Windows Certificate Database

[Shadeclan]

My work has recently deployed a new "Net Nanny" from Palo Alto networks. This is preventing Pale Moon from reaching most websites - it is raising the untrusted website error. As I understand it, my IT people deployed a certificate to the -- windows certificate database -- which IE and, apparently, Chrome can read but Pale Moon cannot. I saw this article on the Palo Alto Networks forums which describe an About:config setting in a newer version of Firefox which is not present in About:Config but adding it to Pale Moon makes no difference.

Is there a way to get Pale Moon to read this certificate database? Or, is there a way to export / import a certificate from this database?

[Isengrim]

I don't see anything in the article you linked mentioning an about:config setting. Did you mean something like this? I see that preference in PM 28, but I have not tested it.

If that doesn't work, you might be able to export the relevant certificate from Windows and import it into Pale Moon's certificate manager.

[Shadeclan]

Actually, I was able to get Pale Moon to work just now by exporting my organization's certificates and trusted server certificates from Chrome and importing them into Pale Moon. It didn't work for my friend's Opera browser, though. Guess he'd better switch to Pale Moon!

[Isengrim]

As they say, more than one way to skin a cat.

On a side note, I tried setting the value for security.enterprise_roots.enabled to true, and Pale Moon now uses certificates installed in the Windows certificate database in addition to its own. So now I can say for sure that this setting does work.