PKCS11 Module Installation

PKCS #11 modules are external modules which provide access to smart-card readers, biometric security devices, or external certificate stores. There are two methods for installing PKCS #11 modules into Firefox. Users can use the preferences dialog to install or remove PKCS #11 module. Extensions can programmatically manage PKCS #11 modules using the nsIPKCS11 programming interface.

The information in this article is specific to Firefox 3.5 and newer. Older versions of Firefox may support the window.pkcs11 property for installing PKCS #11 modules.

Using the Firefox Preferences Dialog to Install PKCS #11 Modules

  1. Save the PKCS #11 module to a permanent location on your local computer
  2. Open the Firefox preferences dialog. Choose "Advanced" > "Encryption" > "Security Devices"
  3. Choose "Load"
  4. Enter a name for the security module, such as "My Client Database". NOTE: there is currently a bug in Firefox where international characters may cause problems.
  5. Choose "Browse..." to find the location of the PKCS #11 module on your local computer, and choose "OK" when done.

Provisioning PKCS #11 Modules Using the pkcs11 API

Starting with Firefox 58, extensions can use the pkcs11 API to enumerate PKCS #11 modules and make them accessible to the browser as sources of keys and certificates.

Document Tags and Contributors

Last updated by: The RedBurn,