README.md

   1 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   2
   3 | Policy Name | Description
   4 | --- | --- |
   5 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
   6 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
   7 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
   8 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
   9 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  10 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  11 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  12 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  13 | **[`Certificates`](#certificates)** |
  14 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  15 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  16 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  17 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  18 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  19 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  20 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  21 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  22 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  23 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  24 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  25 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  26 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  27 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  28 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  29 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  30 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  31 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  32 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  33 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  34 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  35 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  36 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  37 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  38 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  39 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  40 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  41 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  42 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  43 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  44 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  45 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  46 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  47 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  48 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  49 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  50 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  51 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  52 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  53 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  54 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  55 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  56 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  57 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  58 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  59 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  60 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  61 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  62 | **[`Proxy`](#proxy)** | Configure proxy settings.
  63 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  64 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  65 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  66 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  67 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  68 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  69 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  70 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  71 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  72 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  73 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  74 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  75 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  76 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  77 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  78
  79 ### AppUpdateURL
  80
  81 Change the URL for application update.
  82
  83 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  84 **CCK2 Equivalent:** N/A\
  85 **Preferences Affected:** `app.update.url`
  86
  87 #### Windows
  88 ```
  89 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  90 ```
  91 #### macOS
  92 ```
  93 <dict>
  94   <key>AppUpdateURL</key>
  95   <string>https://yoursite.com</string>
  96 </dict>
  97 ```
  98 ### JSON
  99 ```
 100 {
 101   "policies": {
 102     "AppUpdateURL": "https://yoursite.com"
 103   }
 104 }
 105 ```
 106 ### Authentication
 107
 108 Configure sites that support integrated authentication.
 109
 110 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 111
 112 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 113 **CCK2 Equivalent:** N/A\
 114 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 115
 116 #### Windows
 117 ```
 118 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 119 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 120 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 121 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 122 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 123 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 124 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 125 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>Authentication</key>
 131   <dict>
 132     <key>SPNEGO</key>
 133     <array>
 134       <string>mydomain.com</string>
 135       <string>https://myotherdomain.com</string>
 136     </array>
 137     <key>Delegated</key>
 138     <array>
 139       <string>mydomain.com</string>
 140       <string>https://myotherdomain.com</string>
 141     </array>
 142     <key>NTLM</key>
 143     <array>
 144       <string>mydomain.com</string>
 145       <string>https://myotherdomain.com</string>
 146     </array>
 147     <key>AllowNonFQDN</key>
 148       <dict>
 149       <key>SPNEGO</key>
 150       <true/> | <false/>
 151       <key>NTLM</key>
 152       <true/> | <false/>
 153     </dict>
 154   </dict>
 155 </dict>
 156 ```
 157 ### JSON
 158 ```
 159 {
 160   "policies": {
 161     "Authentication": {
 162       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 163       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 164       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 165       "AllowNonFQDN": {
 166         "SPNEGO": true | false,
 167         "NTLM": true | false
 168       }
 169     }
 170   }
 171 }
 172 ```
 173 ### BlockAboutAddons
 174
 175 Block access to the Add-ons Manager (about:addons).
 176
 177 **Compatibility:** Firefox 60, Firefox ESR 60\
 178 **CCK2 Equivalent:** `disableAddonsManager`\
 179 **Preferences Affected:** N/A
 180
 181 #### Windows
 182 ```
 183 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 184 ```
 185 #### macOS
 186 ```
 187 <dict>
 188   <key>BlockAboutAddons</key>
 189   <true/> | <false/>
 190 </dict>
 191 ```
 192 #### JSON
 193 ```
 194 {
 195   "policies": {
 196     "BlockAboutAddons": true | false
 197   }
 198 }
 199 ```
 200 ### BlockAboutConfig
 201
 202 Block access to about:config.
 203
 204 **Compatibility:** Firefox 60, Firefox ESR 60\
 205 **CCK2 Equivalent:** `disableAboutConfig`\
 206 **Preferences Affected:** N/A
 207
 208 #### Windows
 209 ```
 210 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 211 ```
 212 #### macOS
 213 ```
 214 <dict>
 215   <key>BlockAboutConfig</key>
 216   <true/> | <false/>
 217 </dict>
 218 ```
 219 #### JSON
 220 ```
 221 {
 222   "policies": {
 223     "BlockAboutConfig": true | false
 224   }
 225 }
 226 ```
 227 ### BlockAboutProfiles
 228
 229 Block access to About Profiles (about:profiles).
 230
 231 **Compatibility:** Firefox 60, Firefox ESR 60\
 232 **CCK2 Equivalent:** `disableAboutProfiles`\
 233 **Preferences Affected:** N/A
 234
 235 #### Windows
 236 ```
 237 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 238 ```
 239 #### macOS
 240 ```
 241 <dict>
 242   <key>BlockAboutProfiles</key>
 243   <true/> | <false/>
 244 </dict>
 245 ```
 246 #### JSON
 247 ```
 248 {
 249   "policies": {
 250     "BlockAboutProfiles": true | false
 251   }
 252 }
 253 ```
 254 ### BlockAboutSupport
 255
 256 Block access to Troubleshooting Information (about:support).
 257
 258 **Compatibility:** Firefox 60, Firefox ESR 60\
 259 **CCK2 Equivalent:** `disableAboutSupport`\
 260 **Preferences Affected:** N/A
 261
 262 #### Windows
 263 ```
 264 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 265 ```
 266 #### macOS
 267 ```
 268 <dict>
 269   <key>BlockAboutSupport</key>
 270   <true/> | <false/>
 271 </dict>
 272 ```
 273 #### JSON
 274 ```
 275 {
 276   "policies": {
 277     "BlockAboutSupport": true | false
 278   }
 279 }
 280 ```
 281 ### Bookmarks
 282
 283 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 284
 285 **Compatibility:** Firefox 60, Firefox ESR 60\
 286 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 287 **Preferences Affected:** N/A
 288
 289 #### Windows
 290 ```
 291 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 292 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 293 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 294 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 295 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 296 ```
 297 #### macOS
 298 ```
 299 <dict>
 300   <key>Bookmarks</key>
 301   <array>
 302     <dict>
 303       <key>Title</key>
 304       <string>Example</string>
 305       <key>URL</key>
 306       <string>https://example.com</string>
 307       <key>Favicon</key>
 308       <string>https://example.com/favicon.ico</string>
 309       <key>Placement</key>
 310       <string>toolbar | menu</string>
 311       <key>Folder</key>
 312       <string>FolderName</string>
 313     </dict>
 314   </array>
 315 </dict>
 316 ```
 317 ### JSON
 318 ```
 319 {
 320   "policies": {
 321     "Bookmarks": [
 322       {
 323         "Title": "Example",
 324         "URL": "https://example.com",
 325         "Favicon": "https://example.com/favicon.ico",
 326         "Placement": "toolbar" | "menu",
 327         "Folder": "FolderName"
 328       }
 329     ]
 330   }
 331 }
 332 ```
 333 ### CaptivePortal
 334 Enable or disable the detection of captive portals.
 335
 336 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 337 **CCK2 Equivalent:** N/A\
 338 **Preferences Affected:** `network.captive-portal-service.enabled`
 339
 340 #### Windows
 341 ```
 342 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>CaptivePortal</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### JSON
 352 ```
 353 {
 354   "policies": {
 355     "CaptivePortal": true | false
 356   }
 357 }
 358 ```
 359 ### Certificates
 360
 361 ### Certificates | ImportEnterpriseRoots
 362
 363 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 364
 365 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 366
 367 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 368 **CCK2 Equivalent:** N/A\
 369 **Preferences Affected:** `security.enterprise_roots.enabled`
 370
 371 #### Windows
 372 ```
 373 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 374 ```
 375 #### macOS
 376 ```
 377 <dict>
 378   <key>Certificates</key>
 379   <dict>
 380     <key>ImportEnterpriseRoots</key>
 381     <true/> | <false/>
 382   </dict>
 383 </dict>
 384 ```
 385 #### JSON
 386 ```
 387 {
 388   "policies": {
 389     "Certificates": {
 390       "ImportEnterpriseRoots": true | false
 391     }
 392   }
 393 }
 394 ```
 395 ### Certificates | Install
 396
 397 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 398
 399 - Windows
 400   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 401   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 402 - macOS
