PKCS11 modules are external modules which provide access to smart-card readers, biometric security devices, or external certificate stores. There are two methods for installing PKCS11 modules into Firefox. Users can use the preferences dialog to install or remove PKCS11 module. Extensions can programmatically manage PKCS11 modules using the nsIPKCS11 programming interface.
The information in this article is specific to Firefox 3.5 and newer. Older versions of Firefox may support the window.pkcs11 property for installing PKCS11 modules.
Using the Firefox Preferences Dialog to Install PKCS11 Modules
- Save the PKCS11 module to a permanent location on your local computer
- Open the Firefox preferences dialog. Choose "Advanced" > "Encryption" > "Security Devices"
- Choose "Load"
- Enter a name for the security module, such as "My Client Database". NOTE: there is currently a bug in Firefox where international characters may cause problems.
- Choose "Browse..." to find the location of the PKCS11 module on your local computer, and choose "OK" when done.
Installing PKCS11 Modules Using nsIPKCS11
Extensions can use the nsIPKCS11 interface to install PKCS11 modules:
const nsIPKCS11 = Components.interfaces.nsIPKCS11;
const nsPKCS11ContractID = "@mozilla.org/security/pkcs11;1";
var PKCS11 = Components.classes[nsPKCS11ContractID].getService(nsIPKCS11);
PKCS11.addModule("Custom Module Name", "/path/to/module.dll");