EDIT

# Firefox: How to import CA certificates

The following sections will guide you through all necessary steps to import the certificates of the [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority.)

Once you have successfully installed the certificates of the **EDIT WP 5.7 RootCA** and the **EDIT WP 5.7 ServerCA*, you should never see the error dialog *Secure Connection failed** when accessing EDIT web sites using certificates issued by the [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority.)

 **Note:** You MUST proceed the following steps for BOTH certificates.

## Step 1: Download certificates

Before starting the certificate installation procedure, you will need to store the certificate files on your computer. Please, download the files from **both** following links:

* [EDIT WP 5.7 RootCA](http://dev.e-taxonomy.eu/trac/attachment/wiki/WP57CertificationAuthority/EDIT-WP5.7-cacert.pem?format=raw)

* [EDIT WP 5.7 ServerCA](http://dev.e-taxonomy.eu/trac/attachment/wiki/WP57CertificationAuthority/EDIT-WP5.7-ServerCA-cacert.pem?format=raw)

## Step 2: Select the certificate file to be imported

* Open your Firefox Browser

* For Windows users: Select the entry _Options_ from the _Tools_menu

* For Linnux users: Select the entry _Options_ from the _EDIT_menu

[!Firefox-Tools-Optionspng|align=center!]

* Select the menu item _Advanced_

* Select the tab _Encryption_

* Push the button _View Certificates_

[!Firefox-Options-ViewCertificatespng|align=center!]

* Select the tab _Authorities_

* Push the button _Import_

 **Note:** Be sure that you have selected the tab _Authorities_ first !

[!Firefox-CertificateManager-Importpng|align=center!]

* Go to the directory where you saved the downloaded certificate files

* Select the file _EDIT-WP5.7-cacert.pem_ or _EDIT-WP5.7-ServerCA-cacert.pem_ respectively.

[!Firefox-CertificateManager-SelectFileImportpng|align=center!]

## Step 2: Verify the CA certificate

Before you import an EDIT CA certificate, you MUST be sure you can trust it. This can be done by examining the CA certificate fingerprints and compare them with the fingerprints published by the [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority)

* Push the button _View_

[!Firefox-CertificateManager-DownloadCertificate-Viewpng|align=center!]

* Compare the SHA1 and/or MD5 fingerprint with the relating fingerprints published by [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority) for **EDIT WP 5.7 RootCA** or **EDIT WP 5.7 ServerCA** respectively.

[!Firefox-CertificateViewerpng|align=center!]

* Use a second browser window and open [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority) to see the fingerprints

[!Firefox-CAFingerprintspng|align=center!]

* Go back to the windows _Certificate Viewer_ and push the button _Close_

## Step 3: Confirm the import of the CA certificate

 **Note:** Proceed only, if the fingerprints are identical. Otherwise, inform the [[editsupport@bgbmorg|EDIT Support Team]] **immediately !** 

* Mark the entry "_Trust this CA to identify web sites_"

* Push the button _OK_

[!Firefox-CertificateManager-DownloadCertificate-OKpng|align=center!]

## Step 4: Import the second CA certificate

You will need to import both CA certificate files, in order to have installed the full certificate chain into the browser. The browser needs the chain to successfully verify the identity of a web server presenting a web server certificate issued by the [EDIT WP 5.7 Certification Authority](http://dev.e-taxonomy.eu/trac/wiki/WP57CertificationAuthority)

* Repeat step 2 and 3, but select the second certificate file (_EDIT-WP5.7-ServerCA-cacert.pem_ or _EDIT-WP5.7-cacert.pem_ respectively) 

## Step 5: Check the existence of both CA Certificates

* Be sure, that the tab _Authorities_ is always selected

* Look for the term _European Distributed Institute of Taxonomy_ within the list of certificates

* If you can see both EDIT CA certificates below the term mentioned above, everything is OK

* Otherwise, repeat carefully steps 1-4 or contact the [[editsupport@bgbmorg|EDIT Support Team]]

[!Firefox-CertificateManager-EDIT-OKpng|align=center!]