README.md

   1 # Policy documentation for Firefox 69 and Firefox ESR 68.1
   2
   3 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   4
   5 | Policy Name | Description
   6 | --- | --- |
   7 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
   8 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
   9 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  10 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  11 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  12 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  13 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  14 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  15 | **[`Certificates`](#certificates)** |
  16 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  17 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  18 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  19 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  20 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  21 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  22 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  23 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  24 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  25 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  26 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  27 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  28 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  29 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  30 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  31 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  32 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  33 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  34 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  35 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  36 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  37 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  38 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  39 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  40 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  41 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  42 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  43 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  44 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  45 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  46 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  47 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  48 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  49 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  50 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  51 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  52 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  53 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  54 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  55 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  56 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  57 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  58 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  59 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  60 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  61 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  62 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  63 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  64 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  65 | **[`Proxy`](#proxy)** | Configure proxy settings.
  66 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  67 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  68 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  69 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  70 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  71 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  72 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  73 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  74 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  75 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  76 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  77 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  78 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  79 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  80 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  81
  82 ### AppUpdateURL
  83
  84 Change the URL for application update.
  85
  86 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  87 **CCK2 Equivalent:** N/A\
  88 **Preferences Affected:** `app.update.url`
  89
  90 #### Windows
  91 ```
  92 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  93 ```
  94 #### macOS
  95 ```
  96 <dict>
  97   <key>AppUpdateURL</key>
  98   <string>https://yoursite.com</string>
  99 </dict>
 100 ```
 101 #### JSON
 102 ```
 103 {
 104   "policies": {
 105     "AppUpdateURL": "https://yoursite.com"
 106   }
 107 }
 108 ```
 109 ### Authentication
 110
 111 Configure sites that support integrated authentication.
 112
 113 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 114
 115 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 116 **CCK2 Equivalent:** N/A\
 117 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 118
 119 #### Windows
 120 ```
 121 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 122 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 123 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 124 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 125 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 126 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 127 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 128 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 129 ```
 130 #### macOS
 131 ```
 132 <dict>
 133   <key>Authentication</key>
 134   <dict>
 135     <key>SPNEGO</key>
 136     <array>
 137       <string>mydomain.com</string>
 138       <string>https://myotherdomain.com</string>
 139     </array>
 140     <key>Delegated</key>
 141     <array>
 142       <string>mydomain.com</string>
 143       <string>https://myotherdomain.com</string>
 144     </array>
 145     <key>NTLM</key>
 146     <array>
 147       <string>mydomain.com</string>
 148       <string>https://myotherdomain.com</string>
 149     </array>
 150     <key>AllowNonFQDN</key>
 151       <dict>
 152       <key>SPNEGO</key>
 153       <true/> | <false/>
 154       <key>NTLM</key>
 155       <true/> | <false/>
 156     </dict>
 157   </dict>
 158 </dict>
 159 ```
 160 #### JSON
 161 ```
 162 {
 163   "policies": {
 164     "Authentication": {
 165       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 166       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 167       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 168       "AllowNonFQDN": {
 169         "SPNEGO": true | false,
 170         "NTLM": true | false
 171       }
 172     }
 173   }
 174 }
 175 ```
 176 ### BlockAboutAddons
 177
 178 Block access to the Add-ons Manager (about:addons).
 179
 180 **Compatibility:** Firefox 60, Firefox ESR 60\
 181 **CCK2 Equivalent:** `disableAddonsManager`\
 182 **Preferences Affected:** N/A
 183
 184 #### Windows
 185 ```
 186 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 187 ```
 188 #### macOS
 189 ```
 190 <dict>
 191   <key>BlockAboutAddons</key>
 192   <true/> | <false/>
 193 </dict>
 194 ```
 195 #### JSON
 196 ```
 197 {
 198   "policies": {
 199     "BlockAboutAddons": true | false
 200   }
 201 }
 202 ```
 203 ### BlockAboutConfig
 204
 205 Block access to about:config.
 206
 207 **Compatibility:** Firefox 60, Firefox ESR 60\
 208 **CCK2 Equivalent:** `disableAboutConfig`\
 209 **Preferences Affected:** N/A
 210
 211 #### Windows
 212 ```
 213 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 214 ```
 215 #### macOS
 216 ```
 217 <dict>
 218   <key>BlockAboutConfig</key>
 219   <true/> | <false/>
 220 </dict>
 221 ```
 222 #### JSON
 223 ```
 224 {
 225   "policies": {
 226     "BlockAboutConfig": true | false
 227   }
 228 }
 229 ```
 230 ### BlockAboutProfiles
 231
 232 Block access to About Profiles (about:profiles).
 233
 234 **Compatibility:** Firefox 60, Firefox ESR 60\
 235 **CCK2 Equivalent:** `disableAboutProfiles`\
 236 **Preferences Affected:** N/A
 237
 238 #### Windows
 239 ```
 240 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 241 ```
 242 #### macOS
 243 ```
 244 <dict>
 245   <key>BlockAboutProfiles</key>
 246   <true/> | <false/>
 247 </dict>
 248 ```
 249 #### JSON
 250 ```
 251 {
 252   "policies": {
 253     "BlockAboutProfiles": true | false
 254   }
 255 }
 256 ```
 257 ### BlockAboutSupport
 258
 259 Block access to Troubleshooting Information (about:support).
 260
 261 **Compatibility:** Firefox 60, Firefox ESR 60\
 262 **CCK2 Equivalent:** `disableAboutSupport`\
 263 **Preferences Affected:** N/A
 264
 265 #### Windows
 266 ```
 267 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 268 ```
 269 #### macOS
 270 ```
 271 <dict>
 272   <key>BlockAboutSupport</key>
 273   <true/> | <false/>
 274 </dict>
 275 ```
 276 #### JSON
 277 ```
 278 {
 279   "policies": {
 280     "BlockAboutSupport": true | false
 281   }
 282 }
 283 ```
 284 ### Bookmarks
 285
 286 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 287
 288 **Compatibility:** Firefox 60, Firefox ESR 60\
 289 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 290 **Preferences Affected:** N/A
 291
 292 #### Windows
 293 ```
 294 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 295 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 296 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 297 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 298 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 299 ```
 300 #### macOS
 301 ```
 302 <dict>
 303   <key>Bookmarks</key>
 304   <array>
 305     <dict>
 306       <key>Title</key>
 307       <string>Example</string>
 308       <key>URL</key>
 309       <string>https://example.com</string>
 310       <key>Favicon</key>
 311       <string>https://example.com/favicon.ico</string>
 312       <key>Placement</key>
 313       <string>toolbar | menu</string>
 314       <key>Folder</key>
 315       <string>FolderName</string>
 316     </dict>
 317   </array>
 318 </dict>
 319 ```
 320 #### JSON
 321 ```
 322 {
 323   "policies": {
 324     "Bookmarks": [
 325       {
 326         "Title": "Example",
 327         "URL": "https://example.com",
 328         "Favicon": "https://example.com/favicon.ico",
 329         "Placement": "toolbar" | "menu",
 330         "Folder": "FolderName"
 331       }
 332     ]
