README.md

   1 **IMPORTANT**: **Complete Firefox 68 policies will be released later today.**
   2
   3 **IMPORTANT**: This file is in active development along with the policies in Firefox. Make sure to check the compatibility section to see if a policy is available in a specific version of Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases.
   4
   5 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
  10 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
  11 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  12 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  13 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  14 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  15 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  16 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  17 | **[`Certificates`](#certificates)** |
  18 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  19 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  20 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  21 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  22 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  25 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  26 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  27 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  28 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  29 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  30 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  31 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  32 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  33 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  34 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  35 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  36 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  37 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  38 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  39 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  40 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  41 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  42 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  43 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  44 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  45 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  46 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  47 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  48 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  49 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  50 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  51 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  52 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  53 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  54 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  55 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  56 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  57 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  58 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  59 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  60 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  61 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  62 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  63 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  64 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  65 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  66 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  67 | **[`Proxy`](#proxy)** | Configure proxy settings.
  68 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  69 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  70 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  71 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  72 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  73 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  74 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  75 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  76 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  77 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  78 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  79 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  80 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  81 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  82
  83
  84 ### AppUpdateURL
  85
  86 Change the URL for application update.
  87
  88 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  89 **CCK2 Equivalent:** N/A\
  90 **Preferences Affected:** `app.update.url`
  91
  92 #### Windows
  93 ```
  94 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  95 ```
  96 #### macOS
  97 ```
  98 <dict>
  99   <key>AppUpdateURL</key>
 100   <string>https://yoursite.com</string>
 101 </dict>
 102 ```
 103 ### JSON
 104 ```
 105 {
 106   "policies": {
 107     "AppUpdateURL": "https://yoursite.com"
 108   }
 109 }
 110 ```
 111 ### Authentication
 112
 113 Configure sites that support integrated authentication.
 114
 115 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 116
 117 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 118 **CCK2 Equivalent:** N/A\
 119 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 120
 121 #### Windows
 122 ```
 123 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 124 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 125 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 126 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 127 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 128 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 129 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 130 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 131 ```
 132 #### macOS
 133 ```
 134 <dict>
 135   <key>Authentication</key>
 136   <dict>
 137     <key>SPNEGO</key>
 138     <array>
 139       <string>mydomain.com</string>
 140       <string>https://myotherdomain.com</string>
 141     </array>
 142     <key>Delegated</key>
 143     <array>
 144       <string>mydomain.com</string>
 145       <string>https://myotherdomain.com</string>
 146     </array>
 147     <key>NTLM</key>
 148     <array>
 149       <string>mydomain.com</string>
 150       <string>https://myotherdomain.com</string>
 151     </array>
 152     <key>AllowNonFQDN</key>
 153       <dict>
 154       <key>SPNEGO</key>
 155       <true/> | <false/>
 156       <key>NTLM</key>
 157       <true/> | <false/>
 158     </dict>
 159   </dict>
 160 </dict>
 161 ```
 162 ### JSON
 163 ```
 164 {
 165   "policies": {
 166     "Authentication": {
 167       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 168       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 169       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 170       "AllowNonFQDN": {
 171         "SPNEGO": true | false,
 172         "NTLM": true | false
 173       }
 174     }
 175   }
 176 }
 177 ```
 178 ### BlockAboutAddons
 179
 180 Block access to the Add-ons Manager (about:addons).
 181
 182 **Compatibility:** Firefox 60, Firefox ESR 60\
 183 **CCK2 Equivalent:** `disableAddonsManager`\
 184 **Preferences Affected:** N/A
 185
 186 #### Windows
 187 ```
 188 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 189 ```
 190 #### macOS
 191 ```
 192 <dict>
 193   <key>BlockAboutAddons</key>
 194   <true/> | <false/>
 195 </dict>
 196 ```
 197 #### JSON
 198 ```
 199 {
 200   "policies": {
 201     "BlockAboutAddons": true | false
 202   }
 203 }
 204 ```
 205 ### BlockAboutConfig
 206
 207 Block access to about:config.
 208
 209 **Compatibility:** Firefox 60, Firefox ESR 60\
 210 **CCK2 Equivalent:** `disableAboutConfig`\
 211 **Preferences Affected:** N/A
 212
 213 #### Windows
 214 ```
 215 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 216 ```
 217 #### macOS
 218 ```
 219 <dict>
 220   <key>BlockAboutConfig</key>
 221   <true/> | <false/>
 222 </dict>
 223 ```
 224 #### JSON
 225 ```
 226 {
 227   "policies": {
 228     "BlockAboutConfig": true | false
 229   }
 230 }
 231 ```
 232 ### BlockAboutProfiles
 233
 234 Block access to About Profiles (about:profiles).
 235
 236 **Compatibility:** Firefox 60, Firefox ESR 60\
 237 **CCK2 Equivalent:** `disableAboutProfiles`\
 238 **Preferences Affected:** N/A
 239
 240 #### Windows
 241 ```
 242 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 243 ```
 244 #### macOS
 245 ```
 246 <dict>
 247   <key>BlockAboutProfiles</key>
 248   <true/> | <false/>
 249 </dict>
 250 ```
 251 #### JSON
 252 ```
 253 {
 254   "policies": {
 255     "BlockAboutProfiles": true | false
 256   }
 257 }
 258 ```
 259 ### BlockAboutSupport
 260
 261 Block access to Troubleshooting Information (about:support).
 262
 263 **Compatibility:** Firefox 60, Firefox ESR 60\
 264 **CCK2 Equivalent:** `disableAboutSupport`\
 265 **Preferences Affected:** N/A
 266
 267 #### Windows
 268 ```
 269 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 270 ```
 271 #### macOS
 272 ```
 273 <dict>
 274   <key>BlockAboutSupport</key>
 275   <true/> | <false/>
 276 </dict>
 277 ```
 278 #### JSON
 279 ```
 280 {
 281   "policies": {
 282     "BlockAboutSupport": true | false
 283   }
 284 }
 285 ```
 286 ### Bookmarks
 287
 288 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 289
 290 **Compatibility:** Firefox 60, Firefox ESR 60\
 291 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 292 **Preferences Affected:** N/A
 293
 294 #### Windows
 295 ```
 296 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 297 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 298 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 299 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 300 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 301 ```
 302 #### macOS
 303 ```
 304 <dict>
 305   <key>Bookmarks</key>
 306   <array>
 307     <dict>
 308       <key>Title</key>
 309       <string>Example</string>
 310       <key>URL</key>
 311       <string>https://example.com</string>
 312       <key>Favicon</key>
 313       <string>https://example.com/favicon.ico</string>
 314       <key>Placement</key>
 315       <string>toolbar | menu</string>
 316       <key>Folder</key>
 317       <string>FolderName</string>
 318     </dict>
 319   </array>
 320 </dict>
 321 ```
 322 ### JSON
 323 ```
 324 {
 325   "policies": {
 326     "Bookmarks": [
 327       {
 328         "Title": "Example",
 329         "URL": "https://example.com",
 330         "Favicon": "https://example.com/favicon.ico",
 331         "Placement": "toolbar" | "menu",
 332         "Folder": "FolderName"
 333       }
 334     ]
 335   }
 336 }
 337 ```
 338 ### CaptivePortal
 339 Enable or disable the detection of captive portals.
 340
 341 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 342 **CCK2 Equivalent:** N/A\
 343 **Preferences Affected:** `network.captive-portal-service.enabled`
 344
 345 #### Windows
 346 ```
 347 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 348 ```
 349 #### macOS
 350 ```
 351 <dict>
 352   <key>CaptivePortal</key>
 353   <true/> | <false/>
 354 </dict>
 355 ```
 356 #### JSON
 357 ```
 358 {
 359   "policies": {
 360     "CaptivePortal": true | false
 361   }
 362 }
 363 ```
 364 ### Certificates
 365
 366 ### Certificates | ImportEnterpriseRoots
 367
 368 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 369
 370 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 371
 372 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 373 **CCK2 Equivalent:** N/A\
 374 **Preferences Affected:** `security.enterprise_roots.enabled`
 375
 376 #### Windows
 377 ```
 378 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>Certificates</key>
 384   <dict>
 385     <key>ImportEnterpriseRoots</key>
 386     <true/> | <false/>
 387   </dict>
 388 </dict>
 389 ```
 390 #### JSON
 391 ```
 392 {
 393   "policies": {
 394     "Certificates": {
 395       "ImportEnterpriseRoots": true | false
 396     }
 397   }
 398 }
 399 ```
 400 ### Certificates | Install
 401
 402 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 403
 404 - Windows
 405   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 406   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 407 - macOS
