NASA insignia

+ Skip Navigation Links

+ NASA Home
+ CSET Home
Menu top image

Project Management


CSET Project Manager
Emily Doglio
CSET Website Admin
Devan Rose


The NASA Firefox Configuration Extension is end of life due to changes in how Firefox manages extensions!

Current version - N/A

Alternate Solution:

You can manually configure support within Firefox with the following steps.

To configure Firefox to use smartcard:
In this example HID ActivClient is the installed middleware for Windows and macOS. You will need to make adjusments based on your installed software
  • Open Menu >Preferences (macOS/Linux) or Options (Windows) > Privacy & Security (Paste "about:preferences#privacy" in the URL bar and hit enter)
  • Security Devices (Scroll to the bottom of Privacy & Security)
    • If "ActivClient PKCS #11" is not under Security Modules and Devices
      • Click Load
      • Change 'Module Name' if you prefer (name has no impact on functionality)
      • For module filename paste the following and hit enter:

      Windows 10:
        • Firefox 32-bit on Windows 64-bit and ActivClient 7.1: C:/Program Files (x86)/HID Global/ActivClient/acpkcs211.dll
        • Firefox 32-bit on Windows 32-bit and ActivClient 7.1: C:/Program Files/HID Global/ActivClient/acpkcs211.dll
        • Firefox 64-bit on Windows 64-bit and ActivClient 7.1: C:/Program Files/HID Global/ActivClient/acpkcs211.dll

      Windows 7:
        • Firefox 32-bit on Windows 64-bit and ActivClient 7.1: C:/Program Files (x86)/HID Global/ActivClient/acpkcs211.dll
        • Firefox 32-bit on Windows 32-bit and ActivClient 7.1: C:/Program Files/HID Global/ActivClient/acpkcs211.dll
        • Firefox 64-bit on Windows 64-bit and ActivClient 7.1: C:/Program Files/HID Global/ActivClient/acpkcs211.dll

      macOS:
        • /Library/Frameworks/ac.ac4mac.pkcs11.framework/Versions/A/Libraries/acpkcs220.dylib

      RHEL 6 & 7:
        • RHEL 64-bit (OpenSC): /usr/lib64/opensc-pkcs11.so
        • RHEL 32-bit (OpenSC): /usr/lib/opensc-pkcs11.so

    • Once Complete or If "ActivClient PKCS #11" or “OpenSC PKCS#11” IS already under Security Modules and Devices
      • Insert your smartcard
      • Left-click your smartcard reader (find the one that lists Status as Not Logged in)
      • Click Log In
      • Enter your PIN ("Password Required" prompt should display)
      • If status changes to "Logged In", then the smartcard was successfully unlocked
    • Select "Ok"
    • Close the Preference Pane
To configure Firefox management of certificate trust:
You may load your own certificates or, for NASA and other Federal CA Certificates, you can use the NASA Operational Certificate Authority (NOCA) certificate, hosted by the Department of the Treasury, to download the desired certificate and upload manually (use P7B format):
  • To import the desired certificates:
    • Paste about:preferences#privacy in the url bar of Firefox
    • Select the Privacy & Security tab on the left menu bar
    • Scroll to the bottom of the page and select View Certificates
    • Click Import and select the certificates downloaded earlier
    • Select the desired Trust Levels when asked.