have logged out of the device, the device and the certificates it
|
|
contains will not be available until you log in again.</li>
|
|
<li><strong>Change Password</strong>: Change the master password for the
|
|
selected security device.</li>
|
|
<li><strong>Load</strong>: Displays a dialog box that allows you to specify
|
|
the name and location of a new PKCS #11 module. Before adding a new module,
|
|
you should first install the module software on your computer and if
|
|
necessary connect any associated hardware device. Follow the instructions
|
|
provided by the vendor.</li>
|
|
<li><strong>Unload</strong>: Unload the selected module. If you unload a
|
|
module, both the module and its security devices are no longer available
|
|
for use by the browser.</li>
|
|
<li><strong>Enable FIPS</strong>: Turns the FIPS mode on and off. For more
|
|
information, see
|
|
<a href="using_certs_help.xhtml#enable_fips_mode">Enable FIPS
|
|
Mode</a>.</li>
|
|
</ul>
|
|
|
|
<p>Copyright © 2003-2010 The Mozilla Foundation.</p>
|
|
|
|
</body>
|
|
</html>
|