This section describes how to add or delete a client certificate to or from Firefox for macOS.
The master password may be requested in Firefox during the process.
For details on using Firefox, refer to the Firefox support page or manuals.
mozilla support

This section explains the scenario using the following environment as an example.

• OS: macOS High Sierra
• Web browser: Mozilla Firefox 60.0
• Client certificate: Client certificate for Cybozu cloud service (Client Certificate Authentication)

This section describes how to add a client certificate to Firefox for macOS.

1. Obtain a client certificate and client certificate password from your system administrator.
   1. Client certificate for Client Certificate Authentication (cybozu.cn):
      If the system administrator allows the client certificate to be downloaded, you can obtain the client certificate and password by yourself.
      For the procedure to obtain a password, confirm Steps 1 and 2 of When Client Certificate Authentication is used.
2. From the "Firefox" menu on the browser's menu bar, select Preferences. You can also click the icon to open menus , and click Settings. The "Settings" tab is displayed.
3. Click Privacy & Security in the menu on the left.
4. Click View Certificates under "Certificates".
5. Click the "Your Certificates" tab, and then click Import.
6. Click the client certificate named "(your login name).pfx" obtained in Sep 1, and then click Open.
7. Enter the client certificate password obtained in Step 1 and click OK.
8. Confirm that the client certificate is added, and then click OK.
9. Close the "Settings" tab.
10. In the Address bar of Firefox, enter "https://(subdomain name).s.cybozu.cn/". If the certificate selection screen is displayed, select the added client certificate and click OK. After the login screen of your environment is displayed, confirm whether you can access a service or not.

Replace an existing client certificate with a new one.

1. Obtain a new client certificate and its password from your system administrator.
2. Delete the old client certificate.
   Deleting client certificate
3. Add a new client certificate.
   Adding client certificate

This section describes how to delete the client certificate from Firefox for macOS.

1. From the "Firefox" menu on the browser's menu bar, select Preferences. You can also click the icon to open menus , and click Settings. The "Settings" tab is displayed.
2. Click Privacy & Security in the menu on the left.
3. Click View Certificates under "Certificates".
4. Double-click the "Your Certificates" tab on the "Certificate Manager" screen, select a certificate you want to delete, and click Delete.
5. Click OK on the confirmation screen.
6. Confirm that the client certificate is deleted, and then click OK.
7. Close the "Settings" tab.
   Now the client certificate added in Firefox has been deleted.

In "Certificate Manager" of Firefox, client certificates added in not only Firefox but also macOS are displayed. A client certificate added in macOS remains displayed in "Certificate Manager" even if it is deleted in Firefox.
Follow the steps below to delete the client certificate added in macOS.

1. Open the "Keychain Access" screen.
   Perform one of the operations below.

   • Click in the Dock.
     Apple Help: Use the Dock on Mac
   • Click on the Dock, and then search for "Keychain Access".
     Apple Help: Use Launchpad to view and open apps on Mac

2. While pressing the Control key, click on the client certificate to delete "(Login name of the user)@(subdomain name).s.cybozu.cn", and then select "Delete "(Login name of the user)@(subdomain name).s.cybozu.cn"".

3. Click Delete on the confirmation screen.

4. On the password entry screen, enter the administrator name and password for the computer being used, and then click Update Settings.

5. While pressing the Control key, click on the Identity Preference to delete "https://(subdomain name).s.cybozu.cn", and then select "Delete "https://(subdomain name).s.cybozu.cn"".

6. Click Delete on the confirmation screen.

7. While pressing the Control key, click on a secret key "cybozu.cn client certificate" to delete, and then select "Delete 'cybozu.cn client certificate'".

8. Click Delete on the confirmation screen. Now the client certificate added in macOS has been deleted.