 333   }
 334 }
 335 ```
 336 ### CaptivePortal
 337 Enable or disable the detection of captive portals.
 338
 339 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 340 **CCK2 Equivalent:** N/A\
 341 **Preferences Affected:** `network.captive-portal-service.enabled`
 342
 343 #### Windows
 344 ```
 345 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 346 ```
 347 #### macOS
 348 ```
 349 <dict>
 350   <key>CaptivePortal</key>
 351   <true/> | <false/>
 352 </dict>
 353 ```
 354 #### JSON
 355 ```
 356 {
 357   "policies": {
 358     "CaptivePortal": true | false
 359   }
 360 }
 361 ```
 362 ### Certificates
 363
 364 ### Certificates | ImportEnterpriseRoots
 365
 366 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 367
 368 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 369
 370 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 371 **CCK2 Equivalent:** N/A\
 372 **Preferences Affected:** `security.enterprise_roots.enabled`
 373
 374 #### Windows
 375 ```
 376 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>Certificates</key>
 382   <dict>
 383     <key>ImportEnterpriseRoots</key>
 384     <true/> | <false/>
 385   </dict>
 386 </dict>
 387 ```
 388 #### JSON
 389 ```
 390 {
 391   "policies": {
 392     "Certificates": {
 393       "ImportEnterpriseRoots": true | false
 394     }
 395   }
 396 }
 397 ```
 398 ### Certificates | Install
 399
 400 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 401
 402 - Windows
 403   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 404   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 405 - macOS
 406   - /Library/Application Support/Mozilla/Certificates
 407   - ~/Library/Application Support/Mozilla/Certificates
 408 - Linux
 409   - /usr/lib/mozilla/certificates
 410   - /usr/lib64/mozilla/certificates
 411   - ~/.mozilla/certificates
 412
 413 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 414
 415 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 416
 417 Certificates are installed using the trust string `CT,CT,`.
 418
 419 Binary (DER) and ASCII (PEM) certificates are both supported.
 420
 421 **Compatibility:** Firefox 64, Firefox ESR 64\
 422 **CCK2 Equivalent:** `certs.ca`\
 423 **Preferences Affected:** N/A
 424
 425 #### Windows
 426 ```
 427 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 428 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 429 ```
 430 #### macOS
 431 ```
 432 <dict>
 433   <key>Certificates</key>
 434   <dict>
 435     <key>Install</key>
 436     <array>
 437       <string>cert1.der</string>
 438       <string>/Users/username/cert2.pem</string>
 439     </array>
 440   </dict>
 441 </dict>
 442 ```
 443 #### JSON
 444 ```
 445 {
 446   "policies": {
 447     "Certificates": {
 448       "Install": ["cert1.der", "/home/username/cert2.pem"]
 449     }
 450   }
 451 }
 452 ```
 453 ### Cookies
 454 Configure cookie preferences.
 455
 456 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 457
 458 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 459
 460 `Default` determines whether cookies are accepted at all.
 461
 462 `AcceptThirdParty` determines how third-party cookies are handled.
 463
 464 `ExpireAtSessionEnd` determines when cookies expire.
 465
 466 `RejectTracker` only rejects cookies for trackers.
 467
 468 `Locked` prevents the user from changing cookie preferences.
 469
 470 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 471 **CCK2 Equivalent:** N/A\
 472 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 473
 474 #### Windows
 475 ```
 476 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 478 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 479 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 480 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 481 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 482 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 483 ```
 484 #### macOS
 485 ```
 486 <dict>
 487   <key>Cookies</key>
 488   <dict>
 489     <key>Allow</key>
 490     <array>
 491       <string>http://example.com</string>
 492     </array>
 493     <key>Block</key>
 494     <array>
 495       <string>http://example.org</string>
 496     </array>
 497     <key>Default</key>
 498     <true/> | <false/>
 499     <key>AcceptThirdParty</key>
 500     <string>always | never | from-visited</string>
 501     <key>ExpireAtSessionEnd</key>
 502     <true/> | <false/>
 503     <key>RejectTracker</key>
 504     <true/> | <false/>
 505     <key>Locked</key>
 506     <true/> | <false/>
 507   </dict>
 508 </dict>
 509 ```
 510 #### JSON
 511 ```
 512 {
 513   "policies": {
 514     "Cookies": {
 515       "Allow": ["http://example.org/"],
 516       "Block": ["http://example.edu/"],
 517       "Default": true | false,
 518       "AcceptThirdParty": "always" | "never" | "from-visited"],
 519       "ExpireAtSessionEnd": true | false,
 520       "RejectTracker": true | false,
 521       "Locked": true | false
 522     }
 523   }
 524 }
 525 ```
 526 ### DisableSetDesktopBackground
 527 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 528
 529 **Compatibility:** Firefox 60, Firefox ESR 60\
 530 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 531 **Preferences Affected:** N/A
 532
 533 #### Windows
 534 ```
 535 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 536 ```
 537
 538 #### macOS
 539 ```
 540 <dict>
 541   <key>DisableSetDesktopBackground</key>
 542   <true/> | <false/>
 543 </dict>
 544 ```
 545 #### JSON
 546 ```
 547 {
 548   "policies": {
 549     "DisableSetDesktopBackground": true | false
 550   }
 551 }
 552 ```
 553 ### DisableMasterPasswordCreation
 554 Remove the master password functionality.
 555
 556 **Compatibility:** Firefox 60, Firefox ESR 60\
 557 **CCK2 Equivalent:** `noMasterPassword`\
 558 **Preferences Affected:** N/A
 559
 560 #### Windows
 561 ```
 562 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 563 ```
 564
 565 #### macOS
 566 ```
 567 <dict>
 568   <key>DisableMasterPasswordCreation</key>
 569   <true/> | <false/>
 570 </dict>
 571 ```
 572 #### JSON
 573 ```
 574 {
 575   "policies": {
 576     "DisableMasterPasswordCreation": true | false
 577   }
 578 }
 579 ```
 580 ### DisableAppUpdate
 581 Turn off application updates.
 582
 583 **Compatibility:** Firefox 60, Firefox ESR 60\
 584 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 585 **Preferences Affected:** N/A