 408   - /Library/Application Support/Mozilla/Certificates
 409   - ~/Library/Application Support/Mozilla/Certificates
 410 - Linux
 411   - /usr/lib/mozilla/certificates
 412   - /usr/lib64/mozilla/certificates
 413   - ~/.mozilla/certificates
 414
 415 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 416
 417 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 418
 419 Certificates are installed using the trust string `CT,CT,`.
 420
 421 Binary (DER) and ASCII (PEM) certificates are both supported.
 422
 423 **Compatibility:** Firefox 64, Firefox ESR 64\
 424 **CCK2 Equivalent:** `certs.ca`\
 425 **Preferences Affected:** N/A
 426
 427 #### Windows
 428 ```
 429 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 430 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 431 ```
 432 #### macOS
 433 ```
 434 <dict>
 435   <key>Certificates</key>
 436   <dict>
 437     <key>Install</key>
 438     <array>
 439       <string>cert1.der</string>
 440       <string>/Users/username/cert2.pem</string>
 441     </array>
 442   </dict>
 443 </dict>
 444 ```
 445 #### JSON
 446 ```
 447 {
 448   "policies": {
 449     "Certificates": {
 450       "Install": ["cert1.der", "/home/username/cert2.pem"]
 451     }
 452   }
 453 }
 454 ```
 455 ### Cookies
 456 Configure cookie preferences.
 457
 458 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 459
 460 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 461
 462 `Default` determines whether cookies are accepted at all.
 463
 464 `AcceptThirdParty` determines how third-party cookies are handled.
 465
 466 `ExpireAtSessionEnd` determines when cookies expire.
 467
 468 `RejectTracker` only rejects cookies for trackers.
 469
 470 `Locked` prevents the user from changing cookie preferences.
 471
 472 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 473 **CCK2 Equivalent:** N/A\
 474 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 475
 476 #### Windows
 477 ```
 478 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 479 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 480 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 481 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 482 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 483 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 484 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 485 ```
 486 #### macOS
 487 ```
 488 <dict>
 489   <key>Cookies</key>
 490   <dict>
 491     <key>Allow</key>
 492     <array>
 493       <string>http://example.com</string>
 494     </array>
 495     <key>Block</key>
 496     <array>
 497       <string>http://example.org</string>
 498     </array>
 499     <key>Default</key>
 500     <true/> | <false/>
 501     <key>AcceptThirdParty</key>
 502     <string>always | never | from-visited</string>
 503     <key>ExpireAtSessionEnd</key>
 504     <true/> | <false/>
 505     <key>RejectTracker</key>
 506     <true/> | <false/>
 507     <key>Locked</key>
 508     <true/> | <false/>
 509   </dict>
 510 </dict>
 511 ```
 512 #### JSON
 513 ```
 514 {
 515   "policies": {
 516     "Cookies": {
 517       "Allow": ["http://example.org/"],
 518       "Block": ["http://example.edu/"],
 519       "Default": true | false,
 520       "AcceptThirdParty": "always" | "never" | "from-visited"],
 521       "ExpireAtSessionEnd": true | false,
 522       "RejectTracker": true | false,
 523       "Locked": true | false
 524     }
 525   }
 526 }
 527 ```
 528 ### DisableSetDesktopBackground
 529 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 530
 531 **Compatibility:** Firefox 60, Firefox ESR 60\
 532 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 533 **Preferences Affected:** N/A
 534
 535 #### Windows
 536 ```
 537 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 538 ```
 539
 540 #### macOS
 541 ```
 542 <dict>
 543   <key>DisableSetDesktopBackground</key>
 544   <true/> | <false/>
 545 </dict>
 546 ```
 547 #### JSON
 548 ```
 549 {
 550   "policies": {
 551     "DisableSetDesktopBackground": true | false
 552   }
 553 }
 554 ```
 555 ### DisableMasterPasswordCreation
 556 Remove the master password functionality.
 557
 558 **Compatibility:** Firefox 60, Firefox ESR 60\
 559 **CCK2 Equivalent:** `noMasterPassword`\
 560 **Preferences Affected:** N/A
 561
 562 #### Windows
 563 ```
 564 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 565 ```
 566
 567 #### macOS
 568 ```
 569 <dict>
 570   <key>DisableMasterPasswordCreation</key>
 571   <true/> | <false/>
 572 </dict>
 573 ```
 574 #### JSON
 575 ```
 576 {
 577   "policies": {
 578     "DisableMasterPasswordCreation": true | false
 579   }
 580 }
 581 ```
 582 ### DisableAppUpdate
 583 Turn off application updates.
 584
 585 **Compatibility:** Firefox 60, Firefox ESR 60\
 586 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 587 **Preferences Affected:** N/A