 403   - /Library/Application Support/Mozilla/Certificates
 404   - ~/Library/Application Support/Mozilla/Certificates
 405 - Linux
 406   - /usr/lib/mozilla/certificates
 407   - /usr/lib64/mozilla/certificates
 408   - ~/.mozilla/certificates
 409
 410 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 411
 412 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 413
 414 Certificates are installed using the trust string `CT,CT,`.
 415
 416 Binary (DER) and ASCII (PEM) certificates are both supported.
 417
 418 **Compatibility:** Firefox 64, Firefox ESR 64\
 419 **CCK2 Equivalent:** `certs.ca`\
 420 **Preferences Affected:** N/A
 421
 422 #### Windows
 423 ```
 424 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 425 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 426 ```
 427 #### macOS
 428 ```
 429 <dict>
 430   <key>Certificates</key>
 431   <dict>
 432     <key>Install</key>
 433     <array>
 434       <string>cert1.der</string>
 435       <string>/Users/username/cert2.pem</string>
 436     </array>
 437   </dict>
 438 </dict>
 439 ```
 440 #### JSON
 441 ```
 442 {
 443   "policies": {
 444     "Certificates": {
 445       "Install": ["cert1.der", "/home/username/cert2.pem"]
 446     }
 447   }
 448 }
 449 ```
 450 ### Cookies
 451 Configure cookie preferences.
 452
 453 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 454
 455 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 456
 457 `Default` determines whether cookies are accepted at all.
 458
 459 `AcceptThirdParty` determines how third-party cookies are handled.
 460
 461 `ExpireAtSessionEnd` determines when cookies expire.
 462
 463 `RejectTracker` only rejects cookies for trackers.
 464
 465 `Locked` prevents the user from changing cookie preferences.
 466
 467 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 468 **CCK2 Equivalent:** N/A\
 469 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 470
 471 #### Windows
 472 ```
 473 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 474 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 475 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 476 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 477 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 478 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 479 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 480 ```
 481 #### macOS
 482 ```
 483 <dict>
 484   <key>Cookies</key>
 485   <dict>
 486     <key>Allow</key>
 487     <array>
 488       <string>http://example.com</string>
 489     </array>
 490     <key>Block</key>
 491     <array>
 492       <string>http://example.org</string>
 493     </array>
 494     <key>Default</key>
 495     <true/> | <false/>
 496     <key>AcceptThirdParty</key>
 497     <string>always | never | from-visited</string>
 498     <key>ExpireAtSessionEnd</key>
 499     <true/> | <false/>
 500     <key>RejectTracker</key>
 501     <true/> | <false/>
 502     <key>Locked</key>
 503     <true/> | <false/>
 504   </dict>
 505 </dict>
 506 ```
 507 #### JSON
 508 ```
 509 {
 510   "policies": {
 511     "Cookies": {
 512       "Allow": ["http://example.org/"],
 513       "Block": ["http://example.edu/"],
 514       "Default": true | false,
 515       "AcceptThirdParty": "always" | "never" | "from-visited"],
 516       "ExpireAtSessionEnd": true | false,
 517       "RejectTracker": true | false,
 518       "Locked": true | false
 519     }
 520   }
 521 }
 522 ```
 523 ### DisableSetDesktopBackground
 524 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 525
 526 **Compatibility:** Firefox 60, Firefox ESR 60\
 527 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 528 **Preferences Affected:** N/A
 529
 530 #### Windows
 531 ```
 532 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 533 ```
 534
 535 #### macOS
 536 ```
 537 <dict>
 538   <key>DisableSetDesktopBackground</key>
 539   <true/> | <false/>
 540 </dict>
 541 ```
 542 #### JSON
 543 ```
 544 {
 545   "policies": {
 546     "DisableSetDesktopBackground": true | false
 547   }
 548 }
 549 ```
 550 ### DisableMasterPasswordCreation
 551 Remove the master password functionality.
 552
 553 **Compatibility:** Firefox 60, Firefox ESR 60\
 554 **CCK2 Equivalent:** `noMasterPassword`\
 555 **Preferences Affected:** N/A
 556
 557 #### Windows
 558 ```
 559 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 560 ```
 561
 562 #### macOS
 563 ```
 564 <dict>
 565   <key>DisableMasterPasswordCreation</key>
 566   <true/> | <false/>
 567 </dict>
 568 ```
 569 #### JSON
 570 ```
 571 {
 572   "policies": {
 573     "DisableMasterPasswordCreation": true | false
 574   }
 575 }
 576 ```
 577 ### DisableAppUpdate
 578 Turn off application updates.
 579
 580 **Compatibility:** Firefox 60, Firefox ESR 60\
 581 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 582 **Preferences Affected:** N/A