 586
 587 #### Windows
 588 ```
 589 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 590 ```
 591 #### macOS
 592 ```
 593 <dict>
 594   <key>DisableAppUpdate</key>
 595   <true/> | <false/>
 596 </dict>
 597 ```
 598 #### JSON
 599 ```
 600 {
 601   "policies": {
 602     "DisableAppUpdate": true | false
 603   }
 604 }
 605 ```
 606 ### DisableBuiltinPDFViewer
 607 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 608
 609 **Compatibility:** Firefox 60, Firefox ESR 60\
 610 **CCK2 Equivalent:** `disablePDFjs`\
 611 **Preferences Affected:** `pdfjs.disabled`
 612
 613 #### Windows
 614 ```
 615 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 616 ```
 617
 618 #### macOS
 619 ```
 620 <dict>
 621   <key>DisableBuiltinPDFViewer</key>
 622   <true/> | <false/>
 623 </dict>
 624 ```
 625 #### JSON
 626 ```
 627 {
 628   "policies": {
 629     "DisableBuiltinPDFViewer": true | false
 630   }
 631 }
 632 ```
 633 ### DisableDeveloperTools
 634 Remove access to all developer tools.
 635
 636 **Compatibility:** Firefox 60, Firefox ESR 60\
 637 **CCK2 Equivalent:** `removeDeveloperTools`\
 638 **Preferences Affected:** `devtools.policy.disabled`
 639
 640 #### Windows
 641 ```
 642 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 643 ```
 644
 645 #### macOS
 646 ```
 647 <dict>
 648   <key>DisableDeveloperTools</key>
 649   <true/> | <false/>
 650 </dict>
 651 ```
 652 #### JSON
 653 ```
 654 {
 655   "policies": {
 656     "DisableDeveloperTools": true | false
 657   }
 658 }
 659 ```
 660 ### DisableFeedbackCommands
 661 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 662
 663 **Compatibility:** Firefox 60, Firefox ESR 60\
 664 **CCK2 Equivalent:** N/A\
 665 **Preferences Affected:** N/A
 666
 667 #### Windows
 668 ```
 669 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 670 ```
 671 #### macOS
 672 ```
 673 <dict>
 674   <key>DisableFeedbackCommands</key>
 675   <true/> | <false/>
 676 </dict>
 677 ```
 678 #### JSON
 679 ```
 680 {
 681   "policies": {
 682     "DisableFeedbackCommands": true | false
 683   }
 684 }
 685 ```
 686 ### DisableFirefoxScreenshots
 687 Remove access to Firefox Screenshots.
 688
 689 **Compatibility:** Firefox 60, Firefox ESR 60\
 690 **CCK2 Equivalent:** N/A\
 691 **Preferences Affected:** `extensions.screenshots.disabled`
 692
 693 #### Windows
 694 ```
 695 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 696 ```
 697 #### macOS
 698 ```
 699 <dict>
 700   <key>DisableFirefoxScreenshots</key>
 701   <true/> | <false/>
 702 </dict>
 703 ```
 704 #### JSON
 705 ```
 706 {
 707   "policies": {
 708     "DisableFirefoxScreenshots": true | false
 709   }
 710 }
 711 ```
 712 ### DisableFirefoxAccounts
 713 Disable Firefox Accounts integration (Sync).
 714
 715 **Compatibility:** Firefox 60, Firefox ESR 60\
 716 **CCK2 Equivalent:** `disableSync`\
 717 **Preferences Affected:** `identity.fxaccounts.enabled`
 718
 719 #### Windows
 720 ```
 721 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 722 ```
 723 #### macOS
 724 ```
 725 <dict>
 726   <key>DisableFirefoxAccounts</key>
 727   <true/> | <false/>
 728 </dict>
 729 ```
 730 #### JSON
 731 ```
 732 {
 733   "policies": {
 734     "DisableFirefoxAccounts": true | false
 735   }
 736 }
 737 ```
 738 ### DisableFirefoxStudies
 739 Disable Firefox studies (Shield).
 740
 741 **Compatibility:** Firefox 60, Firefox ESR 60\
 742 **CCK2 Equivalent:** `disableForget`\
 743 **Preferences Affected:** N/A
 744
 745 #### Windows
 746 ```
 747 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 748 ```
 749 #### macOS
 750 ```
 751 <dict>
 752   <key>DisableFirefoxStudies</key>
 753   <true/> | <false/>
 754 </dict>
 755 ```
 756 #### JSON
 757 ```
 758 {
 759   "policies": {
 760     "DisableFirefoxStudies": true | false
 761   }
 762 }
 763 ```
 764 ### DisableForgetButton
 765 Disable the "Forget" button.
 766
 767 **Compatibility:** Firefox 60, Firefox ESR 60\
 768 **CCK2 Equivalent:** `disableForget`\
 769 **Preferences Affected:** N/A
 770
 771 #### Windows
 772 ```
 773 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 774 ```
 775 #### macOS
 776 ```
 777 <dict>
 778   <key>DisableForgetButton</key>
 779   <true/> | <false/>
 780 </dict>
 781 ```
 782 #### JSON
 783 ```
 784 {
 785   "policies": {
 786     "DisableForgetButton": true | false
 787   }
 788 }
 789 ```
 790 ### DisableFormHistory
 791 Turn off saving information on web forms and the search bar.
 792
 793 **Compatibility:** Firefox 60, Firefox ESR 60\
 794 **CCK2 Equivalent:** `disableFormFill`\
 795 **Preferences Affected:** ` browser.formfill.enable`
 796
 797 #### Windows
 798 ```
 799 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 800 ```
 801 #### macOS
 802 ```
 803 <dict>
 804   <key>DisableFormHistory</key>
 805   <true/> | <false/>
 806 </dict>
 807 ```
 808 #### JSON
 809 ```
 810 {
 811   "policies": {
 812     "DisableFormHistory": true | false
 813   }
 814 }
 815 ```
 816 ### DisablePocket
 817 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 818
 819 **Compatibility:** Firefox 60, Firefox ESR 60\
 820 **CCK2 Equivalent:** `disablePocket`\
 821 **Preferences Affected:** `extensions.pocket.enabled`
 822
 823 #### Windows
 824 ```
 825 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 826 ```
 827 #### macOS
 828 ```
 829 <dict>
 830   <key>DisablePocket</key>
 831   <true/> | <false/>
 832 </dict>
 833 ```
 834 #### JSON
 835 ```
 836 {
 837   "policies": {
 838     "DisablePocket": true | false
 839   }
 840 }
 841 ```
 842 ### DisablePrivateBrowsing
 843 Remove access to private browsing.
 844
 845 **Compatibility:** Firefox 60, Firefox ESR 60\
 846 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 847 **Preferences Affected:** N/A