 588
 589 #### Windows
 590 ```
 591 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 592 ```
 593 #### macOS
 594 ```
 595 <dict>
 596   <key>DisableAppUpdate</key>
 597   <true/> | <false/>
 598 </dict>
 599 ```
 600 #### JSON
 601 ```
 602 {
 603   "policies": {
 604     "DisableAppUpdate": true | false
 605   }
 606 }
 607 ```
 608 ### DisableBuiltinPDFViewer
 609 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 610
 611 **Compatibility:** Firefox 60, Firefox ESR 60\
 612 **CCK2 Equivalent:** `disablePDFjs`\
 613 **Preferences Affected:** `pdfjs.disabled`
 614
 615 #### Windows
 616 ```
 617 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 618 ```
 619
 620 #### macOS
 621 ```
 622 <dict>
 623   <key>DisableBuiltinPDFViewer</key>
 624   <true/> | <false/>
 625 </dict>
 626 ```
 627 #### JSON
 628 ```
 629 {
 630   "policies": {
 631     "DisableBuiltinPDFViewer": true | false
 632   }
 633 }
 634 ```
 635 ### DisableDeveloperTools
 636 Remove access to all developer tools.
 637
 638 **Compatibility:** Firefox 60, Firefox ESR 60\
 639 **CCK2 Equivalent:** `removeDeveloperTools`\
 640 **Preferences Affected:** `devtools.policy.disabled`
 641
 642 #### Windows
 643 ```
 644 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 645 ```
 646
 647 #### macOS
 648 ```
 649 <dict>
 650   <key>DisableDeveloperTools</key>
 651   <true/> | <false/>
 652 </dict>
 653 ```
 654 #### JSON
 655 ```
 656 {
 657   "policies": {
 658     "DisableDeveloperTools": true | false
 659   }
 660 }
 661 ```
 662 ### DisableFeedbackCommands
 663 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 664
 665 **Compatibility:** Firefox 60, Firefox ESR 60\
 666 **CCK2 Equivalent:** N/A\
 667 **Preferences Affected:** N/A
 668
 669 #### Windows
 670 ```
 671 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 672 ```
 673 #### macOS
 674 ```
 675 <dict>
 676   <key>DisableFeedbackCommands</key>
 677   <true/> | <false/>
 678 </dict>
 679 ```
 680 #### JSON
 681 ```
 682 {
 683   "policies": {
 684     "DisableFeedbackCommands": true | false
 685   }
 686 }
 687 ```
 688 ### DisableFirefoxScreenshots
 689 Remove access to Firefox Screenshots.
 690
 691 **Compatibility:** Firefox 60, Firefox ESR 60\
 692 **CCK2 Equivalent:** N/A\
 693 **Preferences Affected:** `extensions.screenshots.disabled`
 694
 695 #### Windows
 696 ```
 697 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 698 ```
 699 #### macOS
 700 ```
 701 <dict>
 702   <key>DisableFirefoxScreenshots</key>
 703   <true/> | <false/>
 704 </dict>
 705 ```
 706 #### JSON
 707 ```
 708 {
 709   "policies": {
 710     "DisableFirefoxScreenshots": true | false
 711   }
 712 }
 713 ```
 714 ### DisableFirefoxAccounts
 715 Disable Firefox Accounts integration (Sync).
 716
 717 **Compatibility:** Firefox 60, Firefox ESR 60\
 718 **CCK2 Equivalent:** `disableSync`\
 719 **Preferences Affected:** `identity.fxaccounts.enabled`
 720
 721 #### Windows
 722 ```
 723 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 724 ```
 725 #### macOS
 726 ```
 727 <dict>
 728   <key>DisableFirefoxAccounts</key>
 729   <true/> | <false/>
 730 </dict>
 731 ```
 732 #### JSON
 733 ```
 734 {
 735   "policies": {
 736     "DisableFirefoxAccounts": true | false
 737   }
 738 }
 739 ```
 740 ### DisableFirefoxStudies
 741 Disable Firefox studies (Shield).
 742
 743 **Compatibility:** Firefox 60, Firefox ESR 60\
 744 **CCK2 Equivalent:** `disableForget`\
 745 **Preferences Affected:** N/A
 746
 747 #### Windows
 748 ```
 749 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 750 ```
 751 #### macOS
 752 ```
 753 <dict>
 754   <key>DisableFirefoxStudies</key>
 755   <true/> | <false/>
 756 </dict>
 757 ```
 758 #### JSON
 759 ```
 760 {
 761   "policies": {
 762     "DisableFirefoxStudies": true | false
 763   }
 764 }
 765 ```
 766 ### DisableForgetButton
 767 Disable the "Forget" button.
 768
 769 **Compatibility:** Firefox 60, Firefox ESR 60\
 770 **CCK2 Equivalent:** `disableForget`\
 771 **Preferences Affected:** N/A
 772
 773 #### Windows
 774 ```
 775 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 776 ```
 777 #### macOS
 778 ```
 779 <dict>
 780   <key>DisableForgetButton</key>
 781   <true/> | <false/>
 782 </dict>
 783 ```
 784 #### JSON
 785 ```
 786 {
 787   "policies": {
 788     "DisableForgetButton": true | false
 789   }
 790 }
 791 ```
 792 ### DisableFormHistory
 793 Turn off saving information on web forms and the search bar.
 794
 795 **Compatibility:** Firefox 60, Firefox ESR 60\
 796 **CCK2 Equivalent:** `disableFormFill`\
 797 **Preferences Affected:** ` browser.formfill.enable`
 798
 799 #### Windows
 800 ```
 801 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 802 ```
 803 #### macOS
 804 ```
 805 <dict>
 806   <key>DisableFormHistory</key>
 807   <true/> | <false/>
 808 </dict>
 809 ```
 810 #### JSON
 811 ```
 812 {
 813   "policies": {
 814     "DisableFormHistory": true | false
 815   }
 816 }
 817 ```
 818 ### DisablePocket
 819 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 820
 821 **Compatibility:** Firefox 60, Firefox ESR 60\
 822 **CCK2 Equivalent:** `disablePocket`\
 823 **Preferences Affected:** `extensions.pocket.enabled`
 824
 825 #### Windows
 826 ```
 827 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 828 ```
 829 #### macOS
 830 ```
 831 <dict>
 832   <key>DisablePocket</key>
 833   <true/> | <false/>
 834 </dict>
 835 ```
 836 #### JSON
 837 ```
 838 {
 839   "policies": {
 840     "DisablePocket": true | false
 841   }
 842 }
 843 ```
 844 ### DisablePrivateBrowsing
 845 Remove access to private browsing.
 846
 847 **Compatibility:** Firefox 60, Firefox ESR 60\
 848 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 849 **Preferences Affected:** N/A
 850
 851 #### Windows
 852 ```
 853 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 854 ```
 855 #### macOS
 856 ```
 857 <dict>
 858   <key>DisablePrivateBrowsing</key>
 859   <true/> | <false/>
 860 </dict>
 861 ```
 862 #### JSON
 863 ```
 864 {
 865   "policies": {
 866     "DisablePrivateBrowsing": true | false
 867   }
 868 }
 869 ```
 870 ### DisableProfileImport
 871 Disables the "Import data from another browser" option in the bookmarks window.
 872
 873 **Compatibility:** Firefox 60, Firefox ESR 60\
 874 **CCK2 Equivalent:** N/A\
 875 **Preferences Affected:** N/A
 876
 877 #### Windows
 878 ```
 879 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 880 ```
 881 #### macOS
 882 ```
 883 <dict>
 884   <key>DisableProfileImport</key>
 885   <true/> | <false/>
 886 </dict>
 887 ```
 888 #### JSON
 889 ```
 890 {
 891   "policies": {
 892     "DisableProfileImport": true | false
 893   }
 894 }
 895 ```
 896 ### DisableProfileRefresh
 897 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 898
 899 **Compatibility:** Firefox 60, Firefox ESR 60\
 900 **CCK2 Equivalent:** `disableResetFirefox`\
 901 **Preferences Affected:** `browser.disableResetPrompt`
 902
 903 #### Windows
 904 ```
 905 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 906 ```
 907 #### macOS
 908 ```
 909 <dict>
 910   <key>DisableProfileRefresh</key>
 911   <true/> | <false/>
 912 </dict>
 913 ```
 914 #### JSON
 915 ```
 916 {
 917   "policies": {
 918     "DisableProfileRefresh": true | false
 919   }
 920 }
 921 ```
 922 ### DisableSafeMode
 923 Disable safe mode within the browser.
 924
 925 On Windows, this disables safe mode via the command line as well.
 926
 927 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 928 **CCK2 Equivalent:** `disableSafeMode`\
 929 **Preferences Affected:** N/A
 930
 931 #### Windows
 932 ```
 933 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 934 ```
 935 #### macOS
 936 ```
 937 <dict>
 938   <key>DisableSafeMode</key>
 939   <true/> | <false/>
 940 </dict>
 941 ```
 942 #### JSON
 943 ```
 944 {
 945   "policies": {
 946     "DisableSafeMode": true | false
 947   }
 948 }
 949 ```
 950 ### DisableSecurityBypass
 951 Prevent the user from bypassing security in certain cases.
 952
 953 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 954
 955 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 956
 957 **Compatibility:** Firefox 60, Firefox ESR 60\
 958 **CCK2 Equivalent:** N/A\
 959 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 960
 961 #### Windows
 962 ```
 963 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 964 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 965 ```