 583
 584 #### Windows
 585 ```
 586 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>DisableAppUpdate</key>
 592   <true/> | <false/>
 593 </dict>
 594 ```
 595 #### JSON
 596 ```
 597 {
 598   "policies": {
 599     "DisableAppUpdate": true | false
 600   }
 601 }
 602 ```
 603 ### DisableBuiltinPDFViewer
 604 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 605
 606 **Compatibility:** Firefox 60, Firefox ESR 60\
 607 **CCK2 Equivalent:** `disablePDFjs`\
 608 **Preferences Affected:** `pdfjs.disabled`
 609
 610 #### Windows
 611 ```
 612 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 613 ```
 614
 615 #### macOS
 616 ```
 617 <dict>
 618   <key>DisableBuiltinPDFViewer</key>
 619   <true/> | <false/>
 620 </dict>
 621 ```
 622 #### JSON
 623 ```
 624 {
 625   "policies": {
 626     "DisableBuiltinPDFViewer": true | false
 627   }
 628 }
 629 ```
 630 ### DisableDeveloperTools
 631 Remove access to all developer tools.
 632
 633 **Compatibility:** Firefox 60, Firefox ESR 60\
 634 **CCK2 Equivalent:** `removeDeveloperTools`\
 635 **Preferences Affected:** `devtools.policy.disabled`
 636
 637 #### Windows
 638 ```
 639 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 640 ```
 641
 642 #### macOS
 643 ```
 644 <dict>
 645   <key>DisableDeveloperTools</key>
 646   <true/> | <false/>
 647 </dict>
 648 ```
 649 #### JSON
 650 ```
 651 {
 652   "policies": {
 653     "DisableDeveloperTools": true | false
 654   }
 655 }
 656 ```
 657 ### DisableFeedbackCommands
 658 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 659
 660 **Compatibility:** Firefox 60, Firefox ESR 60\
 661 **CCK2 Equivalent:** N/A\
 662 **Preferences Affected:** N/A
 663
 664 #### Windows
 665 ```
 666 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 667 ```
 668 #### macOS
 669 ```
 670 <dict>
 671   <key>DisableFeedbackCommands</key>
 672   <true/> | <false/>
 673 </dict>
 674 ```
 675 #### JSON
 676 ```
 677 {
 678   "policies": {
 679     "DisableFeedbackCommands": true | false
 680   }
 681 }
 682 ```
 683 ### DisableFirefoxScreenshots
 684 Remove access to Firefox Screenshots.
 685
 686 **Compatibility:** Firefox 60, Firefox ESR 60\
 687 **CCK2 Equivalent:** N/A\
 688 **Preferences Affected:** `extensions.screenshots.disabled`
 689
 690 #### Windows
 691 ```
 692 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 693 ```
 694 #### macOS
 695 ```
 696 <dict>
 697   <key>DisableFirefoxScreenshots</key>
 698   <true/> | <false/>
 699 </dict>
 700 ```
 701 #### JSON
 702 ```
 703 {
 704   "policies": {
 705     "DisableFirefoxScreenshots": true | false
 706   }
 707 }
 708 ```
 709 ### DisableFirefoxAccounts
 710 Disable Firefox Accounts integration (Sync).
 711
 712 **Compatibility:** Firefox 60, Firefox ESR 60\
 713 **CCK2 Equivalent:** `disableSync`\
 714 **Preferences Affected:** `identity.fxaccounts.enabled`
 715
 716 #### Windows
 717 ```
 718 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 719 ```
 720 #### macOS
 721 ```
 722 <dict>
 723   <key>DisableFirefoxAccounts</key>
 724   <true/> | <false/>
 725 </dict>
 726 ```
 727 #### JSON
 728 ```
 729 {
 730   "policies": {
 731     "DisableFirefoxAccounts": true | false
 732   }
 733 }
 734 ```
 735 ### DisableFirefoxStudies
 736 Disable Firefox studies (Shield).
 737
 738 **Compatibility:** Firefox 60, Firefox ESR 60\
 739 **CCK2 Equivalent:** `disableForget`\
 740 **Preferences Affected:** N/A
 741
 742 #### Windows
 743 ```
 744 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 745 ```
 746 #### macOS
 747 ```
 748 <dict>
 749   <key>DisableFirefoxStudies</key>
 750   <true/> | <false/>
 751 </dict>
 752 ```
 753 #### JSON
 754 ```
 755 {
 756   "policies": {
 757     "DisableFirefoxStudies": true | false
 758   }
 759 }
 760 ```
 761 ### DisableForgetButton
 762 Disable the "Forget" button.
 763
 764 **Compatibility:** Firefox 60, Firefox ESR 60\
 765 **CCK2 Equivalent:** `disableForget`\
 766 **Preferences Affected:** N/A
 767
 768 #### Windows
 769 ```
 770 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 771 ```
 772 #### macOS
 773 ```
 774 <dict>
 775   <key>DisableForgetButton</key>
 776   <true/> | <false/>
 777 </dict>
 778 ```
 779 #### JSON
 780 ```
 781 {
 782   "policies": {
 783     "DisableForgetButton": true | false
 784   }
 785 }
 786 ```
 787 ### DisableFormHistory
 788 Turn off saving information on web forms and the search bar.
 789
 790 **Compatibility:** Firefox 60, Firefox ESR 60\
 791 **CCK2 Equivalent:** `disableFormFill`\
 792 **Preferences Affected:** ` browser.formfill.enable`
 793
 794 #### Windows
 795 ```
 796 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 797 ```
 798 #### macOS
 799 ```
 800 <dict>
 801   <key>DisableFormHistory</key>
 802   <true/> | <false/>
 803 </dict>
 804 ```
 805 #### JSON
 806 ```
 807 {
 808   "policies": {
 809     "DisableFormHistory": true | false
 810   }
 811 }
 812 ```
 813 ### DisablePocket
 814 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 815
 816 **Compatibility:** Firefox 60, Firefox ESR 60\
 817 **CCK2 Equivalent:** `disablePocket`\
 818 **Preferences Affected:** `extensions.pocket.enabled`
 819
 820 #### Windows
 821 ```
 822 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 823 ```
 824 #### macOS
 825 ```
 826 <dict>
 827   <key>DisablePocket</key>
 828   <true/> | <false/>
 829 </dict>
 830 ```
 831 #### JSON
 832 ```
 833 {
 834   "policies": {
 835     "DisablePocket": true | false
 836   }
 837 }
 838 ```
 839 ### DisablePrivateBrowsing
 840 Remove access to private browsing.
 841
 842 **Compatibility:** Firefox 60, Firefox ESR 60\
 843 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 844 **Preferences Affected:** N/A
 845
 846 #### Windows
 847 ```
 848 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 849 ```
 850 #### macOS
 851 ```
 852 <dict>
 853   <key>DisablePrivateBrowsing</key>
 854   <true/> | <false/>
 855 </dict>
 856 ```
 857 #### JSON
 858 ```
 859 {
 860   "policies": {
 861     "DisablePrivateBrowsing": true | false
 862   }
 863 }
 864 ```
 865 ### DisableProfileImport
 866 Disables the "Import data from another browser" option in the bookmarks window.
 867
 868 **Compatibility:** Firefox 60, Firefox ESR 60\
 869 **CCK2 Equivalent:** N/A\
 870 **Preferences Affected:** N/A
 871
 872 #### Windows
 873 ```
 874 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 875 ```
 876 #### macOS
 877 ```
 878 <dict>
 879   <key>DisableProfileImport</key>
 880   <true/> | <false/>
 881 </dict>
 882 ```
 883 #### JSON
 884 ```
 885 {
 886   "policies": {
 887     "DisableProfileImport": true | false
 888   }
 889 }
 890 ```
 891 ### DisableProfileRefresh
 892 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 893
 894 **Compatibility:** Firefox 60, Firefox ESR 60\
 895 **CCK2 Equivalent:** `disableResetFirefox`\
 896 **Preferences Affected:** `browser.disableResetPrompt`
 897
 898 #### Windows
 899 ```
 900 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 901 ```
 902 #### macOS
 903 ```
 904 <dict>
 905   <key>DisableProfileRefresh</key>
 906   <true/> | <false/>
 907 </dict>
 908 ```
 909 #### JSON
 910 ```
 911 {
 912   "policies": {
 913     "DisableProfileRefresh": true | false
 914   }
 915 }
 916 ```
 917 ### DisableSafeMode
 918 Disable safe mode within the browser.
 919
 920 On Windows, this disables safe mode via the command line as well.
 921
 922 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 923 **CCK2 Equivalent:** `disableSafeMode`\
 924 **Preferences Affected:** N/A
 925
 926 #### Windows
 927 ```
 928 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 929 ```
 930 #### macOS
 931 ```
 932 <dict>
 933   <key>DisableSafeMode</key>
 934   <true/> | <false/>
 935 </dict>
 936 ```
 937 #### JSON
 938 ```
 939 {
 940   "policies": {
 941     "DisableSafeMode": true | false
 942   }
 943 }
 944 ```
 945 ### DisableSecurityBypass
 946 Prevent the user from bypassing security in certain cases.
 947
 948 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 949
 950 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 951
 952 **Compatibility:** Firefox 60, Firefox ESR 60\
 953 **CCK2 Equivalent:** N/A\
 954 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 955
 956 #### Windows
 957 ```
 958 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 959 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 960 ```
 961 #### macOS
 962 ```
 963 <dict>
 964   <key>DisableSecurityBypass</key>
 965   <dict>
 966     <key>InvalidCertificate</key>
 967     <true/> | <false/>
 968     <key><SafeBrowsing/key>
 969     <true/> | <false/>
 970   </dict>
 971 </dict>
 972 ```
 973 #### JSON
 974 ```
 975 {
 976   "policies": {
 977     "DisableSecurityBypass": {
 978       "InvalidCertificate": true false,
 979       "SafeBrowsing": true false
 980     }
 981   }
 982 }
 983 ```
 984 ### DisableSystemAddonUpdate
 985 Prevent system add-ons from being installed or update.
 986
 987 **Compatibility:** Firefox 60, Firefox ESR 60\
 988 **CCK2 Equivalent:** N/A\
 989 **Preferences Affected:** N/A
 990
 991 #### Windows
 992 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 993 ```
 994 #### macOS
 995 ```
 996 <dict>
 997   <key>DisableSystemAddonUpdate</key>
 998   <true/> | <false/>
 999 </dict>
1000 ```
1001 #### JSON
1002 ```
1003 {
1004   "policies": {
1005     "DisableSystemAddonUpdate": true | false
1006   }
1007 }
1008 ```
1009 ### DisableTelemetry
1010 Prevent the upload of telemetry data.
1011
1012 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1013
1014 **Compatibility:** Firefox 60, Firefox ESR 60\
1015 **CCK2 Equivalent:** `disableTelemetry`\
1016 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1017
1018 #### Windows
1019 ```
1020 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1021 ```
1022 #### macOS
1023 ```
1024 <dict>
1025   <key>DisableTelemetry</key>
1026   <true/> | <false/>
1027 </dict>
1028 ```
1029 #### JSON
1030 ```
1031 {
1032   "policies": {
1033     "DisableTelemetry": true | false
1034   }
1035 }
1036 ```
1037 ### DisplayBookmarksToolbar
1038 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1039
1040 **Compatibility:** Firefox 60, Firefox ESR 60\
1041 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1042 **Preferences Affected:** N/A
1043
1044 #### Windows
1045 ```
1046 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1047 ```
1048 #### macOS
1049 ```
1050 <dict>
1051   <key>DisplayBookmarksToolbar</key>
1052   <true/> | <false/>
1053 </dict>
1054 ```
1055 #### JSON
1056 ```
1057 {
1058   "policies": {
1059     "DisplayBookmarksToolbar": true | false
1060   }
1061 }
1062 ```
1063 ### DisplayMenuBar
1064 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1065
1066 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1067 **CCK2 Equivalent:** `displayMenuBar`\
1068 **Preferences Affected:** N/A
1069
1070 #### Windows
1071 ```
1072 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1073 ```
1074 #### macOS
1075 ```
1076 <dict>
1077   <key>DisplayMenuBar</key>
1078   <true/> | <false/>
1079 </dict>
1080 ```
1081 #### JSON
1082 ```
1083 {
1084   "policies": {
1085     "DisplayMenuBar": true | false
1086   }
1087 }
1088 ```
1089 ### DNSOverHTTPS
1090 Configure DNS over HTTPS.
1091
1092 `Enabled` determines whether DNS over HTTPS is enabled
1093
1094 `ProviderURL` is a URL to another provider.