 848
 849 #### Windows
 850 ```
 851 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 852 ```
 853 #### macOS
 854 ```
 855 <dict>
 856   <key>DisablePrivateBrowsing</key>
 857   <true/> | <false/>
 858 </dict>
 859 ```
 860 #### JSON
 861 ```
 862 {
 863   "policies": {
 864     "DisablePrivateBrowsing": true | false
 865   }
 866 }
 867 ```
 868 ### DisableProfileImport
 869 Disables the "Import data from another browser" option in the bookmarks window.
 870
 871 **Compatibility:** Firefox 60, Firefox ESR 60\
 872 **CCK2 Equivalent:** N/A\
 873 **Preferences Affected:** N/A
 874
 875 #### Windows
 876 ```
 877 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 878 ```
 879 #### macOS
 880 ```
 881 <dict>
 882   <key>DisableProfileImport</key>
 883   <true/> | <false/>
 884 </dict>
 885 ```
 886 #### JSON
 887 ```
 888 {
 889   "policies": {
 890     "DisableProfileImport": true | false
 891   }
 892 }
 893 ```
 894 ### DisableProfileRefresh
 895 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 896
 897 **Compatibility:** Firefox 60, Firefox ESR 60\
 898 **CCK2 Equivalent:** `disableResetFirefox`\
 899 **Preferences Affected:** `browser.disableResetPrompt`
 900
 901 #### Windows
 902 ```
 903 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 904 ```
 905 #### macOS
 906 ```
 907 <dict>
 908   <key>DisableProfileRefresh</key>
 909   <true/> | <false/>
 910 </dict>
 911 ```
 912 #### JSON
 913 ```
 914 {
 915   "policies": {
 916     "DisableProfileRefresh": true | false
 917   }
 918 }
 919 ```
 920 ### DisableSafeMode
 921 Disable safe mode within the browser.
 922
 923 On Windows, this disables safe mode via the command line as well.
 924
 925 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 926 **CCK2 Equivalent:** `disableSafeMode`\
 927 **Preferences Affected:** N/A
 928
 929 #### Windows
 930 ```
 931 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 932 ```
 933 #### macOS
 934 ```
 935 <dict>
 936   <key>DisableSafeMode</key>
 937   <true/> | <false/>
 938 </dict>
 939 ```
 940 #### JSON
 941 ```
 942 {
 943   "policies": {
 944     "DisableSafeMode": true | false
 945   }
 946 }
 947 ```
 948 ### DisableSecurityBypass
 949 Prevent the user from bypassing security in certain cases.
 950
 951 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 952
 953 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 954
 955 **Compatibility:** Firefox 60, Firefox ESR 60\
 956 **CCK2 Equivalent:** N/A\
 957 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 958
 959 #### Windows
 960 ```
 961 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 962 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 963 ```
 964 #### macOS
 965 ```
 966 <dict>
 967   <key>DisableSecurityBypass</key>
 968   <dict>
 969     <key>InvalidCertificate</key>
 970     <true/> | <false/>
 971     <key><SafeBrowsing/key>
 972     <true/> | <false/>
 973   </dict>
 974 </dict>
 975 ```
 976 #### JSON
 977 ```
 978 {
 979   "policies": {
 980     "DisableSecurityBypass": {
 981       "InvalidCertificate": true false,
 982       "SafeBrowsing": true false
 983     }
 984   }
 985 }
 986 ```
 987 ### DisableSystemAddonUpdate
 988 Prevent system add-ons from being installed or update.
 989
 990 **Compatibility:** Firefox 60, Firefox ESR 60\
 991 **CCK2 Equivalent:** N/A\
 992 **Preferences Affected:** N/A
 993
 994 #### Windows
 995 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 996 ```
 997 #### macOS
 998 ```
 999 <dict>
1000   <key>DisableSystemAddonUpdate</key>
1001   <true/> | <false/>
1002 </dict>
1003 ```
1004 #### JSON
1005 ```
1006 {
1007   "policies": {
1008     "DisableSystemAddonUpdate": true | false
1009   }
1010 }
1011 ```
1012 ### DisableTelemetry
1013 Prevent the upload of telemetry data.
1014
1015 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1016
1017 **Compatibility:** Firefox 60, Firefox ESR 60\
1018 **CCK2 Equivalent:** `disableTelemetry`\
1019 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1020
1021 #### Windows
1022 ```
1023 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1024 ```
1025 #### macOS
1026 ```
1027 <dict>
1028   <key>DisableTelemetry</key>
1029   <true/> | <false/>
1030 </dict>
1031 ```
1032 #### JSON
1033 ```
1034 {
1035   "policies": {
1036     "DisableTelemetry": true | false
1037   }
1038 }
1039 ```
1040 ### DisplayBookmarksToolbar
1041 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1042
1043 **Compatibility:** Firefox 60, Firefox ESR 60\
1044 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1045 **Preferences Affected:** N/A
1046
1047 #### Windows
1048 ```
1049 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1050 ```
1051 #### macOS
1052 ```
1053 <dict>
1054   <key>DisplayBookmarksToolbar</key>
1055   <true/> | <false/>
1056 </dict>
1057 ```
1058 #### JSON
1059 ```
1060 {
1061   "policies": {
1062     "DisplayBookmarksToolbar": true | false
1063   }
1064 }
1065 ```
1066 ### DisplayMenuBar
1067 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1068
1069 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1070 **CCK2 Equivalent:** `displayMenuBar`\
1071 **Preferences Affected:** N/A
1072
1073 #### Windows
1074 ```
1075 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1076 ```
1077 #### macOS
1078 ```
1079 <dict>
1080   <key>DisplayMenuBar</key>
1081   <true/> | <false/>
1082 </dict>
1083 ```
1084 #### JSON
1085 ```
1086 {
1087   "policies": {
1088     "DisplayMenuBar": true | false
1089   }
1090 }
1091 ```
1092 ### DNSOverHTTPS
1093 Configure DNS over HTTPS.
1094
1095 `Enabled` determines whether DNS over HTTPS is enabled
1096
1097 `ProviderURL` is a URL to another provider.
1098
1099 `Locked` prevents the user from changing DNS over HTTPS preferences.
1100
1101 **Compatibility:** Firefox 63, Firefox ESR 68\
1102 **CCK2 Equivalent:** N/A\
1103 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1104
1105 #### Windows
1106 ```
1107 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1108 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1109 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1110 ```
1111 #### macOS
1112 ```
1113 <dict>
1114   <key>DNSOverHTTPS</key>
1115   <dict>
1116     <key>Enabled</key>
1117     <true/> | <false/>
1118     <key>ProviderURL</key>
1119     <string>URL_TO_ALTERNATE_PROVIDER</string>
1120     <key>Locked</key>
1121     <true/> | <false/>
1122   </dict>
1123 </dict>
1124 ```
1125 #### JSON
1126 ```
1127 {
1128   "policies": {
1129     "DNSOverHTTPS": {
1130       "Enabled":  true | false,
1131       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1132       "Locked": true | false
1133     }
1134   }
1135 }
1136 ```
1137 ### DontCheckDefaultBrowser
1138 Don't check if Firefox is the default browser at startup.
1139
1140 **Compatibility:** Firefox 60, Firefox ESR 60\
1141 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1142 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1143
1144 #### Windows
1145 ```
1146 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1147 ```
1148 #### macOS
1149 ```
1150 <dict>
1151   <key>DontCheckDefaultBrowser</key>
1152   <true/> | <false/>
1153 </dict>
1154 ```
1155 #### JSON
1156 ```
1157 {
1158   "policies": {
1159     "DontCheckDefaultBrowser": true | false
1160   }
1161 }
1162 ```
1163 ### DefaultDownloadDirectory
1164 Set the default download directory.
1165
1166 You can use ${home} for the native home directory.
1167
1168 **Compatibility:** Firefox 68, Firefox ESR 68\
1169 **CCK2 Equivalent:** N/A\
1170 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1171
1172 #### Windows
1173 ```
1174 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1175 ```
1176 #### macOS
1177 ```
1178 <dict>
1179   <key>DefaultDownloadDirectory</key>
1180   <string>${home}/Downloads</string>
1181 </dict>
1182 ```
1183 #### JSON (macOS and Linux)
1184 ```
1185 {
1186   "policies": {
1187     "DefaultDownloadDirectory": "${home}/Downloads"
1188 }
1189 ```
1190 #### JSON (Windows)
1191 ```
1192 {
1193   "policies": {
1194     "DefaultDownloadDirectory": "${home}\\Downloads"