 966 #### macOS
 967 ```
 968 <dict>
 969   <key>DisableSecurityBypass</key>
 970   <dict>
 971     <key>InvalidCertificate</key>
 972     <true/> | <false/>
 973     <key><SafeBrowsing/key>
 974     <true/> | <false/>
 975   </dict>
 976 </dict>
 977 ```
 978 #### JSON
 979 ```
 980 {
 981   "policies": {
 982     "DisableSecurityBypass": {
 983       "InvalidCertificate": true false,
 984       "SafeBrowsing": true false
 985     }
 986   }
 987 }
 988 ```
 989 ### DisableSystemAddonUpdate
 990 Prevent system add-ons from being installed or update.
 991
 992 **Compatibility:** Firefox 60, Firefox ESR 60\
 993 **CCK2 Equivalent:** N/A\
 994 **Preferences Affected:** N/A
 995
 996 #### Windows
 997 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 998 ```
 999 #### macOS
1000 ```
1001 <dict>
1002   <key>DisableSystemAddonUpdate</key>
1003   <true/> | <false/>
1004 </dict>
1005 ```
1006 #### JSON
1007 ```
1008 {
1009   "policies": {
1010     "DisableSystemAddonUpdate": true | false
1011   }
1012 }
1013 ```
1014 ### DisableTelemetry
1015 Prevent the upload of telemetry data.
1016
1017 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1018
1019 **Compatibility:** Firefox 60, Firefox ESR 60\
1020 **CCK2 Equivalent:** `disableTelemetry`\
1021 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1022
1023 #### Windows
1024 ```
1025 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1026 ```
1027 #### macOS
1028 ```
1029 <dict>
1030   <key>DisableTelemetry</key>
1031   <true/> | <false/>
1032 </dict>
1033 ```
1034 #### JSON
1035 ```
1036 {
1037   "policies": {
1038     "DisableTelemetry": true | false
1039   }
1040 }
1041 ```
1042 ### DisplayBookmarksToolbar
1043 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1044
1045 **Compatibility:** Firefox 60, Firefox ESR 60\
1046 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1047 **Preferences Affected:** N/A
1048
1049 #### Windows
1050 ```
1051 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1052 ```
1053 #### macOS
1054 ```
1055 <dict>
1056   <key>DisplayBookmarksToolbar</key>
1057   <true/> | <false/>
1058 </dict>
1059 ```
1060 #### JSON
1061 ```
1062 {
1063   "policies": {
1064     "DisplayBookmarksToolbar": true | false
1065   }
1066 }
1067 ```
1068 ### DisplayMenuBar
1069 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1070
1071 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1072 **CCK2 Equivalent:** `displayMenuBar`\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1078 ```
1079 #### macOS
1080 ```
1081 <dict>
1082   <key>DisplayMenuBar</key>
1083   <true/> | <false/>
1084 </dict>
1085 ```
1086 #### JSON
1087 ```
1088 {
1089   "policies": {
1090     "DisplayMenuBar": true | false
1091   }
1092 }
1093 ```
1094 ### DNSOverHTTPS
1095 Configure DNS over HTTPS.
1096
1097 `Enabled` determines whether DNS over HTTPS is enabled
1098
1099 `ProviderURL` is a URL to another provider.
1100
1101 `Locked` prevents the user from changing DNS over HTTPS preferences.
1102
1103 **Compatibility:** Firefox 63, Firefox ESR 68\
1104 **CCK2 Equivalent:** N/A\
1105 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1106
1107 #### Windows
1108 ```
1109 Software\Policies\Mozilla\Firefox\Cookies\Enabled = 0x1 | 0x0
1110 Software\Policies\Mozilla\Firefox\Cookies\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1111 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1112 ```
1113 #### macOS
1114 ```
1115 <dict>
1116   <key>Cookies</key>
1117   <dict>
1118     <key>Enabled</key>
1119     <true/> | <false/>
1120     <key>ProviderURL</key>
1121     <string>URL_TO_ALTERNATE_PROVIDER</string>
1122     <key>Locked</key>
1123     <true/> | <false/>
1124   </dict>
1125 </dict>
1126 ```
1127 #### JSON
1128 ```
1129 {
1130   "policies": {
1131     "DNSOverHTTPS": {
1132       "Enabled":  true | false,
1133       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1134       "Locked": true | false
1135     }
1136   }
1137 }
1138 ```
1139 ### DontCheckDefaultBrowser
1140 Don't check if Firefox is the default browser at startup.
1141
1142 **Compatibility:** Firefox 60, Firefox ESR 60\
1143 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1144 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1145
1146 #### Windows
1147 ```
1148 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1149 ```
1150 #### macOS
1151 ```
1152 <dict>
1153   <key>DontCheckDefaultBrowser</key>
1154   <true/> | <false/>
1155 </dict>
1156 ```
1157 #### JSON
1158 ```
1159 {
1160   "policies": {
1161     "DontCheckDefaultBrowser": true | false
1162   }
1163 }
1164 ```
1165 ### DefaultDownloadDirectory
1166 Set the default download directory.
1167
1168 You can use ${home} for the native home directory.
1169
1170 **Compatibility:** Firefox 68, Firefox ESR 68\
1171 **CCK2 Equivalent:** N/A\
1172 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1173
1174 #### Windows
1175 ```
1176 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1177 ```
1178 #### macOS
1179 ```
1180 <dict>
1181   <key>DefaultDownloadDirectory</key>
1182   <string>${home}/Downloads</string>
1183 </dict>
1184 ```
1185 #### JSON
1186 ```
1187 {
1188   "policies": {
1189     "DefaultDownloadDirectory": "${home}/Downloads"
1190 }
1191 ```
1192 ### DownloadDirectory
1193 Set and lock the download directory.
1194
1195 You can use ${home} for the native home directory.
1196
1197 **Compatibility:** Firefox 68, Firefox ESR 68\
1198 **CCK2 Equivalent:** N/A\
1199 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1200
1201 #### Windows
1202 ```
1203 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1204 ```
1205 #### macOS
1206 ```
1207 <dict>
1208   <key>DownloadDirectory</key>
1209   <string>${home}/Downloads</string>
1210 </dict>
1211 ```
1212 #### JSON
1213 ```
1214 {
1215   "policies": {
1216     "DownloadDirectory": "${home}/Downloads"
1217 }
1218 ```
1219 ### EnableTrackingProtection
1220 Configure tracking protection.
1221
1222 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1223
1224 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1225
1226 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1227
1228 **Compatibility:** Firefox 60, Firefox ESR 60\
1229 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1230 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1231
1232 #### Windows
1233 ```
1234 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1235 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1236 ```
1237 #### macOS
1238 ```
1239 <dict>
1240   <key>EnableTrackingProtection</key>
1241   <dict>
1242     <key>Value</key>
1243     <true/> | <false/>
1244
1245     <key><Locked/key>
1246     <true/> | <false/>
1247   </dict>
1248 </dict>
1249 ```
1250 #### JSON
1251 ```
1252 {
1253   "policies": {
1254     "EnableTrackingProtection": {
1255       "Value": [true, false],
1256       "Locked": [true, false]
1257     }
1258 }
1259 ```
1260 ### EnterprisePoliciesEnabled
1261 Enable policy support on macOS.
1262
1263 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1264 **CCK2 Equivalent:** N/A\
1265 **Preferences Affected:** N/A
1266
1267 #### macOS
1268 ```
1269 <dict>
1270   <key>EnterprisePoliciesEnabled</key>
1271   <true/>
1272 </dict>
1273 ```
1274 ### Extensions
1275 Control the installation, uninstallation and locking of extensions.
1276
1277 `Install` is a list of URLs or native paths for extensions to be installed.
1278
1279 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1280
1281 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1282
1283 **Compatibility:** Firefox 60, Firefox ESR 60\
1284 **CCK2 Equivalent:** `addons`\
1285 **Preferences Affected:** N/A
1286
1287 #### Windows
1288 ```
1289 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1290 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1291 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1292 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1293 ```
1294 #### macOS
1295 ```
1296 <dict>
1297   <key>Extensions</key>
1298   <dict>
1299     <key>Install</key>
1300     <array>
1301       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1302       <string>//path/to/xpi</string>
1303     </array>
1304     <key>Uninstall</key>
1305     <array>
1306       <string>bad_addon_id@mozilla.org</string>
1307     </array>
1308     <key>Locked</key>
1309     <array>
1310       <string>addon_id@mozilla.org</string>
1311     </array>
1312   </dict>
1313 </dict>
1314 ```
1315 #### JSON
1316
1317
1318 ```
1319 {
1320   "policies": {
1321     "Extensions": {
1322       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1323       "Uninstall": ["bad_addon_id@mozilla.org"],
1324       "Locked":  ["addon_id@mozilla.org"]
1325     }
1326   }
1327 }
1328 ```
1329 ### ExtensionSettings
1330 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1331
1332 This policy maps an extension ID to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1333
1334 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1335
1336 The configuration for each extension is another dictionary that can contain the fields documented below.
1337
1338 | Name | Description |
1339 | --- | --- |
1340 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1341 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1342 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1343 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1344 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1345 | `install_url`| Maps to a string indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi
1346 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1347 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1348 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1349
