diff --git a/README.md b/README.md
index a741ae0..c6706a1 100644
--- a/README.md
+++ b/README.md
@@ -9,12 +9,9 @@ This repository contains a small setup to automate the delivery of our root cert
 * `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only)
 
 ### Firefox
-On Debian-based distros, the following is required so that Firefox uses system CAs. We add a diversion in dpkg so that
-Firefox upgrades do not override our change.
-```
-sudo dpkg-divert --divert /usr/lib/firefox/libnssckbi.so.orig --rename --local /usr/lib/firefox/libnssckbi.so
-sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/libnssckbi.so
-```
+On Debian-based distros, the following is required so that Firefox uses system CAs:
+* go to Firefox Settings -> Privacy & Security -> Security -> Security Devices
+* then click "Load" to add a new device pointing to `/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so`
 
 ### Manually import in Kodi
 In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and