* Firefox, Sea Monkey, and Thunderbird<\/p>\n
Signing Tools<\/strong> * Netscape Portable Runtime (NSPR)<\/a> Documentation<\/strong> Important Note:<\/strong> If the CA that signed your Code Signing Certificate is Comodo Code Signing CA<\/strong>, please contact support in order to re-issue your certificate off of Comodo Code Signing CA 2<\/strong>.<\/p>\n Signing Procedure<\/strong><\/p>\n Add the NSS tools bin\/<\/strong> and lib\/<\/strong>, and the NSPR lib\/<\/strong> directories to the system path. \n Note: <\/strong>Decide which directory to create the database in as the dot (.) indicates your present working directory.<\/li>\n<\/ul>\n \n* Install Comodo’s Root Authenticode CA to the certificate database. (UTN-USERFirst-Object) * Install Comodo’s Intermediate CA. * Install your certificate (without its private key). Note:<\/strong> All certificates for import should be in PEM format!<\/p>\n If you need to download our CAs in order to import them, you may do so by navigating here<\/a>.<\/p>\n <\/p>\n Example Output: <\/strong><\/p>\n -> certutil -L -d . Certificate Check<\/strong> \n <\/p>\n <\/p>\n Note:<\/strong> Still note the trailing .(dot)!<\/li>\n<\/ol>\n Note:<\/strong> Your certificate should now have the u,u,u attributes.<\/li>\n<\/ul>\n <\/p>\n <\/p>\n Note:<\/strong> Never include your password in batch mode. -X<\/strong> creates XPI, -Z<\/strong> creates an archive and must be used together.<\/p>\n <\/p>\n <\/p>\n
\n* Network Security Service (NSS)<\/a>
\nCurrent Windows Release: nss-3.11.zip<\/a> as of 5 May 2006.<\/p>\n
\nCurrent Windows Release: nspr-4.6.4.zip<\/a> as of 21 November 2006.<\/p>\n
\n* NSS<\/a>
\n* NSPR<\/a>
\n* NSS-Tools<\/a><\/p>\n\n
![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-1.png\")
<\/a><\/p>\n
\nset PATH=C:\\XPISign\\nss-3.11\\bin\\;C:\\XPISign\\nss-3.11\\lib\\;C:\\XPISign\\nspr-4.6.4\\lib\\; %PATH%<\/em><\/p>\n\n
\n-> <\/strong>certutil -N -d .<\/p>\n![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-2.png\")
<\/a><\/p>\n\n
\n-> <\/strong>certutil -A -n “UTN-USERFirst-Object” -t “TC,TC,TC” -d . -i “UTN-USERFirst-Object.crt”<\/p>\n
\n-> <\/strong>certutil -A -n “Comodo Code Signing CA 2” -t “TC,TC,TC” -d . -i “COMODOCodeSigningCA2.crt”<\/p>\n
\n-> <\/strong>certutil -A -n “My Code Signing Certificate” -t “u,u,u” -d . -i “my-cert.crt”<\/p>\n![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-3.png\")
<\/a><\/p>\n\n
\n-> signtool -L -d . Signtool check<\/strong><\/li>\n<\/ul>\n![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-4.png\")
<\/a><\/p>\n\n
\nExporting out of Firefox: How do I backup my certificate with Firefox?<\/a><\/li>\n<\/ul>\n\n
\n-> <\/strong>pk12util -i “YOUR_P12_FILE_NAME.p12” -d .<\/p>\n![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-5.png\")
<\/a><\/p>\n\n
\n-> certutil -L -d . Certificate Check<\/strong><\/p>\n\n
\n
\n-> <\/strong>signtool -d . -k “My Code Signing Certificate” -p PASS_GOES_HERE -Z “my-addon.xpi” -X XPI_DIR_HERE<\/li>\n<\/ul>\n![\"CodeSign](\"http:\/\/www.pkipartner.com\/support\/wp-content\/uploads\/2016\/01\/CodeSign-XPI-6.png\")
<\/a><\/p>\nRelated Articles<\/h2>\n