1350 **Compatibility:** Firefox 68, Firefox ESR 68\
1351 **CCK2 Equivalent:** N/A\
1352 **Preferences Affected:** N/A
1353
1354 #### Windows
1355 Due to a bug in Firefox 68, this policy is not working via GPO on Windows. We will have a fix soon.
1356 #### macOS
1357 ```
1358 <dict>
1359   <key>ExtensionSettings</key>
1360   <dict>
1361     <key>*</key>
1362     <dict>
1363       <key>blocked_install_message</key>
1364       <string>Custom error message.</string>
1365       <key>install_sources</key>
1366       <array>
1367         <string>https://addons.mozilla.org/</string>
1368       </array>
1369       <key>installation_mode</key>
1370       <string>blocked</string>
1371     </dict>
1372     <key>uBlock0@raymondhill.net</key>
1373     <dict>
1374       <key>installation_mode</key>
1375        <string>force_installed</string>
1376       <key>install_url</key>
1377       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1378     </dict>
1379   </dict>
1380 </dict>
1381 ```
1382 #### JSON
1383 ```
1384 {
1385   "policies": {
1386     "ExtensionSettings": {
1387       "*": {
1388         "blocked_install_message": "Custom error message.",
1389         "install_sources": ["https://addons.mozilla.org/"],
1390         "installation_mode": "blocked"
1391       },
1392       "uBlock0@raymondhill.net": {
1393         "installation_mode": "force_installed",
1394         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1395       }
1396     }
1397   }
1398 }
1399 ```
1400
1401 ### ExtensionUpdate
1402 Control extension updates.
1403
1404 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1405 **CCK2 Equivalent:** N/A\
1406 **Preferences Affected:** `extensions.update.enabled`
1407
1408 #### Windows
1409 ```
1410 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1411 ```
1412 #### macOS
1413 ```
1414 <dict>
1415   <key>ExtensionUpdate</key>
1416   <true/> | <false/>
1417 </dict>
1418 ```
1419 #### JSON
1420 ```
1421 {
1422   "policies": {
1423     "ExtensionUpdate": true | false
1424   }
1425 }
1426 ```
1427 ### FlashPlugin
1428 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1429
1430 `Allow` is a list of origins where Flash are allowed.
1431
1432 `Block` is a list of origins where Flash is not allowed.
1433
1434 `Default` determines whether or not Flash is allowed by default.
1435
1436 `Locked` prevents the user from changing Flash preferences.
1437
1438 **Compatibility:** Firefox 60, Firefox ESR 60\
1439 **CCK2 Equivalent:** `permissions.plugin`\
1440 **Preferences Affected:** `plugin.state.flash`
1441
1442 #### Windows
1443 ```
1444 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1445 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1446 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1447 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1448 ```
1449 #### macOS
1450 ```
1451 <dict>
1452   <key>FlashPlugin</key>
1453   <dict>
1454     <key>Allow</key>
1455     <array>
1456       <string>http://example.org</string>
1457     </array>
1458     <key>Block</key>
1459     <array>
1460       <string>http://example.edu</string>
1461     </array>
1462     <key>Default</key>
1463     <true/> | <false/>
1464     <key>Locked</key>
1465     <true/> | <false/>
1466   </dict>
1467 </dict>
1468 ```
1469 #### JSON
1470 ```
1471 {
1472   "policies": {
1473     "FlashPlugin": {
1474       "Allow": ["http://example.org/"],
1475       "Block": ["http://example.edu/"],
1476       "Default": true | false,
1477       "Locked": true | false
1478     }
1479   }
1480 }
1481 ```
1482 ### FirefoxHome
1483 Customize the Firefox Home page.
1484
1485 **Compatibility:** Firefox 68, Firefox ESR 68\
1486 **CCK2 Equivalent:** N/A\
1487 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1488
1489 #### Windows
1490 ```
1491 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1492 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1493 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1494 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1495 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1496 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1497 ```
1498 #### macOS
1499 ```
1500 <dict>
1501   <key>FirefoxHome</key>
1502   <dict>
1503     <key>Search</key>
1504     <true/> | <false/>
1505     <key>TopSites</key>
1506     <true/> | <false/>
1507     <key>Highlights</key>
1508     <true/> | <false/>
1509     <key>Pocket</key>
1510     <true/> | <false/>
1511     <key>Snippets</key>
1512     <true/> | <false/>
1513     <key>Locked</key>
1514     <true/> | <false/>
1515   </dict>
1516 </dict>
1517 ```
1518 #### JSON
1519 ```
1520 {
1521   "policies": {
1522     "FirefoxHome": {
1523       "Search": true | false,
1524       "TopSites": true | false,
1525       "Highlights": true | false,
1526       "Pocket": true | false,
1527       "Snippets": true | false,
1528       "Locked": true | false
1529     }
1530   }
1531 }
1532 ```
1533 ### HardwareAcceleration
1534 Control hardware acceleration.
1535
1536 **Compatibility:** Firefox 60, Firefox ESR 60\
1537 **CCK2 Equivalent:** N/A\
1538 **Preferences Affected:** `layers.acceleration.disabled`
1539
1540 #### Windows
1541 ```
1542 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1543 ```
1544 #### macOS
1545 ```
1546 <dict>
1547   <key>HardwareAcceleration</key>
1548   <true/> | <false/>
1549 </dict>
1550 ```
1551 #### JSON
1552 ```
1553 {
1554   "policies": {
1555     "HardwareAcceleration": true | false
1556   }
1557 }
1558 ```
1559 ### Homepage
1560 Configure the default homepage and how Firefox starts.
1561
1562 `URL` is the default homepage.
1563
1564 `Locked` prevents the user from changing homepage preferences.
1565
1566 `Additional` allows for more than one homepage.
1567
1568 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1569
1570 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1571 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1572 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1573
1574 #### Windows
1575 ```
1576 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1577 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1578 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1579 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1580 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1581 ```
1582 #### macOS
1583 ```
1584 <dict>
1585   <key>Homepage</key>
1586   <dict>
1587     <key>URL</key>
1588     <string>http://example.com</string>
1589     <key>Locked</key>
1590     <true/> | <false/>
1591     <key>Additional</key>
1592     <array>
1593       <string>http://example.org</string>
1594       <string>http://example.edu</string>
1595     </array>
1596     <key>StartPage</key>
1597     <string>always | never | from-visited</string>
1598   </dict>
1599 </dict>
1600 ```
1601 #### JSON
1602 ```
1603 {
1604   "policies": {
1605     "Homepage": {
1606       "URL": "http://example.com/",
1607       "Locked": true | false,
1608       "Additional": ["http://example.org/",
1609                      "http://example.edu/"],
1610       "StartPage": "none" | "homepage" |  "previous-session"
1611     }
1612   }
1613 }
1614 ```
1615 ### InstallAddonsPermission
1616 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1617
1618 `Allow` is a list of origins where extension installs are allowed.
1619
1620 `Default` determines whether or not extension installs are allowed by default.
1621
1622 **Compatibility:** Firefox 60, Firefox ESR 60\
1623 **CCK2 Equivalent:** `permissions.install`\
1624 **Preferences Affected:** `xpinstall.enabled`
1625
1626 #### Windows
1627 ```
1628 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1629 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1630 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>InstallAddonsPermission</key>
1636   <dict>
1637     <key>Allow</key>
1638     <array>
1639       <string>http://example.org</string>
1640       <string>http://example.edu</string>
1641     </array>
1642     <key>Default</key>
1643     <true/> | <false/>
1644   </dict>
1645 </dict>
1646 ```
1647 #### JSON
1648 ```
1649 {
1650   "policies": {
1651     "InstallAddonsPermission": {
1652       "Allow": ["http://example.org/",
1653                 "http://example.edu/"],
1654       "Default": true | false
1655     }
1656   }
1657 }
1658 ```
1659 ### LocalFileLinks
1660 Enable linking to local files by origin.
1661
1662 **Compatibility:** Firefox 68, Firefox ESR 68\
1663 **CCK2 Equivalent:** N/A\
1664 **Preferences Affected:** `capability.policy.localfilelinks.*`
1665
1666 #### Windows
1667 ```
1668 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1669 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>LocalFileLinks</key>
1675   <array>
1676     <string>http://example.org</string>
1677     <string>http://example.edu</string>
1678   </array>
1679 </dict>
1680 ```
1681 #### JSON
1682 ```
1683 {
1684   "policies": {
1685     "LocalFileLinks": ["http://example.org/",
1686                        "http://example.edu/"]