1095
1096 `Locked` prevents the user from changing DNS over HTTPS preferences.
1097
1098 **Compatibility:** Firefox 63, Firefox ESR 68\
1099 **CCK2 Equivalent:** N/A\
1100 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1101
1102 #### Windows
1103 ```
1104 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1105 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1106 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1107 ```
1108 #### macOS
1109 ```
1110 <dict>
1111   <key>DNSOverHTTPS</key>
1112   <dict>
1113     <key>Enabled</key>
1114     <true/> | <false/>
1115     <key>ProviderURL</key>
1116     <string>URL_TO_ALTERNATE_PROVIDER</string>
1117     <key>Locked</key>
1118     <true/> | <false/>
1119   </dict>
1120 </dict>
1121 ```
1122 #### JSON
1123 ```
1124 {
1125   "policies": {
1126     "DNSOverHTTPS": {
1127       "Enabled":  true | false,
1128       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1129       "Locked": true | false
1130     }
1131   }
1132 }
1133 ```
1134 ### DontCheckDefaultBrowser
1135 Don't check if Firefox is the default browser at startup.
1136
1137 **Compatibility:** Firefox 60, Firefox ESR 60\
1138 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1139 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1140
1141 #### Windows
1142 ```
1143 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1144 ```
1145 #### macOS
1146 ```
1147 <dict>
1148   <key>DontCheckDefaultBrowser</key>
1149   <true/> | <false/>
1150 </dict>
1151 ```
1152 #### JSON
1153 ```
1154 {
1155   "policies": {
1156     "DontCheckDefaultBrowser": true | false
1157   }
1158 }
1159 ```
1160 ### DefaultDownloadDirectory
1161 Set the default download directory.
1162
1163 You can use ${home} for the native home directory.
1164
1165 **Compatibility:** Firefox 68, Firefox ESR 68\
1166 **CCK2 Equivalent:** N/A\
1167 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1168
1169 #### Windows
1170 ```
1171 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1172 ```
1173 #### macOS
1174 ```
1175 <dict>
1176   <key>DefaultDownloadDirectory</key>
1177   <string>${home}/Downloads</string>
1178 </dict>
1179 ```
1180 #### JSON (macOS and Linux)
1181 ```
1182 {
1183   "policies": {
1184     "DefaultDownloadDirectory": "${home}/Downloads"
1185 }
1186 ```
1187 #### JSON (Windows)
1188 ```
1189 {
1190   "policies": {
1191     "DefaultDownloadDirectory": "${home}\\Downloads"
1192 }
1193 ```
1194 ### DownloadDirectory
1195 Set and lock the download directory.
1196
1197 You can use ${home} for the native home directory.
1198
1199 **Compatibility:** Firefox 68, Firefox ESR 68\
1200 **CCK2 Equivalent:** N/A\
1201 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1202
1203 #### Windows
1204 ```
1205 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1206 ```
1207 #### macOS
1208 ```
1209 <dict>
1210   <key>DownloadDirectory</key>
1211   <string>${home}/Downloads</string>
1212 </dict>
1213 ```
1214 #### JSON (macOS and Linux)
1215 ```
1216 {
1217   "policies": {
1218     "DownloadDirectory": "${home}/Downloads"
1219 }
1220 ```
1221 #### JSON (Windows)
1222 ```
1223 {
1224   "policies": {
1225     "DownloadDirectory": "${home}\\Downloads"
1226 }
1227 ```
1228 ### EnableTrackingProtection
1229 Configure tracking protection.
1230
1231 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1232
1233 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1234
1235 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1236
1237 **Compatibility:** Firefox 60, Firefox ESR 60\
1238 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1239 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1240
1241 #### Windows
1242 ```
1243 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1244 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1245 ```
1246 #### macOS
1247 ```
1248 <dict>
1249   <key>EnableTrackingProtection</key>
1250   <dict>
1251     <key>Value</key>
1252     <true/> | <false/>
1253
1254     <key><Locked/key>
1255     <true/> | <false/>
1256   </dict>
1257 </dict>
1258 ```
1259 #### JSON
1260 ```
1261 {
1262   "policies": {
1263     "EnableTrackingProtection": {
1264       "Value": [true, false],
1265       "Locked": [true, false]
1266     }
1267 }
1268 ```
1269 ### EnterprisePoliciesEnabled
1270 Enable policy support on macOS.
1271
1272 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1273 **CCK2 Equivalent:** N/A\
1274 **Preferences Affected:** N/A
1275
1276 #### macOS
1277 ```
1278 <dict>
1279   <key>EnterprisePoliciesEnabled</key>
1280   <true/>
1281 </dict>
1282 ```
1283 ### Extensions
1284 Control the installation, uninstallation and locking of extensions.
1285
1286 `Install` is a list of URLs or native paths for extensions to be installed.
1287
1288 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1289
1290 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1291
1292 **Compatibility:** Firefox 60, Firefox ESR 60\
1293 **CCK2 Equivalent:** `addons`\
1294 **Preferences Affected:** N/A
1295
1296 #### Windows
1297 ```
1298 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1299 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1300 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1301 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1302 ```
1303 #### macOS
1304 ```
1305 <dict>
1306   <key>Extensions</key>
1307   <dict>
1308     <key>Install</key>
1309     <array>
1310       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1311       <string>//path/to/xpi</string>
1312     </array>
1313     <key>Uninstall</key>
1314     <array>
1315       <string>bad_addon_id@mozilla.org</string>
1316     </array>
1317     <key>Locked</key>
1318     <array>
1319       <string>addon_id@mozilla.org</string>
1320     </array>
1321   </dict>
1322 </dict>
1323 ```
1324 #### JSON
1325
1326
1327 ```
1328 {
1329   "policies": {
1330     "Extensions": {
1331       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1332       "Uninstall": ["bad_addon_id@mozilla.org"],
1333       "Locked":  ["addon_id@mozilla.org"]
1334     }
1335   }
1336 }
1337 ```
1338 ### ExtensionSettings
1339 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1340
1341 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1342
1343 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1344
1345 The configuration for each extension is another dictionary that can contain the fields documented below.
1346
1347 | Name | Description |
1348 | --- | --- |
1349 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1350 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1351 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1352 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1353 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1354 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing frmo the local file system, use a file:/// URL.
1355 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1356 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1357 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1358
1359 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1360 **CCK2 Equivalent:** N/A\
1361 **Preferences Affected:** N/A
1362
1363 #### Windows
1364
1365 Software\Policies\Mozilla\Firefox\ExtensionSettings = '{"*": {"installation_mode": "blocked"}}`
1366 #### macOS
1367 ```
1368 <dict>
1369   <key>ExtensionSettings</key>
1370   <dict>
1371     <key>*</key>
1372     <dict>
1373       <key>blocked_install_message</key>
1374       <string>Custom error message.</string>
1375       <key>install_sources</key>
1376       <array>
1377         <string>https://addons.mozilla.org/</string>
1378       </array>
1379       <key>installation_mode</key>
1380       <string>blocked</string>
1381     </dict>
1382     <key>uBlock0@raymondhill.net</key>
1383     <dict>
1384       <key>installation_mode</key>
1385        <string>force_installed</string>
1386       <key>install_url</key>
1387       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1388     </dict>
1389   </dict>
1390 </dict>
1391 ```
1392 #### JSON
1393 ```
1394 {
1395   "policies": {
1396     "ExtensionSettings": {
1397       "*": {
1398         "blocked_install_message": "Custom error message.",
1399         "install_sources": ["https://addons.mozilla.org/"],
1400         "installation_mode": "blocked"
1401       },
1402       "uBlock0@raymondhill.net": {
1403         "installation_mode": "force_installed",
1404         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1405       }
1406     }
1407   }
1408 }
1409 ```
1410 ### ExtensionUpdate
1411 Control extension updates.
1412
1413 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1414 **CCK2 Equivalent:** N/A\
1415 **Preferences Affected:** `extensions.update.enabled`
1416
1417 #### Windows
1418 ```
1419 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1420 ```
1421 #### macOS
1422 ```
1423 <dict>
1424   <key>ExtensionUpdate</key>
1425   <true/> | <false/>
1426 </dict>
1427 ```
1428 #### JSON
1429 ```
1430 {
1431   "policies": {
1432     "ExtensionUpdate": true | false
1433   }
1434 }
1435 ```
1436 ### FlashPlugin
1437 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1438
1439 `Allow` is a list of origins where Flash are allowed.