1195 }
1196 ```
1197 ### DownloadDirectory
1198 Set and lock the download directory.
1199
1200 You can use ${home} for the native home directory.
1201
1202 **Compatibility:** Firefox 68, Firefox ESR 68\
1203 **CCK2 Equivalent:** N/A\
1204 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1205
1206 #### Windows
1207 ```
1208 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1209 ```
1210 #### macOS
1211 ```
1212 <dict>
1213   <key>DownloadDirectory</key>
1214   <string>${home}/Downloads</string>
1215 </dict>
1216 ```
1217 #### JSON (macOS and Linux)
1218 ```
1219 {
1220   "policies": {
1221     "DownloadDirectory": "${home}/Downloads"
1222 }
1223 ```
1224 #### JSON (Windows)
1225 ```
1226 {
1227   "policies": {
1228     "DownloadDirectory": "${home}\\Downloads"
1229 }
1230 ```
1231 ### EnableTrackingProtection
1232 Configure tracking protection.
1233
1234 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1235
1236 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1237
1238 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1239
1240 **Compatibility:** Firefox 60, Firefox ESR 60\
1241 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1242 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1243
1244 #### Windows
1245 ```
1246 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1247 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>EnableTrackingProtection</key>
1253   <dict>
1254     <key>Value</key>
1255     <true/> | <false/>
1256
1257     <key><Locked/key>
1258     <true/> | <false/>
1259   </dict>
1260 </dict>
1261 ```
1262 #### JSON
1263 ```
1264 {
1265   "policies": {
1266     "EnableTrackingProtection": {
1267       "Value": [true, false],
1268       "Locked": [true, false]
1269     }
1270 }
1271 ```
1272 ### EnterprisePoliciesEnabled
1273 Enable policy support on macOS.
1274
1275 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1276 **CCK2 Equivalent:** N/A\
1277 **Preferences Affected:** N/A
1278
1279 #### macOS
1280 ```
1281 <dict>
1282   <key>EnterprisePoliciesEnabled</key>
1283   <true/>
1284 </dict>
1285 ```
1286 ### Extensions
1287 Control the installation, uninstallation and locking of extensions.
1288
1289 `Install` is a list of URLs or native paths for extensions to be installed.
1290
1291 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1292
1293 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1294
1295 **Compatibility:** Firefox 60, Firefox ESR 60\
1296 **CCK2 Equivalent:** `addons`\
1297 **Preferences Affected:** N/A
1298
1299 #### Windows
1300 ```
1301 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1302 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1303 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1304 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1305 ```
1306 #### macOS
1307 ```
1308 <dict>
1309   <key>Extensions</key>
1310   <dict>
1311     <key>Install</key>
1312     <array>
1313       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1314       <string>//path/to/xpi</string>
1315     </array>
1316     <key>Uninstall</key>
1317     <array>
1318       <string>bad_addon_id@mozilla.org</string>
1319     </array>
1320     <key>Locked</key>
1321     <array>
1322       <string>addon_id@mozilla.org</string>
1323     </array>
1324   </dict>
1325 </dict>
1326 ```
1327 #### JSON
1328
1329
1330 ```
1331 {
1332   "policies": {
1333     "Extensions": {
1334       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1335       "Uninstall": ["bad_addon_id@mozilla.org"],
1336       "Locked":  ["addon_id@mozilla.org"]
1337     }
1338   }
1339 }
1340 ```
1341 ### ExtensionSettings
1342 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1343
1344 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1345
1346 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1347
1348 The configuration for each extension is another dictionary that can contain the fields documented below.
1349
1350 | Name | Description |
1351 | --- | --- |
1352 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1353 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1354 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1355 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1356 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1357 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing frmo the local file system, use a file:/// URL.
1358 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1359 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1360 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1361
1362 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1363 **CCK2 Equivalent:** N/A\
1364 **Preferences Affected:** N/A
1365
1366 #### Windows
1367 ```
1368 Software\Policies\Mozilla\Firefox\ExtensionSettings = '{"*": {"installation_mode": "blocked"}}'
1369 ```
1370 #### macOS
1371 ```
1372 <dict>
1373   <key>ExtensionSettings</key>
1374   <dict>
1375     <key>*</key>
1376     <dict>
1377       <key>blocked_install_message</key>
1378       <string>Custom error message.</string>
1379       <key>install_sources</key>
1380       <array>
1381         <string>https://addons.mozilla.org/</string>
1382       </array>
1383       <key>installation_mode</key>
1384       <string>blocked</string>
1385     </dict>
1386     <key>uBlock0@raymondhill.net</key>
1387     <dict>
1388       <key>installation_mode</key>
1389        <string>force_installed</string>
1390       <key>install_url</key>
1391       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1392     </dict>
1393   </dict>
1394 </dict>
1395 ```
1396 #### JSON
1397 ```
1398 {
1399   "policies": {
1400     "ExtensionSettings": {
1401       "*": {
1402         "blocked_install_message": "Custom error message.",
1403         "install_sources": ["https://addons.mozilla.org/"],
1404         "installation_mode": "blocked"
1405       },
1406       "uBlock0@raymondhill.net": {
1407         "installation_mode": "force_installed",
1408         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1409       }
1410     }
1411   }
1412 }
1413 ```
1414 ### ExtensionUpdate
1415 Control extension updates.
1416
1417 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1418 **CCK2 Equivalent:** N/A\
1419 **Preferences Affected:** `extensions.update.enabled`
1420
1421 #### Windows
1422 ```
1423 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1424 ```
1425 #### macOS
1426 ```
1427 <dict>
1428   <key>ExtensionUpdate</key>
1429   <true/> | <false/>
1430 </dict>
1431 ```
1432 #### JSON
1433 ```
1434 {
1435   "policies": {
1436     "ExtensionUpdate": true | false
1437   }
1438 }
1439 ```
1440 ### FlashPlugin
1441 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1442
1443 `Allow` is a list of origins where Flash are allowed.
1444
1445 `Block` is a list of origins where Flash is not allowed.
1446
1447 `Default` determines whether or not Flash is allowed by default.
1448
1449 `Locked` prevents the user from changing Flash preferences.
1450
1451 **Compatibility:** Firefox 60, Firefox ESR 60\
1452 **CCK2 Equivalent:** `permissions.plugin`\
1453 **Preferences Affected:** `plugin.state.flash`
1454
1455 #### Windows
1456 ```
1457 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1458 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1459 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1460 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1461 ```