1687   }
1688 }
1689 ```
1690 ### NoDefaultBookmarks
1691 Disable the creation of default bookmarks.
1692
1693 This policy is only effective if the user profile has not been created yet.
1694
1695 **Compatibility:** Firefox 60, Firefox ESR 60\
1696 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1697 **Preferences Affected:** N/A
1698
1699 #### Windows
1700 ```
1701 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1702 ```
1703 #### macOS
1704 ```
1705 <dict>
1706   <key>NoDefaultBookmarks</key>
1707   <true/> | <false/>
1708 </dict>
1709 ```
1710 #### JSON
1711 ```
1712 {
1713   "policies": {
1714     "NoDefaultBookmarks": true | false
1715   }
1716 }
1717 ```
1718 ### NetworkPrediction
1719 Enable or disable network prediction (DNS prefetching).
1720
1721 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1722 **CCK2 Equivalent:** N/A\
1723 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1724
1725 #### Windows
1726 ```
1727 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1728 ```
1729 #### macOS
1730 ```
1731 <dict>
1732   <key>NetworkPrediction</key>
1733   <true/> | <false/>
1734 </dict>
1735 ```
1736 #### JSON
1737 ```
1738 {
1739   "policies": {
1740     "NetworkPrediction": true | false
1741 }
1742 ```
1743 ### NewTabPage
1744 Enable or disable the New Tab page.
1745
1746 **Compatibility:** Firefox 68, Firefox ESR 68\
1747 **CCK2 Equivalent:** N/A\
1748 **Preferences Affected:** `browser.newtabpage.enabled`
1749
1750 #### Windows
1751 ```
1752 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1753 ```
1754 #### macOS
1755 ```
1756 <dict>
1757   <key>NewTabPage</key>
1758   <true/> | <false/>
1759 </dict>
1760 ```
1761 #### JSON
1762 ```
1763 {
1764   "policies": {
1765     "NewTabPage": true | false
1766 }
1767 ```
1768 ### OfferToSaveLogins
1769 Control whether or not Firefox offers to save passwords.
1770
1771 **Compatibility:** Firefox 60, Firefox ESR 60\
1772 **CCK2 Equivalent:** `dontRememberPasswords`\
1773 **Preferences Affected:** `signon.rememberSignons`
1774
1775 #### Windows
1776 ```
1777 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1778 ```
1779 #### macOS
1780 ```
1781 <dict>
1782   <key>OfferToSaveLogins</key>
1783   <true/> | <false/>
1784 </dict>
1785 ```
1786 #### JSON
1787 ```
1788 {
1789   "policies": {
1790     "OfferToSaveLogins": true | false
1791   }
1792 }
1793 ```
1794 ### OverrideFirstRunPage
1795 Override the first run page. If the value is blank, no first run page is displayed.
1796
1797 **Compatibility:** Firefox 60, Firefox ESR 60\
1798 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1799 **Preferences Affected:** `startup.homepage_welcome_url`
1800
1801 #### Windows
1802 ```
1803 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1804 ```
1805 #### macOS
1806 ```
1807 <dict>
1808   <key>OverrideFirstRunPage</key>
1809   <string>http://example.org</string>
1810 </dict>
1811 ```
1812 #### JSON
1813 ```
1814 {
1815   "policies": {
1816     "OverrideFirstRunPage": "http://example.org"
1817 }
1818 ```
1819 ### OverridePostUpdatePage
1820 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1821
1822 **Compatibility:** Firefox 60, Firefox ESR 60\
1823 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1824 **Preferences Affected:** `startup.homepage_override_url`
1825
1826 #### Windows
1827 ```
1828 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1829 ```
1830 #### macOS
1831 ```
1832 <dict>
1833   <key>OverridePostUpdatePage</key>
1834   <string>http://example.org</string>
1835 </dict>
1836 ```
1837 #### JSON
1838 ```
1839 {
1840   "policies": {
1841     "OverridePostUpdatePage": "http://example.org"
1842 }
1843 ```
1844 ### Permissions
1845 Set permissions associated with camera, microphone, location, and notifications
1846
1847 `Allow` is a list of origins where the feature is allowed.
1848
1849 `Block` is a list of origins where the feature is not allowed.
1850
1851 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1852
1853 `Locked` prevents the user from changing preferences for the feature.
1854
1855 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1856 **CCK2 Equivalent:** N/A\
1857 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1858
1859 #### Windows
1860 ```
1861 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1862 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1863 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1864 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1865 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1866 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1867 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1868 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1869 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1870 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1871 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1872 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1873 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1874 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1875 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1876 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1877 ```
1878 #### macOS
1879 ```
1880 <dict>
1881   <key>Permissions</key>
1882   <dict>
1883     <key>Camera</key>
1884     <dict>
1885       <key>Allow</key>
1886       <array>
1887         <string>https://example.org</string>
1888       </array>
1889       <key>Block</key>
1890       <array>
1891         <string>https://example.edu</string>
1892       </array>
1893       <key>BlockNewRequests</key>
1894       <true/>
1895       <key>Locked</key>
1896       <true/>
1897     </dict>
1898     <key>Microphone</key>
1899     <dict>
1900       <key>Allow</key>
1901       <array>
1902         <string>https://example.org</string>
1903       </array>
1904       <key>Block</key>
1905       <array>
1906         <string>https://example.edu</string>
1907       </array>
1908       <key>BlockNewRequests</key>
1909       <true/>
1910       <key>Locked</key>
1911       <true/>
1912     </dict>
1913     <key>Location</key>
1914     <dict>
1915       <key>Allow</key>
1916       <array>
1917         <string>https://example.org</string>
1918       </array>
1919       <key>Block</key>
1920       <array>
1921         <string>https://example.edu</string>
1922       </array>
1923       <key>BlockNewRequests</key>
1924       <true/>
1925       <key>Locked</key>
1926       <true/>
1927     </dict>
1928     <key>Notifications</key>
1929     <dict>
1930       <key>Allow</key>
1931       <array>
1932         <string>https://example.org</string>
1933       </array>
1934       <key>Block</key>
1935       <array>
1936         <string>https://example.edu</string>
1937       </array>
1938       <key>BlockNewRequests</key>
1939       <true/>
1940       <key>Locked</key>
1941       <true/>
1942     </dict>
1943   </dict>
1944 </dict>
1945 ```
1946 #### JSON
1947 ```
1948 {
1949   "policies": {
1950     "Permissions": {
1951       "Camera": {
1952         "Allow": ["https://example.org"],
1953         "Block": ["https://example.edu"],
1954         "BlockNewRequests": true | false,
1955         "Locked": true | false
1956       },
1957       "Microphone": {
1958         "Allow": ["https://example.org"],
1959         "Block": ["https://example.edu"],
1960         "BlockNewRequests": true | false,
1961         "Locked": true | false
1962       },
1963       "Location": {
1964         "Allow": ["https://example.org"],
1965         "Block": ["https://example.edu"],
1966         "BlockNewRequests": true | false,
1967         "Locked": true | false
1968       },
1969       "Notifications": {
1970         "Allow": ["https://example.org"],
1971         "Block": ["https://example.edu"],
1972         "BlockNewRequests": true | false,
1973         "Locked": true | false
1974       }
1975     }
1976   }
1977 }
1978 ```
1979 ### PopupBlocking
1980 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1981
1982 `Allow` is a list of origins where popup-windows are allowed.
1983
1984 `Default` determines whether or not pop-up windows are allowed by default.
1985
1986 `Locked` prevents the user from changing pop-up preferences.