1440
1441 `Block` is a list of origins where Flash is not allowed.
1442
1443 `Default` determines whether or not Flash is allowed by default.
1444
1445 `Locked` prevents the user from changing Flash preferences.
1446
1447 **Compatibility:** Firefox 60, Firefox ESR 60\
1448 **CCK2 Equivalent:** `permissions.plugin`\
1449 **Preferences Affected:** `plugin.state.flash`
1450
1451 #### Windows
1452 ```
1453 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1454 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1455 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1456 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1457 ```
1458 #### macOS
1459 ```
1460 <dict>
1461   <key>FlashPlugin</key>
1462   <dict>
1463     <key>Allow</key>
1464     <array>
1465       <string>http://example.org</string>
1466     </array>
1467     <key>Block</key>
1468     <array>
1469       <string>http://example.edu</string>
1470     </array>
1471     <key>Default</key>
1472     <true/> | <false/>
1473     <key>Locked</key>
1474     <true/> | <false/>
1475   </dict>
1476 </dict>
1477 ```
1478 #### JSON
1479 ```
1480 {
1481   "policies": {
1482     "FlashPlugin": {
1483       "Allow": ["http://example.org/"],
1484       "Block": ["http://example.edu/"],
1485       "Default": true | false,
1486       "Locked": true | false
1487     }
1488   }
1489 }
1490 ```
1491 ### FirefoxHome
1492 Customize the Firefox Home page.
1493
1494 **Compatibility:** Firefox 68, Firefox ESR 68\
1495 **CCK2 Equivalent:** N/A\
1496 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1497
1498 #### Windows
1499 ```
1500 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1501 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1502 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1503 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1504 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1505 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1506 ```
1507 #### macOS
1508 ```
1509 <dict>
1510   <key>FirefoxHome</key>
1511   <dict>
1512     <key>Search</key>
1513     <true/> | <false/>
1514     <key>TopSites</key>
1515     <true/> | <false/>
1516     <key>Highlights</key>
1517     <true/> | <false/>
1518     <key>Pocket</key>
1519     <true/> | <false/>
1520     <key>Snippets</key>
1521     <true/> | <false/>
1522     <key>Locked</key>
1523     <true/> | <false/>
1524   </dict>
1525 </dict>
1526 ```
1527 #### JSON
1528 ```
1529 {
1530   "policies": {
1531     "FirefoxHome": {
1532       "Search": true | false,
1533       "TopSites": true | false,
1534       "Highlights": true | false,
1535       "Pocket": true | false,
1536       "Snippets": true | false,
1537       "Locked": true | false
1538     }
1539   }
1540 }
1541 ```
1542 ### HardwareAcceleration
1543 Control hardware acceleration.
1544
1545 **Compatibility:** Firefox 60, Firefox ESR 60\
1546 **CCK2 Equivalent:** N/A\
1547 **Preferences Affected:** `layers.acceleration.disabled`
1548
1549 #### Windows
1550 ```
1551 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1552 ```
1553 #### macOS
1554 ```
1555 <dict>
1556   <key>HardwareAcceleration</key>
1557   <true/> | <false/>
1558 </dict>
1559 ```
1560 #### JSON
1561 ```
1562 {
1563   "policies": {
1564     "HardwareAcceleration": true | false
1565   }
1566 }
1567 ```
1568 ### Homepage
1569 Configure the default homepage and how Firefox starts.
1570
1571 `URL` is the default homepage.
1572
1573 `Locked` prevents the user from changing homepage preferences.
1574
1575 `Additional` allows for more than one homepage.
1576
1577 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1578
1579 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1580 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1581 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1582
1583 #### Windows
1584 ```
1585 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1586 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1587 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1588 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1589 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1590 ```
1591 #### macOS
1592 ```
1593 <dict>
1594   <key>Homepage</key>
1595   <dict>
1596     <key>URL</key>
1597     <string>http://example.com</string>
1598     <key>Locked</key>
1599     <true/> | <false/>
1600     <key>Additional</key>
1601     <array>
1602       <string>http://example.org</string>
1603       <string>http://example.edu</string>
1604     </array>
1605     <key>StartPage</key>
1606     <string>always | never | from-visited</string>
1607   </dict>
1608 </dict>
1609 ```
1610 #### JSON
1611 ```
1612 {
1613   "policies": {
1614     "Homepage": {
1615       "URL": "http://example.com/",
1616       "Locked": true | false,
1617       "Additional": ["http://example.org/",
1618                      "http://example.edu/"],
1619       "StartPage": "none" | "homepage" |  "previous-session"
1620     }
1621   }
1622 }
1623 ```
1624 ### InstallAddonsPermission
1625 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1626
1627 `Allow` is a list of origins where extension installs are allowed.
1628
1629 `Default` determines whether or not extension installs are allowed by default.
1630
1631 **Compatibility:** Firefox 60, Firefox ESR 60\
1632 **CCK2 Equivalent:** `permissions.install`\
1633 **Preferences Affected:** `xpinstall.enabled`
1634
1635 #### Windows
1636 ```
1637 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1638 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1639 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1640 ```
1641 #### macOS
1642 ```
1643 <dict>
1644   <key>InstallAddonsPermission</key>
1645   <dict>
1646     <key>Allow</key>
1647     <array>
1648       <string>http://example.org</string>
1649       <string>http://example.edu</string>
1650     </array>
1651     <key>Default</key>
1652     <true/> | <false/>
1653   </dict>
1654 </dict>
1655 ```
1656 #### JSON
1657 ```
1658 {
1659   "policies": {
1660     "InstallAddonsPermission": {
1661       "Allow": ["http://example.org/",
1662                 "http://example.edu/"],
1663       "Default": true | false
1664     }
1665   }
1666 }
1667 ```
1668 ### LocalFileLinks
1669 Enable linking to local files by origin.
1670
1671 **Compatibility:** Firefox 68, Firefox ESR 68\
1672 **CCK2 Equivalent:** N/A\
1673 **Preferences Affected:** `capability.policy.localfilelinks.*`
1674
1675 #### Windows
1676 ```
1677 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1678 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1679 ```
1680 #### macOS
1681 ```
1682 <dict>
1683   <key>LocalFileLinks</key>
1684   <array>
1685     <string>http://example.org</string>
1686     <string>http://example.edu</string>
1687   </array>
1688 </dict>
1689 ```
1690 #### JSON
1691 ```
1692 {
1693   "policies": {
1694     "LocalFileLinks": ["http://example.org/",
1695                        "http://example.edu/"]
1696   }
1697 }
1698 ```
1699 ### NoDefaultBookmarks
1700 Disable the creation of default bookmarks.
1701
1702 This policy is only effective if the user profile has not been created yet.
1703
1704 **Compatibility:** Firefox 60, Firefox ESR 60\
1705 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1706 **Preferences Affected:** N/A
