503506 - Enabling FIPS should offer creating of master password

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, enhancement)

Description

[u279076]

Attachment: Screenshot

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090710 Minefield/3.6a1pre

When seeking to enable FIPS, if I don't have a master password set, FIPS simply informs me that I need to set a master password before enabling FIPS.  However, it gives no direction on how to do this (see screenshot).

I suggest when a user seeks to enable FIPS but has no master password set that Firefox offer the Create Master Password dialog.

STR (with no master password set):
1. Open the Preferences Dialog
2. Click the Advanced panel
3. Click the Encryption tab
4. Click the Security Devices button
5. Click the Enable FIPS button

RESULT:
"FIPS mode requires that you have a Master Password set for each security device. Please set the password before trying to enable FIPS mode."

EXPECTED:
Show me the Create Master Password dialog so I can set one.

Comment 1

[Johnathan Nightingale [:johnath]]

I agree.  If it's a requirement of FIPS mode, it would be nice if the UI let you create one in the process.  -> Core::Security UI

Comment 2

[Bob Lord]

I agree that the client should be more helpful, even if only by telling me where the Master Password configuration window is located these days. :-)