1987
1988 **Compatibility:** Firefox 60, Firefox ESR 60\
1989 **CCK2 Equivalent:** `permissions.popup`\
1990 **Preferences Affected:** `dom.disable_open_during_load`
1991
1992 #### Windows
1993 ```
1994 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
1995 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
1996 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
1997 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
1998 ```
1999 #### macOS
2000 ```
2001 <dict>
2002   <key>PopupBlocking</key>
2003   <dict>
2004     <key>Allow</key>
2005     <array>
2006       <string>http://example.org</string>
2007       <string>http://example.edu</string>
2008     </array>
2009     <key>Default</key>
2010     <true/> | <false/>
2011     <key>Locked</key>
2012     <true/> | <false/>
2013   </dict>
2014 </dict>
2015 ```
2016 #### JSON
2017 ```
2018 {
2019   "policies": {
2020     "PopupBlocking": {
2021       "Allow": ["http://example.org/",
2022                 "http://example.edu/"],
2023       "Default": true | false,
2024       "Locked": true | false
2025     }
2026   }
2027 }
2028 ```
2029 ### Preferences
2030 Set and lock certain preferences.
2031
2032 **Compatibility:** See below\
2033 **CCK2 Equivalent:** `preferences`\
2034 **Preferences Affected:** See below
2035
2036 | Preference | Type | Compatibility
2037 | --- | --- | ---
2038 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR
2039 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR
2040 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR
2041 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR
2042 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR
2043 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR
2044 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR
2045 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR
2046 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR
2047 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR
2048 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR
2049 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR
2050 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR
2051 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR
2052 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR
2053 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR
2054 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR
2055 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR
2056 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR
2057 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR
2058 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR
2059 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR
2060 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR
2061 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR
2062 #### Windows
2063 ```
2064 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2065 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2066 ```
2067 #### macOS
2068 ```
2069 <dict>
2070   <key>Preferences</key>
2071   <dict>
2072     <key>boolean_preference_name</key>
2073     <true/> | <false/>
2074     <key>string_preference_name</key>
2075     <string>string_value</string>
2076   </dict>
2077 </dict>
2078 ```
2079 #### JSON
2080 ```
2081 {
2082   "policies": {
2083     "Preferences": {
2084       "boolean_preference_name": true | false,
2085       "string_preference_name": "string_value"
2086     }
2087   }
2088 }
2089 ```
2090 ### PromptForDownloadLocation
2091 Ask where to save each file before downloading.
2092
2093 **Compatibility:** Firefox 68, Firefox ESR 68\
2094 **CCK2 Equivalent:** N/A
2095 **Preferences Affected:** `browser.download.useDownloadDir`
2096
2097 #### Windows
2098 ```
2099 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2100 ```
2101 #### macOS
2102 ```
2103 <dict>
2104   <key>PromptForDownloadLocation</key>
2105   <true/> | <false/>
2106 </dict>
2107 ```
2108 #### JSON
2109 ```
2110 {
2111   "policies": {
2112     "PromptForDownloadLocation": true | false
2113   }
2114 }
2115 ```
2116 ### Proxy
2117 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2118 To specify ports, append them to the hostnames with a colon (:).
2119
2120 `Mode` is the proxy method being used.
2121
2122 `Locked` is whether or not proxy settings can be changed.
2123
2124 `HTTPProxy` is the HTTP proxy server.
2125
2126 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2127
2128 `SSLProxy` is the SSL proxy server.
2129
2130 `FTPProxy` is the FTP proxy server.
2131
2132 `SOCKSProxy` is the SOCKS proxy server
2133
2134 `SOCKSVersion` is the SOCKS version (4 or 5)
2135
2136 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2137
2138 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2139
2140 `AutoLogin` means do not prompt for authentication if password is saved.
2141
2142 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2143
2144 **Compatibility:** Firefoox 60, Firefox ESR 60\
2145 **CCK2 Equivalent:** `networkProxy*`\
2146 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2147
2148 #### Windows
2149 ```
2150 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2151 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2152 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2153 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2154 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2155 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2156 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2157 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2158 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2159 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2160 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2161 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2162 ```
2163 #### macOS
2164 ```
2165 <dict>
2166   <key>Proxy</key>
2167   <dict>
2168     <key>Mode</key>
2169     <string>none | system | manual | autoDetect| autoConfig</string>
2170     <key>Locked</key>
2171     <true> | </false>
2172     <key>HTTPProxy</key>
2173     <string>https://httpproxy.example.com</string>
2174     <key>UseHTTPProxyForAllProtocols</key>
2175     <true> | </false>
2176     <key>SSLProxy</key>
2177     <string>https://sslproxy.example.com</string>
2178     <key>FTPProxy</key>
2179     <string>https://ftpproxy.example.com</string>
2180     <key>SOCKSProxy</key>
2181     <string>https://socksproxy.example.com</string>
2182     <key>SOCKSVersion</key>
2183     <string>4 | 5</string>
2184     <key>Passthrough</key>
2185     <string>&lt;local>&gt;</string>
2186     <key>AutoConfigURL</key>
2187     <string>URL_TO_AUTOCONFIG</string>
2188     <key>AutoLogin</key>
2189     <true> | </false>
2190     <key>UseProxyForDNS</key>
2191     <true> | </false>
2192   </dict>
2193 </dict>
2194 ```
2195 ### JSON
2196 ```
2197 {
2198   "policies": {
2199     "Proxy": {
2200       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2201       "Locked": [true, false],
2202       "HTTPProxy": "hostname",
2203       "UseHTTPProxyForAllProtocols": [true, false],
2204       "SSLProxy": "hostname",
2205       "FTPProxy": "hostname",
2206       "SOCKSProxy": "hostname",
2207       "SOCKSVersion": 4 | 5
2208       "Passthrough": "<local>",
2209       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2210       "AutoLogin":  [true, false],
2211       "UseProxyForDNS": [true, false]
2212     }
2213   }
2214 }
2215 ```
2216 ### RequestedLocales
2217 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2218
2219 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2220
2221 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2222 **CCK2 Equivalent:** N/A\
2223 **Preferences Affected:** N/A
2224 #### Windows
2225 ```
2226 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2227 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2228
2229 or
2230
2231 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2232 ```
2233 #### macOS
2234 ```
2235 <dict>
2236   <key>RequestedLocales</key>
2237   <array>
2238     <string>de</string>
2239     <string>en-US</string>
2240   </array>
2241 </dict>
2242
2243 or
2244
2245 <dict>
2246   <key>RequestedLocales</key>
2247   <string>de,en-US</string>
2248 </dict>
2249
2250 ```
2251 #### JSON
2252 ```
2253 {
2254   "policies": {
2255     "RequestedLocales": ["de", "en-US"]
2256   }
2257 }
2258
2259 or
2260
2261 {
2262   "policies": {
2263     "RequestedLocales": "de,en-US"
2264   }
2265 }
2266 ```
2267 ### SanitizeOnShutdown (Selective)
2268 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2269
2270 **Compatibility:** Firefox 68, Firefox ESR 68\
2271 **CCK2 Equivalent:** N/A\
2272 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2273 #### Windows
2274 ```
2275 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2276 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2277 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2278 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2279 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2280 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2281 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2282 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2283 ```
2284 #### macOS
2285 ```
2286 <dict>
2287   <key>SanitizeOnShutdown</key>
2288   <dict>
2289     <key>Cache</key>
2290     <true/> | <false/>
2291     <key>Cookies</key>
2292     <true/> | <false/>
2293     <key>Downloads</key>
2294     <true/> | <false/>
2295     <key>FormData</key>
2296     <true/> | <false/>
2297     <key>History</key>
2298     <true/> | <false/>
2299     <key>Sessions</key>
2300     <true/> | <false/>
2301     <key>SiteSettings</key>
2302     <true/> | <false/>
2303     <key>OfflineApps</key>
2304     <true/> | <false/>
2305   </dict>
2306 </dict>
2307 ```
2308 #### JSON
2309 ```
2310 {
2311   "policies": {
2312     "SanitizeOnShutdown": {
2313       "Cache": true | false,
2314       "Cookies": true | false,
2315       "Downloads": true | false,
2316       "FormData": true | false,
2317       "History": true | false,
2318       "Sessions": true | false,
2319       "SiteSettings": true | false,
2320       "OfflineApps": true | false
2321     }
2322   }
2323 }
2324 ```
2325 ### SanitizeOnShutdown (All)
2326 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2327
2328 **Compatibility:** Firefox 60, Firefox ESR 60\
2329 **CCK2 Equivalent:** N/A\
2330 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2331 #### Windows
2332 ```
2333 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2334 ```
2335 #### macOS
2336 ```
2337 <dict>
2338   <key>SanitizeOnShutdown</key>
2339   <true/> | <false/>
2340 </dict>
2341 ```
2342 #### JSON
2343 ```
2344 {
2345   "policies": {
2346     "SanitizeOnShutdown": true | false
2347   }
2348 }
2349 ```
2350 ### SearchBar
2351 Set whether or not search bar is displayed.
2352
2353 **Compatibility:** Firefox 60, Firefox ESR 60\
2354 **CCK2 Equivalent:** `showSearchBar`\
2355 **Preferences Affected:** N/A
2356
2357 #### Windows
2358 ```
2359 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2360 ```
2361 #### macOS
2362 ```
2363 <dict>
2364   <key>SearchBar</key>
2365   <string>unified | separate</string>
2366 </dict>
2367 ```
2368
2369 #### JSON
2370 ```
2371 {
2372   "policies": {
2373     "SearchBar": "unified" | "separate"
2374   }
2375 }
2376 ```
2377
2378
2379
2380
2381
2382 ### SearchEngines (This policy is only available on the ESR.)
