Can you check in about:config if the pref security.enterprise_roots.enabled is being set to true?