1462 #### macOS
1463 ```
1464 <dict>
1465   <key>FlashPlugin</key>
1466   <dict>
1467     <key>Allow</key>
1468     <array>
1469       <string>http://example.org</string>
1470     </array>
1471     <key>Block</key>
1472     <array>
1473       <string>http://example.edu</string>
1474     </array>
1475     <key>Default</key>
1476     <true/> | <false/>
1477     <key>Locked</key>
1478     <true/> | <false/>
1479   </dict>
1480 </dict>
1481 ```
1482 #### JSON
1483 ```
1484 {
1485   "policies": {
1486     "FlashPlugin": {
1487       "Allow": ["http://example.org/"],
1488       "Block": ["http://example.edu/"],
1489       "Default": true | false,
1490       "Locked": true | false
1491     }
1492   }
1493 }
1494 ```
1495 ### FirefoxHome
1496 Customize the Firefox Home page.
1497
1498 **Compatibility:** Firefox 68, Firefox ESR 68\
1499 **CCK2 Equivalent:** N/A\
1500 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1501
1502 #### Windows
1503 ```
1504 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1505 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1506 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1507 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1508 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1509 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1510 ```
1511 #### macOS
1512 ```
1513 <dict>
1514   <key>FirefoxHome</key>
1515   <dict>
1516     <key>Search</key>
1517     <true/> | <false/>
1518     <key>TopSites</key>
1519     <true/> | <false/>
1520     <key>Highlights</key>
1521     <true/> | <false/>
1522     <key>Pocket</key>
1523     <true/> | <false/>
1524     <key>Snippets</key>
1525     <true/> | <false/>
1526     <key>Locked</key>
1527     <true/> | <false/>
1528   </dict>
1529 </dict>
1530 ```
1531 #### JSON
1532 ```
1533 {
1534   "policies": {
1535     "FirefoxHome": {
1536       "Search": true | false,
1537       "TopSites": true | false,
1538       "Highlights": true | false,
1539       "Pocket": true | false,
1540       "Snippets": true | false,
1541       "Locked": true | false
1542     }
1543   }
1544 }
1545 ```
1546 ### HardwareAcceleration
1547 Control hardware acceleration.
1548
1549 **Compatibility:** Firefox 60, Firefox ESR 60\
1550 **CCK2 Equivalent:** N/A\
1551 **Preferences Affected:** `layers.acceleration.disabled`
1552
1553 #### Windows
1554 ```
1555 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1556 ```
1557 #### macOS
1558 ```
1559 <dict>
1560   <key>HardwareAcceleration</key>
1561   <true/> | <false/>
1562 </dict>
1563 ```
1564 #### JSON
1565 ```
1566 {
1567   "policies": {
1568     "HardwareAcceleration": true | false
1569   }
1570 }
1571 ```
1572 ### Homepage
1573 Configure the default homepage and how Firefox starts.
1574
1575 `URL` is the default homepage.
1576
1577 `Locked` prevents the user from changing homepage preferences.
1578
1579 `Additional` allows for more than one homepage.
1580
1581 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1582
1583 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1584 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1585 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1586
1587 #### Windows
1588 ```
1589 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1590 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1591 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1592 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1593 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1594 ```
1595 #### macOS
1596 ```
1597 <dict>
1598   <key>Homepage</key>
1599   <dict>
1600     <key>URL</key>
1601     <string>http://example.com</string>
1602     <key>Locked</key>
1603     <true/> | <false/>
1604     <key>Additional</key>
1605     <array>
1606       <string>http://example.org</string>
1607       <string>http://example.edu</string>
1608     </array>
1609     <key>StartPage</key>
1610     <string>always | never | from-visited</string>
1611   </dict>
1612 </dict>
1613 ```
1614 #### JSON
1615 ```
1616 {
1617   "policies": {
1618     "Homepage": {
1619       "URL": "http://example.com/",
1620       "Locked": true | false,
1621       "Additional": ["http://example.org/",
1622                      "http://example.edu/"],
1623       "StartPage": "none" | "homepage" |  "previous-session"
1624     }
1625   }
1626 }
1627 ```
1628 ### InstallAddonsPermission
1629 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1630
1631 `Allow` is a list of origins where extension installs are allowed.
1632
1633 `Default` determines whether or not extension installs are allowed by default.
1634
1635 **Compatibility:** Firefox 60, Firefox ESR 60\
1636 **CCK2 Equivalent:** `permissions.install`\
1637 **Preferences Affected:** `xpinstall.enabled`
1638
1639 #### Windows
1640 ```
1641 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1642 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1643 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1644 ```
1645 #### macOS
1646 ```
1647 <dict>
1648   <key>InstallAddonsPermission</key>
1649   <dict>
1650     <key>Allow</key>
1651     <array>
1652       <string>http://example.org</string>
1653       <string>http://example.edu</string>
1654     </array>
1655     <key>Default</key>
1656     <true/> | <false/>
1657   </dict>
1658 </dict>
1659 ```
1660 #### JSON
1661 ```
1662 {
1663   "policies": {
1664     "InstallAddonsPermission": {
1665       "Allow": ["http://example.org/",
1666                 "http://example.edu/"],
1667       "Default": true | false
1668     }
1669   }
1670 }
1671 ```
1672 ### LocalFileLinks
1673 Enable linking to local files by origin.
1674
1675 **Compatibility:** Firefox 68, Firefox ESR 68\
1676 **CCK2 Equivalent:** N/A\
1677 **Preferences Affected:** `capability.policy.localfilelinks.*`
1678
1679 #### Windows
1680 ```
1681 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1682 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1683 ```
1684 #### macOS
1685 ```
1686 <dict>
1687   <key>LocalFileLinks</key>
1688   <array>
1689     <string>http://example.org</string>
1690     <string>http://example.edu</string>
1691   </array>
1692 </dict>
1693 ```
1694 #### JSON
1695 ```
1696 {
1697   "policies": {
1698     "LocalFileLinks": ["http://example.org/",
1699                        "http://example.edu/"]
1700   }
1701 }
1702 ```
1703 ### NoDefaultBookmarks
1704 Disable the creation of default bookmarks.
1705
1706 This policy is only effective if the user profile has not been created yet.
1707
1708 **Compatibility:** Firefox 60, Firefox ESR 60\
1709 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1710 **Preferences Affected:** N/A
1711
1712 #### Windows
1713 ```
1714 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1715 ```
1716 #### macOS
1717 ```
1718 <dict>
1719   <key>NoDefaultBookmarks</key>
1720   <true/> | <false/>
1721 </dict>
1722 ```
1723 #### JSON
1724 ```
1725 {
1726   "policies": {
1727     "NoDefaultBookmarks": true | false
1728   }
1729 }
1730 ```
1731 ### NetworkPrediction
1732 Enable or disable network prediction (DNS prefetching).
1733
1734 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1735 **CCK2 Equivalent:** N/A\