2383
2384 ### SearchEngines | Default
2385
2386 Set the default search engine. This policy is only available on the ESR.
2387
2388 **Compatibility:** Firefox ESR 60\
2389 **CCK2 Equivalent:** `defaultSearchEngine`\
2390 **Preferences Affected:** N/A
2391
2392 ### Windows
2393 ```
2394 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2395 ```
2396 #### macOS
2397 ```
2398 <dict>
2399   <key>SearchEngines</key>
2400   <dict>
2401     <key>Default</key>
2402     <string>NAME_OF_SEARCH_ENGINE</string>
2403   </dict>
2404 </dict>
2405 ```
2406 ### JSON
2407 ```
2408 {
2409   "policies": {
2410     "SearchEngines": {
2411       "Default": "NAME_OF_SEARCH_ENGINE"
2412     }
2413   }
2414 }
2415 ```
2416 ### SearchEngines | PreventInstalls
2417
2418 Prevent installing search engines from webpages.
2419
2420 **Compatibility:** Firefox ESR 60\
2421 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2422 **Preferences Affected:** N/A
2423
2424 ### Windows
2425 ```
2426 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2427 ```
2428 #### macOS
2429 ```
2430 <dict>
2431   <key>SearchEngines</key>
2432   <dict>
2433     <key>PreventInstalls</key>
2434     <true/> | <false/>
2435   </dict>
2436 </dict>
2437 ```
2438 ### JSON
2439 ```
2440 {
2441   "policies": {
2442     "SearchEngines": {
2443       "PreventInstalls": true | false
2444     }
2445   }
2446 }
2447 ```
2448 ### SearchEngines | Remove
2449
2450 Hide built-in search engines. This policy is only available on the ESR.
2451
2452 **Compatibility:** Firefox ESR 60.2\
2453 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2454 **Preferences Affected:** N/A
2455
2456 ### Windows
2457 ```
2458 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2459 ```
2460 #### macOS
2461 ```
2462 <dict>
2463   <key>SearchEngines</key>
2464   <dict>
2465     <key>Remove</key>
2466     <array>
2467       <string>NAME_OF_SEARCH_ENGINE</string>
2468     </array>
2469   </dict>
2470 </dict>
2471 ```
2472 ### JSON
2473 ```
2474 {
2475   "policies": {
2476     "SearchEngines": {
2477       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2478     }
2479   }
2480 }
2481 ```
2482 ### SearchEngines | Add
2483
2484 Adddd new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2485
2486 `Name` is the name of the search engine.
2487
2488 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2489
2490 `Method` is either GET or POST
2491
2492 `IconURL` is a URL for the icon to use.
2493
2494 `Alias` is a keyword to use for the engine.
2495
2496 `Description` is a description of the search engine.
2497
2498 `PostData` is the POST data as name value pairs separated by &.
2499
2500 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2501
2502 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2503 **CCK2 Equivalent:** `searchplugins`\
2504 **Preferences Affected:** N/A
2505
2506 #### Windows
2507 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2508 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2509 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2510 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2511 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2512 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2513 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2514 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2515
2516 #### macOS
2517 ```
2518 <dict>
2519   <key>SearchEngines</key>
2520   <dict>
2521     <key>Add</key>
2522     <array>
2523       <dict>
2524         <key>Name</key>
2525         <string>Example1</string>
2526         <key>URLTemplate</key>
2527         <string>https://www.example.org/q={searchTerms}</string>
2528         <key>Method</key>
2529         <string>GET | POST </string>
2530         <key>IconURL</key>
2531         <string>https://www.example.org/favicon.ico</string>
2532         <key>Alias</key>
2533         <string>example</string>
2534         <key>Description</key>
2535         <string>Example Description</string>
2536         <key>SuggestURLTemplate</key>
2537         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2538         <key>PostData</key>
2539         <string>name=value&q={searchTerms}</string>
2540       </dict>
2541     <array>
2542   </dict>
2543 </dict>
2544 ```
2545 ### JSON
2546 ```
2547 {
2548   "policies": {
2549     "SearchEngines": {
2550       "Add": [
2551         {
2552           "Name": "Example1",
2553           "URLTemplate": "https://www.example.org/q={searchTerms}",
2554           "Method": "GET" | "POST",
2555           "IconURL": "https://www.example.org/favicon.ico",
2556           "Alias": "example",
2557           "Description": "Description",
2558           "PostData": "name=value&q={searchTerms}",
2559           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2560         }
2561       ]
2562     }
2563   }
2564 }
2565 ```
2566 ### SearchSuggestEnabled
2567
2568 Enable search suggestions.
2569
2570 **Compatibility:** Firefox 68, Firefox ESR 68\
2571 **CCK2 Equivalent:** N/A\
2572 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2573
2574 ### Windows
2575 ```
2576 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2577 ```
2578 #### macOS
2579 ```
2580 <dict>
2581   <key>SearchSuggestEnabled</key>
2582   <true/> | <false/>
2583 </dict>
2584 ```
2585 ### JSON
2586 ```
2587 {
2588   "policies": {
2589     "SearchSuggestEnabled": true | false
2590   }
2591 }
2592 ```
2593 ### SecurityDevices
2594
2595 Install PKCS #11 modules.
2596
2597 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2598 **CCK2 Equivalent:** `certs.devices`\
2599 **Preferences Affected:** N/A
2600
2601 #### Windows
2602 ```
2603 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2604 ```
2605 #### macOS
2606 ```
2607 <dict>
2608   <key>SecurityDevices</key>
2609   <dict>
2610     <key>NAME_OF_DEVICE</key>
2611     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2612   </dict>
2613 </dict>
2614 ```
2615
2616 #### JSON
2617 ```
2618 {
2619   "policies": {
2620     "SecurityDevices": {
2621       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2622     }
2623   }
2624 }
2625 ```
2626 ### SSLVersionMax
2627
2628 Set and lock the maximum version of TLS.
2629
2630 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** `security.tls.version.max`
2633
2634 #### Windows
2635 ```
2636 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2637 ```
2638 #### macOS
2639 ```
2640 <dict>
2641   <key>SSLVersionMax</key>
2642   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2643 </dict>
2644 ```
2645
2646 #### JSON
2647 ```
2648 {
2649   "policies": {
2650     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2651   }
2652 }
2653 ```
2654 ### SSLVersionMin
2655
2656 Set and lock the minimum version of TLS.
2657
2658 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2659 **CCK2 Equivalent:** N/A\
2660 **Preferences Affected:** `security.tls.version.min`
2661
2662 #### Windows
2663 ```
2664 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2665 ```
2666 #### macOS
2667 ```
2668 <dict>
2669   <key>SSLVersionMin</key>
2670   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2671 </dict>
2672 ```
2673
2674 #### JSON
2675 ```
2676 {
2677   "policies": {
2678     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2679   }
2680 }
2681 ```
2682 ### WebsiteFilter
2683 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2684
2685 **Compatibility:** Firefox 60, Firefox ESR 60\
2686 **CCK2 Equivalent:** N/A\
2687 **Preferences Affected:** N/A
2688
2689 #### Windows
2690 ```
2691 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2692 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2693 ```
2694 #### macOS
2695 ```
2696 <dict>
2697   <key>WebsiteFilter</key>
2698   <dict>
2699     <key>Block</key>
2700     <array>
2701       <string><all_urls></string>
2702     </array>
2703     <key>Exceptions</key>
2704     <array>
2705       <string>http://example.org/*</string>
2706     </array>
2707   </dict>
2708
2709 </dict>
2710 ```
2711 ### JSON
2712 ```
2713 {
2714   "policies": {
2715     "WebsiteFilter": {
2716       "Block": ["<all_urls>"],
2717       "Exceptions": ["http://example.org/*"]
2718     }
2719   }
2720 }
2721 ```