Since Firefox 49 there is some support for Windows CA certificates and support for Active Directory provided enterprise root certificates since Firefox 52.
There are no plans to enable this feature by default because there is no design about what happens when Firefox or Windows stores have different levels of trust on installed certificates.
You can enable this feature in
about:config by creating this boolean value:
and set it to
Deploying the configuration system wide
In the Firefox installation folder, go to
defaults\pref\ folder and create a new file with the following:
/* Allows Firefox reading Windows certificates */
Save it with
.js extension, e.g.
trustwincerts.js and restart Firefox. The entry will appear in
about:config for all users.
Deploying Windows Certificates system wide
In Firefox from 49 until 51, it only supports the "Root" store. Since Firefox 52, it supports other stores, including those added from domain via AD.
This is a bit out of scope but explains which was the only certificate store supported by Firefox for versions 49 to 51 or just for local testing. Because this deploys for all local machine users, it requires Administrator privileges in your CMD/PowerShell window or in your own automated deployment script.:
certutil -addstore Root path\to\cafile.pem
This may also be done from the Management Console by clicking a lot of windows if you prefer the mouse way (How to: View Certificates with the MMC Snap-In).