1736 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1737
1738 #### Windows
1739 ```
1740 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1741 ```
1742 #### macOS
1743 ```
1744 <dict>
1745   <key>NetworkPrediction</key>
1746   <true/> | <false/>
1747 </dict>
1748 ```
1749 #### JSON
1750 ```
1751 {
1752   "policies": {
1753     "NetworkPrediction": true | false
1754 }
1755 ```
1756 ### NewTabPage
1757 Enable or disable the New Tab page.
1758
1759 **Compatibility:** Firefox 68, Firefox ESR 68\
1760 **CCK2 Equivalent:** N/A\
1761 **Preferences Affected:** `browser.newtabpage.enabled`
1762
1763 #### Windows
1764 ```
1765 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1766 ```
1767 #### macOS
1768 ```
1769 <dict>
1770   <key>NewTabPage</key>
1771   <true/> | <false/>
1772 </dict>
1773 ```
1774 #### JSON
1775 ```
1776 {
1777   "policies": {
1778     "NewTabPage": true | false
1779 }
1780 ```
1781 ### OfferToSaveLogins
1782 Control whether or not Firefox offers to save passwords.
1783
1784 **Compatibility:** Firefox 60, Firefox ESR 60\
1785 **CCK2 Equivalent:** `dontRememberPasswords`\
1786 **Preferences Affected:** `signon.rememberSignons`
1787
1788 #### Windows
1789 ```
1790 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1791 ```
1792 #### macOS
1793 ```
1794 <dict>
1795   <key>OfferToSaveLogins</key>
1796   <true/> | <false/>
1797 </dict>
1798 ```
1799 #### JSON
1800 ```
1801 {
1802   "policies": {
1803     "OfferToSaveLogins": true | false
1804   }
1805 }
1806 ```
1807 ### OverrideFirstRunPage
1808 Override the first run page. If the value is blank, no first run page is displayed.
1809
1810 **Compatibility:** Firefox 60, Firefox ESR 60\
1811 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1812 **Preferences Affected:** `startup.homepage_welcome_url`
1813
1814 #### Windows
1815 ```
1816 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1817 ```
1818 #### macOS
1819 ```
1820 <dict>
1821   <key>OverrideFirstRunPage</key>
1822   <string>http://example.org</string>
1823 </dict>
1824 ```
1825 #### JSON
1826 ```
1827 {
1828   "policies": {
1829     "OverrideFirstRunPage": "http://example.org"
1830 }
1831 ```
1832 ### OverridePostUpdatePage
1833 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1834
1835 **Compatibility:** Firefox 60, Firefox ESR 60\
1836 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1837 **Preferences Affected:** `startup.homepage_override_url`
1838
1839 #### Windows
1840 ```
1841 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1842 ```
1843 #### macOS
1844 ```
1845 <dict>
1846   <key>OverridePostUpdatePage</key>
1847   <string>http://example.org</string>
1848 </dict>
1849 ```
1850 #### JSON
1851 ```
1852 {
1853   "policies": {
1854     "OverridePostUpdatePage": "http://example.org"
1855 }
1856 ```
1857 ### Permissions
1858 Set permissions associated with camera, microphone, location, and notifications
1859
1860 `Allow` is a list of origins where the feature is allowed.
1861
1862 `Block` is a list of origins where the feature is not allowed.
1863
1864 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1865
1866 `Locked` prevents the user from changing preferences for the feature.
1867
1868 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1869 **CCK2 Equivalent:** N/A\
1870 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1871
1872 #### Windows
1873 ```
1874 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1875 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1876 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1877 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1878 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1879 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1880 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1881 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1882 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1883 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1884 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1885 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1886 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1887 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1888 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1889 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1890 ```
1891 #### macOS
1892 ```
1893 <dict>
1894   <key>Permissions</key>
1895   <dict>
1896     <key>Camera</key>
1897     <dict>
1898       <key>Allow</key>
1899       <array>
1900         <string>https://example.org</string>
1901       </array>
1902       <key>Block</key>
1903       <array>
1904         <string>https://example.edu</string>
1905       </array>
1906       <key>BlockNewRequests</key>
1907       <true/>
1908       <key>Locked</key>
1909       <true/>
1910     </dict>
1911     <key>Microphone</key>
1912     <dict>
1913       <key>Allow</key>
1914       <array>
1915         <string>https://example.org</string>
1916       </array>
1917       <key>Block</key>
1918       <array>
1919         <string>https://example.edu</string>
1920       </array>
1921       <key>BlockNewRequests</key>
1922       <true/>
1923       <key>Locked</key>
1924       <true/>
1925     </dict>
1926     <key>Location</key>
1927     <dict>
1928       <key>Allow</key>
1929       <array>
1930         <string>https://example.org</string>
1931       </array>
1932       <key>Block</key>
1933       <array>
1934         <string>https://example.edu</string>
1935       </array>
1936       <key>BlockNewRequests</key>
1937       <true/>
1938       <key>Locked</key>
1939       <true/>
1940     </dict>
1941     <key>Notifications</key>
1942     <dict>
1943       <key>Allow</key>
1944       <array>
1945         <string>https://example.org</string>
1946       </array>
1947       <key>Block</key>
1948       <array>
1949         <string>https://example.edu</string>
1950       </array>
1951       <key>BlockNewRequests</key>
1952       <true/>
1953       <key>Locked</key>
1954       <true/>
1955     </dict>
1956   </dict>
1957 </dict>
1958 ```
1959 #### JSON
1960 ```
1961 {
1962   "policies": {
1963     "Permissions": {
1964       "Camera": {
1965         "Allow": ["https://example.org"],
1966         "Block": ["https://example.edu"],
1967         "BlockNewRequests": true | false,
1968         "Locked": true | false
1969       },
1970       "Microphone": {
1971         "Allow": ["https://example.org"],
1972         "Block": ["https://example.edu"],
1973         "BlockNewRequests": true | false,
1974         "Locked": true | false
1975       },
1976       "Location": {
1977         "Allow": ["https://example.org"],
1978         "Block": ["https://example.edu"],
1979         "BlockNewRequests": true | false,
1980         "Locked": true | false
1981       },
1982       "Notifications": {
1983         "Allow": ["https://example.org"],
1984         "Block": ["https://example.edu"],
1985         "BlockNewRequests": true | false,
1986         "Locked": true | false
1987       }
1988     }
1989   }
1990 }
1991 ```
1992 ### PopupBlocking
1993 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1994
1995 `Allow` is a list of origins where popup-windows are allowed.
1996
1997 `Default` determines whether or not pop-up windows are allowed by default.
1998
1999 `Locked` prevents the user from changing pop-up preferences.
2000
2001 **Compatibility:** Firefox 60, Firefox ESR 60\
2002 **CCK2 Equivalent:** `permissions.popup`\
2003 **Preferences Affected:** `dom.disable_open_during_load`
2004
2005 #### Windows
2006 ```
2007 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2008 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2009 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2010 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2011 ```
2012 #### macOS
2013 ```
2014 <dict>
2015   <key>PopupBlocking</key>
2016   <dict>
2017     <key>Allow</key>
2018     <array>
2019       <string>http://example.org</string>
2020       <string>http://example.edu</string>
2021     </array>
2022     <key>Default</key>
2023     <true/> | <false/>
2024     <key>Locked</key>
2025     <true/> | <false/>
2026   </dict>
2027 </dict>
2028 ```
2029 #### JSON
2030 ```
2031 {
2032   "policies": {
2033     "PopupBlocking": {
2034       "Allow": ["http://example.org/",
2035                 "http://example.edu/"],
2036       "Default": true | false,
2037       "Locked": true | false
2038     }
2039   }
2040 }
2041 ```
2042 ### Preferences
2043 Set and lock certain preferences.
2044
2045 **Compatibility:** See below\
2046 **CCK2 Equivalent:** `preferences`\
2047 **Preferences Affected:** See below
2048
2049 | Preference | Type | Compatibility
2050 | --- | --- | ---
2051 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR
2052 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR
2053 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR
2054 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR
2055 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR
2056 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR
2057 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR
2058 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR
2059 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR
2060 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR
2061 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR
2062 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR
2063 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR
2064 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR
2065 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR
2066 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR
2067 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR
2068 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR
2069 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR
2070 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR
2071 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR
2072 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR
2073 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR
2074 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR
2075 #### Windows
2076 ```
2077 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2078 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2079 ```
2080 #### macOS
2081 ```
2082 <dict>
2083   <key>Preferences</key>
2084   <dict>
2085     <key>boolean_preference_name</key>
2086     <true/> | <false/>
2087     <key>string_preference_name</key>
2088     <string>string_value</string>
2089   </dict>
2090 </dict>
2091 ```
2092 #### JSON
2093 ```
2094 {
2095   "policies": {
2096     "Preferences": {
2097       "boolean_preference_name": true | false,
2098       "string_preference_name": "string_value"
2099     }
2100   }
2101 }
2102 ```
2103 ### PromptForDownloadLocation
2104 Ask where to save each file before downloading.
2105
2106 **Compatibility:** Firefox 68, Firefox ESR 68\
2107 **CCK2 Equivalent:** N/A
2108 **Preferences Affected:** `browser.download.useDownloadDir`
2109
2110 #### Windows
2111 ```
2112 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2113 ```
2114 #### macOS
2115 ```
2116 <dict>
2117   <key>PromptForDownloadLocation</key>
2118   <true/> | <false/>
2119 </dict>
2120 ```
2121 #### JSON
2122 ```
2123 {
2124   "policies": {
2125     "PromptForDownloadLocation": true | false
2126   }
2127 }
2128 ```
2129 ### Proxy
2130 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2131 To specify ports, append them to the hostnames with a colon (:).