1707
1708 #### Windows
1709 ```
1710 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1711 ```
1712 #### macOS
1713 ```
1714 <dict>
1715   <key>NoDefaultBookmarks</key>
1716   <true/> | <false/>
1717 </dict>
1718 ```
1719 #### JSON
1720 ```
1721 {
1722   "policies": {
1723     "NoDefaultBookmarks": true | false
1724   }
1725 }
1726 ```
1727 ### NetworkPrediction
1728 Enable or disable network prediction (DNS prefetching).
1729
1730 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1731 **CCK2 Equivalent:** N/A\
1732 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1733
1734 #### Windows
1735 ```
1736 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1737 ```
1738 #### macOS
1739 ```
1740 <dict>
1741   <key>NetworkPrediction</key>
1742   <true/> | <false/>
1743 </dict>
1744 ```
1745 #### JSON
1746 ```
1747 {
1748   "policies": {
1749     "NetworkPrediction": true | false
1750 }
1751 ```
1752 ### NewTabPage
1753 Enable or disable the New Tab page.
1754
1755 **Compatibility:** Firefox 68, Firefox ESR 68\
1756 **CCK2 Equivalent:** N/A\
1757 **Preferences Affected:** `browser.newtabpage.enabled`
1758
1759 #### Windows
1760 ```
1761 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1762 ```
1763 #### macOS
1764 ```
1765 <dict>
1766   <key>NewTabPage</key>
1767   <true/> | <false/>
1768 </dict>
1769 ```
1770 #### JSON
1771 ```
1772 {
1773   "policies": {
1774     "NewTabPage": true | false
1775 }
1776 ```
1777 ### OfferToSaveLogins
1778 Control whether or not Firefox offers to save passwords.
1779
1780 **Compatibility:** Firefox 60, Firefox ESR 60\
1781 **CCK2 Equivalent:** `dontRememberPasswords`\
1782 **Preferences Affected:** `signon.rememberSignons`
1783
1784 #### Windows
1785 ```
1786 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1787 ```
1788 #### macOS
1789 ```
1790 <dict>
1791   <key>OfferToSaveLogins</key>
1792   <true/> | <false/>
1793 </dict>
1794 ```
1795 #### JSON
1796 ```
1797 {
1798   "policies": {
1799     "OfferToSaveLogins": true | false
1800   }
1801 }
1802 ```
1803 ### OverrideFirstRunPage
1804 Override the first run page. If the value is blank, no first run page is displayed.
1805
1806 **Compatibility:** Firefox 60, Firefox ESR 60\
1807 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1808 **Preferences Affected:** `startup.homepage_welcome_url`
1809
1810 #### Windows
1811 ```
1812 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1813 ```
1814 #### macOS
1815 ```
1816 <dict>
1817   <key>OverrideFirstRunPage</key>
1818   <string>http://example.org</string>
1819 </dict>
1820 ```
1821 #### JSON
1822 ```
1823 {
1824   "policies": {
1825     "OverrideFirstRunPage": "http://example.org"
1826 }
1827 ```
1828 ### OverridePostUpdatePage
1829 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1830
1831 **Compatibility:** Firefox 60, Firefox ESR 60\
1832 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1833 **Preferences Affected:** `startup.homepage_override_url`
1834
1835 #### Windows
1836 ```
1837 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1838 ```
1839 #### macOS
1840 ```
1841 <dict>
1842   <key>OverridePostUpdatePage</key>
1843   <string>http://example.org</string>
1844 </dict>
1845 ```
1846 #### JSON
1847 ```
1848 {
1849   "policies": {
1850     "OverridePostUpdatePage": "http://example.org"
1851 }
1852 ```
1853 ### Permissions
1854 Set permissions associated with camera, microphone, location, and notifications
1855
1856 `Allow` is a list of origins where the feature is allowed.
1857
1858 `Block` is a list of origins where the feature is not allowed.
1859
1860 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1861
1862 `Locked` prevents the user from changing preferences for the feature.
1863
1864 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1865 **CCK2 Equivalent:** N/A\
1866 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1867
1868 #### Windows
1869 ```
1870 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1871 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1872 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1873 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1874 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1875 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1876 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1877 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1878 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1879 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1880 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1881 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1882 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1883 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1884 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1885 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1886 ```
1887 #### macOS
1888 ```
1889 <dict>
1890   <key>Permissions</key>
1891   <dict>
1892     <key>Camera</key>
1893     <dict>
1894       <key>Allow</key>
1895       <array>
1896         <string>https://example.org</string>
1897       </array>
1898       <key>Block</key>
1899       <array>
1900         <string>https://example.edu</string>
1901       </array>
1902       <key>BlockNewRequests</key>
1903       <true/>
1904       <key>Locked</key>
1905       <true/>
1906     </dict>
1907     <key>Microphone</key>
1908     <dict>
1909       <key>Allow</key>
1910       <array>
1911         <string>https://example.org</string>
1912       </array>
1913       <key>Block</key>
1914       <array>
1915         <string>https://example.edu</string>
1916       </array>
1917       <key>BlockNewRequests</key>
1918       <true/>
1919       <key>Locked</key>
1920       <true/>
1921     </dict>
1922     <key>Location</key>
1923     <dict>
1924       <key>Allow</key>
1925       <array>
1926         <string>https://example.org</string>
1927       </array>
1928       <key>Block</key>
1929       <array>
1930         <string>https://example.edu</string>
1931       </array>
1932       <key>BlockNewRequests</key>
1933       <true/>
1934       <key>Locked</key>
1935       <true/>
1936     </dict>
1937     <key>Notifications</key>
1938     <dict>
1939       <key>Allow</key>
1940       <array>
1941         <string>https://example.org</string>
1942       </array>
1943       <key>Block</key>
1944       <array>
1945         <string>https://example.edu</string>
1946       </array>
1947       <key>BlockNewRequests</key>
1948       <true/>
1949       <key>Locked</key>
1950       <true/>
1951     </dict>
1952   </dict>
1953 </dict>
1954 ```
1955 #### JSON
1956 ```
1957 {
1958   "policies": {
1959     "Permissions": {
1960       "Camera": {
1961         "Allow": ["https://example.org"],
1962         "Block": ["https://example.edu"],
1963         "BlockNewRequests": true | false,
1964         "Locked": true | false
1965       },
1966       "Microphone": {
1967         "Allow": ["https://example.org"],
1968         "Block": ["https://example.edu"],
1969         "BlockNewRequests": true | false,
1970         "Locked": true | false
1971       },
1972       "Location": {
1973         "Allow": ["https://example.org"],
1974         "Block": ["https://example.edu"],
1975         "BlockNewRequests": true | false,
1976         "Locked": true | false
1977       },
1978       "Notifications": {
1979         "Allow": ["https://example.org"],
1980         "Block": ["https://example.edu"],
1981         "BlockNewRequests": true | false,
1982         "Locked": true | false
1983       }
1984     }
1985   }
1986 }
1987 ```
1988 ### PopupBlocking
1989 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1990
1991 `Allow` is a list of origins where popup-windows are allowed.
1992
1993 `Default` determines whether or not pop-up windows are allowed by default.
1994
1995 `Locked` prevents the user from changing pop-up preferences.
1996
1997 **Compatibility:** Firefox 60, Firefox ESR 60\
1998 **CCK2 Equivalent:** `permissions.popup`\
1999 **Preferences Affected:** `dom.disable_open_during_load`
2000
2001 #### Windows
2002 ```
2003 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2004 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2005 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2006 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2007 ```
2008 #### macOS
2009 ```
2010 <dict>
2011   <key>PopupBlocking</key>
2012   <dict>
2013     <key>Allow</key>
2014     <array>
2015       <string>http://example.org</string>
2016       <string>http://example.edu</string>
2017     </array>
2018     <key>Default</key>
2019     <true/> | <false/>
2020     <key>Locked</key>
2021     <true/> | <false/>
2022   </dict>
2023 </dict>
2024 ```
2025 #### JSON
2026 ```
2027 {
2028   "policies": {
2029     "PopupBlocking": {
2030       "Allow": ["http://example.org/",
2031                 "http://example.edu/"],
2032       "Default": true | false,
2033       "Locked": true | false
2034     }
2035   }
2036 }
2037 ```
2038 ### Preferences
2039 Set and lock certain preferences.
2040
2041 **Compatibility:** See below\
2042 **CCK2 Equivalent:** `preferences`\
2043 **Preferences Affected:** See below
2044
2045 | Preference | Type | Compatibility
2046 | --- | --- | ---
2047 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR
2048 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR
2049 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR
2050 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR
2051 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR
2052 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR
2053 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR
2054 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR
2055 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR
2056 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR
2057 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR
2058 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR
2059 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR
2060 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR
2061 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR
2062 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR
2063 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR
2064 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR
2065 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR
2066 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR
2067 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR
2068 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR
2069 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR
2070 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR
2071 #### Windows
2072 ```
2073 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2074 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2075 ```
2076 #### macOS
2077 ```
2078 <dict>
2079   <key>Preferences</key>
2080   <dict>
2081     <key>boolean_preference_name</key>
2082     <true/> | <false/>
2083     <key>string_preference_name</key>
2084     <string>string_value</string>
2085   </dict>
2086 </dict>
2087 ```
2088 #### JSON
2089 ```
2090 {
2091   "policies": {
2092     "Preferences": {
2093       "boolean_preference_name": true | false,
2094       "string_preference_name": "string_value"
2095     }
2096   }
2097 }
2098 ```
2099 ### PromptForDownloadLocation
2100 Ask where to save each file before downloading.
2101
2102 **Compatibility:** Firefox 68, Firefox ESR 68\
2103 **CCK2 Equivalent:** N/A
2104 **Preferences Affected:** `browser.download.useDownloadDir`
2105
2106 #### Windows
2107 ```
2108 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2109 ```
2110 #### macOS
2111 ```
2112 <dict>
2113   <key>PromptForDownloadLocation</key>
2114   <true/> | <false/>
2115 </dict>
2116 ```
2117 #### JSON
2118 ```
2119 {
2120   "policies": {
2121     "PromptForDownloadLocation": true | false
2122   }
2123 }
2124 ```
2125 ### Proxy
2126 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2127 To specify ports, append them to the hostnames with a colon (:).
2128
2129 `Mode` is the proxy method being used.
2130
2131 `Locked` is whether or not proxy settings can be changed.
2132
2133 `HTTPProxy` is the HTTP proxy server.
2134
2135 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2136
2137 `SSLProxy` is the SSL proxy server.
2138
2139 `FTPProxy` is the FTP proxy server.
2140
2141 `SOCKSProxy` is the SOCKS proxy server
2142
2143 `SOCKSVersion` is the SOCKS version (4 or 5)
2144
2145 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2146
2147 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2148
2149 `AutoLogin` means do not prompt for authentication if password is saved.
2150
2151 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2152
2153 **Compatibility:** Firefox 60, Firefox ESR 60\
2154 **CCK2 Equivalent:** `networkProxy*`\
2155 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2156
2157 #### Windows
2158 ```
2159 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2160 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2161 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2162 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2163 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2164 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2165 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2166 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2167 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2168 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2169 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2170 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2171 ```
2172 #### macOS
2173 ```
2174 <dict>
2175   <key>Proxy</key>
2176   <dict>
2177     <key>Mode</key>
2178     <string>none | system | manual | autoDetect| autoConfig</string>
2179     <key>Locked</key>
2180     <true> | </false>
2181     <key>HTTPProxy</key>
2182     <string>https://httpproxy.example.com</string>
2183     <key>UseHTTPProxyForAllProtocols</key>
2184     <true> | </false>
2185     <key>SSLProxy</key>
2186     <string>https://sslproxy.example.com</string>
2187     <key>FTPProxy</key>
2188     <string>https://ftpproxy.example.com</string>
2189     <key>SOCKSProxy</key>
2190     <string>https://socksproxy.example.com</string>
2191     <key>SOCKSVersion</key>
2192     <string>4 | 5</string>
2193     <key>Passthrough</key>
2194     <string>&lt;local>&gt;</string>
2195     <key>AutoConfigURL</key>
2196     <string>URL_TO_AUTOCONFIG</string>
2197     <key>AutoLogin</key>
2198     <true> | </false>
2199     <key>UseProxyForDNS</key>
2200     <true> | </false>
2201   </dict>
2202 </dict>
2203 ```
2204 ### JSON
2205 ```
2206 {
2207   "policies": {
2208     "Proxy": {
2209       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2210       "Locked": [true, false],
2211       "HTTPProxy": "hostname",
2212       "UseHTTPProxyForAllProtocols": [true, false],
2213       "SSLProxy": "hostname",
2214       "FTPProxy": "hostname",
2215       "SOCKSProxy": "hostname",
2216       "SOCKSVersion": 4 | 5
2217       "Passthrough": "<local>",
2218       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2219       "AutoLogin":  [true, false],
2220       "UseProxyForDNS": [true, false]
2221     }
2222   }
2223 }
2224 ```
2225 ### RequestedLocales
2226 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2227
2228 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2229
2230 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2231 **CCK2 Equivalent:** N/A\
2232 **Preferences Affected:** N/A
2233 #### Windows
2234 ```
2235 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2236 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2237
2238 or
2239
2240 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2241 ```
2242 #### macOS
2243 ```
2244 <dict>
2245   <key>RequestedLocales</key>
2246   <array>
2247     <string>de</string>
2248     <string>en-US</string>
2249   </array>
2250 </dict>
2251
2252 or
2253
2254 <dict>
2255   <key>RequestedLocales</key>
2256   <string>de,en-US</string>
2257 </dict>
2258
2259 ```
2260 #### JSON
2261 ```
2262 {
2263   "policies": {
2264     "RequestedLocales": ["de", "en-US"]
2265   }
2266 }
2267
2268 or
2269
2270 {
2271   "policies": {
2272     "RequestedLocales": "de,en-US"
2273   }
2274 }
2275 ```
2276 ### SanitizeOnShutdown (Selective)
2277 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2278
2279 **Compatibility:** Firefox 68, Firefox ESR 68\
2280 **CCK2 Equivalent:** N/A\
2281 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2282 #### Windows
2283 ```
2284 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2285 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2286 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2287 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2288 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2289 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2290 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2291 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2292 ```
2293 #### macOS
2294 ```
2295 <dict>
2296   <key>SanitizeOnShutdown</key>
2297   <dict>
2298     <key>Cache</key>
2299     <true/> | <false/>
2300     <key>Cookies</key>
2301     <true/> | <false/>
2302     <key>Downloads</key>
2303     <true/> | <false/>
2304     <key>FormData</key>
2305     <true/> | <false/>
2306     <key>History</key>
2307     <true/> | <false/>
2308     <key>Sessions</key>
2309     <true/> | <false/>
2310     <key>SiteSettings</key>
2311     <true/> | <false/>
2312     <key>OfflineApps</key>
2313     <true/> | <false/>
2314   </dict>
2315 </dict>
2316 ```
2317 #### JSON
2318 ```
2319 {
2320   "policies": {
2321     "SanitizeOnShutdown": {
2322       "Cache": true | false,
2323       "Cookies": true | false,
2324       "Downloads": true | false,
2325       "FormData": true | false,
2326       "History": true | false,
2327       "Sessions": true | false,
2328       "SiteSettings": true | false,
2329       "OfflineApps": true | false
2330     }
2331   }
2332 }
2333 ```
2334 ### SanitizeOnShutdown (All)
2335 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2336
2337 **Compatibility:** Firefox 60, Firefox ESR 60\
2338 **CCK2 Equivalent:** N/A\
2339 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2340 #### Windows
2341 ```
2342 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2343 ```
2344 #### macOS
2345 ```
2346 <dict>
2347   <key>SanitizeOnShutdown</key>
2348   <true/> | <false/>
2349 </dict>
2350 ```
2351 #### JSON
2352 ```
2353 {
2354   "policies": {
2355     "SanitizeOnShutdown": true | false
2356   }
2357 }
2358 ```
2359 ### SearchBar
2360 Set whether or not search bar is displayed.
2361
2362 **Compatibility:** Firefox 60, Firefox ESR 60\
2363 **CCK2 Equivalent:** `showSearchBar`\
2364 **Preferences Affected:** N/A
2365
2366 #### Windows
2367 ```
2368 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2369 ```
2370 #### macOS
2371 ```
2372 <dict>
2373   <key>SearchBar</key>
2374   <string>unified | separate</string>
2375 </dict>
2376 ```
2377
2378 #### JSON
2379 ```
2380 {
2381   "policies": {
2382     "SearchBar": "unified" | "separate"
2383   }
2384 }
2385 ```
2386
2387
2388
2389
2390
2391 ### SearchEngines (This policy is only available on the ESR.)
2392
2393 ### SearchEngines | Default
2394
2395 Set the default search engine. This policy is only available on the ESR.
2396
2397 **Compatibility:** Firefox ESR 60\
2398 **CCK2 Equivalent:** `defaultSearchEngine`\
2399 **Preferences Affected:** N/A
2400
2401 ### Windows
2402 ```
2403 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2404 ```
2405 #### macOS
2406 ```
2407 <dict>
2408   <key>SearchEngines</key>
2409   <dict>
2410     <key>Default</key>
2411     <string>NAME_OF_SEARCH_ENGINE</string>
2412   </dict>
2413 </dict>
2414 ```
2415 ### JSON
2416 ```
2417 {
2418   "policies": {
2419     "SearchEngines": {
2420       "Default": "NAME_OF_SEARCH_ENGINE"
2421     }
2422   }
2423 }
2424 ```
2425 ### SearchEngines | PreventInstalls
2426
2427 Prevent installing search engines from webpages.
2428
2429 **Compatibility:** Firefox ESR 60\
2430 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2431 **Preferences Affected:** N/A
2432
2433 ### Windows
2434 ```
2435 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2436 ```
2437 #### macOS
2438 ```
2439 <dict>
2440   <key>SearchEngines</key>
2441   <dict>
2442     <key>PreventInstalls</key>
2443     <true/> | <false/>
2444   </dict>
2445 </dict>
2446 ```
2447 ### JSON
2448 ```
2449 {
2450   "policies": {
2451     "SearchEngines": {
2452       "PreventInstalls": true | false
2453     }
2454   }
2455 }
2456 ```
2457 ### SearchEngines | Remove
2458
2459 Hide built-in search engines. This policy is only available on the ESR.
2460
2461 **Compatibility:** Firefox ESR 60.2\
2462 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2463 **Preferences Affected:** N/A
2464
2465 ### Windows
2466 ```
2467 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2468 ```
2469 #### macOS
2470 ```
2471 <dict>
2472   <key>SearchEngines</key>
2473   <dict>
2474     <key>Remove</key>
2475     <array>
2476       <string>NAME_OF_SEARCH_ENGINE</string>
2477     </array>
2478   </dict>
2479 </dict>
2480 ```
2481 ### JSON
2482 ```
2483 {
2484   "policies": {
2485     "SearchEngines": {
2486       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2487     }
2488   }
2489 }
2490 ```
2491 ### SearchEngines | Add
2492
2493 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2494
2495 `Name` is the name of the search engine.
2496
2497 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2498
2499 `Method` is either GET or POST
2500
2501 `IconURL` is a URL for the icon to use.
2502
2503 `Alias` is a keyword to use for the engine.
2504
2505 `Description` is a description of the search engine.
2506
2507 `PostData` is the POST data as name value pairs separated by &.
2508
2509 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2510
2511 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2512 **CCK2 Equivalent:** `searchplugins`\
2513 **Preferences Affected:** N/A
2514
2515 #### Windows
2516 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2517 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2518 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2519 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2520 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2521 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2522 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2523 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2524
2525 #### macOS
2526 ```
2527 <dict>
2528   <key>SearchEngines</key>
2529   <dict>
2530     <key>Add</key>
2531     <array>
2532       <dict>
2533         <key>Name</key>
2534         <string>Example1</string>
2535         <key>URLTemplate</key>
2536         <string>https://www.example.org/q={searchTerms}</string>
2537         <key>Method</key>
2538         <string>GET | POST </string>
2539         <key>IconURL</key>
2540         <string>https://www.example.org/favicon.ico</string>
2541         <key>Alias</key>
2542         <string>example</string>
2543         <key>Description</key>
2544         <string>Example Description</string>
2545         <key>SuggestURLTemplate</key>
2546         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2547         <key>PostData</key>
2548         <string>name=value&q={searchTerms}</string>
2549       </dict>
2550     <array>
2551   </dict>
2552 </dict>
2553 ```
2554 ### JSON
2555 ```
2556 {
2557   "policies": {
2558     "SearchEngines": {
2559       "Add": [
2560         {
2561           "Name": "Example1",
2562           "URLTemplate": "https://www.example.org/q={searchTerms}",
2563           "Method": "GET" | "POST",
2564           "IconURL": "https://www.example.org/favicon.ico",
2565           "Alias": "example",
2566           "Description": "Description",
2567           "PostData": "name=value&q={searchTerms}",
2568           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2569         }
2570       ]
2571     }
2572   }
2573 }
2574 ```
2575 ### SearchSuggestEnabled
2576
2577 Enable search suggestions.
2578
2579 **Compatibility:** Firefox 68, Firefox ESR 68\
2580 **CCK2 Equivalent:** N/A\
2581 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2582
2583 ### Windows
2584 ```
2585 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2586 ```
2587 #### macOS
2588 ```
2589 <dict>
2590   <key>SearchSuggestEnabled</key>
2591   <true/> | <false/>
2592 </dict>
2593 ```
2594 ### JSON
2595 ```
2596 {
2597   "policies": {
2598     "SearchSuggestEnabled": true | false
2599   }
2600 }
2601 ```
2602 ### SecurityDevices
2603
2604 Install PKCS #11 modules.
2605
2606 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2607 **CCK2 Equivalent:** `certs.devices`\
2608 **Preferences Affected:** N/A
2609
2610 #### Windows
2611 ```
2612 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2613 ```
2614 #### macOS
2615 ```
2616 <dict>
2617   <key>SecurityDevices</key>
2618   <dict>
2619     <key>NAME_OF_DEVICE</key>
2620     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2621   </dict>
2622 </dict>
2623 ```
2624
2625 #### JSON
2626 ```
2627 {
2628   "policies": {
2629     "SecurityDevices": {
2630       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2631     }
2632   }
2633 }
2634 ```
2635 ### SSLVersionMax
2636
2637 Set and lock the maximum version of TLS.
2638
2639 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2640 **CCK2 Equivalent:** N/A\
2641 **Preferences Affected:** `security.tls.version.max`
2642
2643 #### Windows
2644 ```
2645 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2646 ```
2647 #### macOS
2648 ```
2649 <dict>
2650   <key>SSLVersionMax</key>
2651   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2652 </dict>
2653 ```
2654
2655 #### JSON
2656 ```
2657 {
2658   "policies": {
2659     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2660   }
2661 }
2662 ```
2663 ### SSLVersionMin
2664
2665 Set and lock the minimum version of TLS.
2666
2667 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2668 **CCK2 Equivalent:** N/A\
2669 **Preferences Affected:** `security.tls.version.min`
2670
2671 #### Windows
2672 ```
2673 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2674 ```
2675 #### macOS
2676 ```
2677 <dict>
2678   <key>SSLVersionMin</key>
2679   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2680 </dict>
2681 ```
2682
2683 #### JSON
2684 ```
2685 {
2686   "policies": {
2687     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2688   }
2689 }
2690 ```
2691 ### SupportMenu
2692 Add a menuitem to the help menu for specifying support information.
2693
2694 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
2695 **CCK2 Equivalent:** helpMenu\
2696 **Preferences Affected:** N/A
2697
2698 #### Windows
2699 ```
2700 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
2701 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
2702 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S"
2703 ```
2704 #### macOS
2705 ```
2706 <dict>
2707   <key>SupportMenu</key>
2708   <dict>
2709     <key>Title</key>
2710     <string>SupportMenu</string>
2711     <key>URL</key>
2712     <string>http://example.com/support</string>
2713     <key>AccessKey</key>
2714     <string>S</string>
2715   </dict>
2716 </dict>
2717 ```
2718 ### JSON
2719 ```
2720 {
2721   "policies": {
2722     "SupportMenu": {
2723       "Title": "Support Menu",
2724       "URL": "http://example.com/support",
2725       "AccessKey": "S"
2726     }
2727   }
2728 }
2729 ```
2730 ### WebsiteFilter
2731 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2732
2733 **Compatibility:** Firefox 60, Firefox ESR 60\
2734 **CCK2 Equivalent:** N/A\
2735 **Preferences Affected:** N/A
2736
2737 #### Windows
2738 ```
2739 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2740 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2741 ```
2742 #### macOS
2743 ```
2744 <dict>
2745   <key>WebsiteFilter</key>
2746   <dict>
2747     <key>Block</key>
2748     <array>
2749       <string><all_urls></string>
2750     </array>
2751     <key>Exceptions</key>
2752     <array>
2753       <string>http://example.org/*</string>
2754     </array>
2755   </dict>
2756
2757 </dict>
2758 ```
2759 ### JSON
2760 ```
2761 {
2762   "policies": {
2763     "WebsiteFilter": {
2764       "Block": ["<all_urls>"],
2765       "Exceptions": ["http://example.org/*"]
2766     }
2767   }
2768 }
2769 ```