2132
2133 `Mode` is the proxy method being used.
2134
2135 `Locked` is whether or not proxy settings can be changed.
2136
2137 `HTTPProxy` is the HTTP proxy server.
2138
2139 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2140
2141 `SSLProxy` is the SSL proxy server.
2142
2143 `FTPProxy` is the FTP proxy server.
2144
2145 `SOCKSProxy` is the SOCKS proxy server
2146
2147 `SOCKSVersion` is the SOCKS version (4 or 5)
2148
2149 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2150
2151 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2152
2153 `AutoLogin` means do not prompt for authentication if password is saved.
2154
2155 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2156
2157 **Compatibility:** Firefox 60, Firefox ESR 60\
2158 **CCK2 Equivalent:** `networkProxy*`\
2159 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2160
2161 #### Windows
2162 ```
2163 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2164 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2165 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2166 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2167 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2168 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2169 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2170 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2171 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2172 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2173 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2174 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2175 ```
2176 #### macOS
2177 ```
2178 <dict>
2179   <key>Proxy</key>
2180   <dict>
2181     <key>Mode</key>
2182     <string>none | system | manual | autoDetect| autoConfig</string>
2183     <key>Locked</key>
2184     <true> | </false>
2185     <key>HTTPProxy</key>
2186     <string>https://httpproxy.example.com</string>
2187     <key>UseHTTPProxyForAllProtocols</key>
2188     <true> | </false>
2189     <key>SSLProxy</key>
2190     <string>https://sslproxy.example.com</string>
2191     <key>FTPProxy</key>
2192     <string>https://ftpproxy.example.com</string>
2193     <key>SOCKSProxy</key>
2194     <string>https://socksproxy.example.com</string>
2195     <key>SOCKSVersion</key>
2196     <string>4 | 5</string>
2197     <key>Passthrough</key>
2198     <string>&lt;local>&gt;</string>
2199     <key>AutoConfigURL</key>
2200     <string>URL_TO_AUTOCONFIG</string>
2201     <key>AutoLogin</key>
2202     <true> | </false>
2203     <key>UseProxyForDNS</key>
2204     <true> | </false>
2205   </dict>
2206 </dict>
2207 ```
2208 #### JSON
2209 ```
2210 {
2211   "policies": {
2212     "Proxy": {
2213       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2214       "Locked": [true, false],
2215       "HTTPProxy": "hostname",
2216       "UseHTTPProxyForAllProtocols": [true, false],
2217       "SSLProxy": "hostname",
2218       "FTPProxy": "hostname",
2219       "SOCKSProxy": "hostname",
2220       "SOCKSVersion": 4 | 5
2221       "Passthrough": "<local>",
2222       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2223       "AutoLogin":  [true, false],
2224       "UseProxyForDNS": [true, false]
2225     }
2226   }
2227 }
2228 ```
2229 ### RequestedLocales
2230 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2231
2232 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2233
2234 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2235 **CCK2 Equivalent:** N/A\
2236 **Preferences Affected:** N/A
2237 #### Windows
2238 ```
2239 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2240 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2241
2242 or
2243
2244 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2245 ```
2246 #### macOS
2247 ```
2248 <dict>
2249   <key>RequestedLocales</key>
2250   <array>
2251     <string>de</string>
2252     <string>en-US</string>
2253   </array>
2254 </dict>
2255
2256 or
2257
2258 <dict>
2259   <key>RequestedLocales</key>
2260   <string>de,en-US</string>
2261 </dict>
2262
2263 ```
2264 #### JSON
2265 ```
2266 {
2267   "policies": {
2268     "RequestedLocales": ["de", "en-US"]
2269   }
2270 }
2271
2272 or
2273
2274 {
2275   "policies": {
2276     "RequestedLocales": "de,en-US"
2277   }
2278 }
2279 ```
2280 ### SanitizeOnShutdown (Selective)
2281 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2282
2283 **Compatibility:** Firefox 68, Firefox ESR 68\
2284 **CCK2 Equivalent:** N/A\
2285 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2286 #### Windows
2287 ```
2288 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2289 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2290 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2291 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2292 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2293 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2294 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2295 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2296 ```
2297 #### macOS
2298 ```
2299 <dict>
2300   <key>SanitizeOnShutdown</key>
2301   <dict>
2302     <key>Cache</key>
2303     <true/> | <false/>
2304     <key>Cookies</key>
2305     <true/> | <false/>
2306     <key>Downloads</key>
2307     <true/> | <false/>
2308     <key>FormData</key>
2309     <true/> | <false/>
2310     <key>History</key>
2311     <true/> | <false/>
2312     <key>Sessions</key>
2313     <true/> | <false/>
2314     <key>SiteSettings</key>
2315     <true/> | <false/>
2316     <key>OfflineApps</key>
2317     <true/> | <false/>
2318   </dict>
2319 </dict>
2320 ```
2321 #### JSON
2322 ```
2323 {
2324   "policies": {
2325     "SanitizeOnShutdown": {
2326       "Cache": true | false,
2327       "Cookies": true | false,
2328       "Downloads": true | false,
2329       "FormData": true | false,
2330       "History": true | false,
2331       "Sessions": true | false,
2332       "SiteSettings": true | false,
2333       "OfflineApps": true | false
2334     }
2335   }
2336 }
2337 ```
2338 ### SanitizeOnShutdown (All)
2339 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2340
2341 **Compatibility:** Firefox 60, Firefox ESR 60\
2342 **CCK2 Equivalent:** N/A\
2343 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2344 #### Windows
2345 ```
2346 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2347 ```
2348 #### macOS
2349 ```
2350 <dict>
2351   <key>SanitizeOnShutdown</key>
2352   <true/> | <false/>
2353 </dict>
2354 ```
2355 #### JSON
2356 ```
2357 {
2358   "policies": {
2359     "SanitizeOnShutdown": true | false
2360   }
2361 }
2362 ```
2363 ### SearchBar
2364 Set whether or not search bar is displayed.
2365
2366 **Compatibility:** Firefox 60, Firefox ESR 60\
2367 **CCK2 Equivalent:** `showSearchBar`\
2368 **Preferences Affected:** N/A
2369
2370 #### Windows
2371 ```
2372 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2373 ```
2374 #### macOS
2375 ```
2376 <dict>
2377   <key>SearchBar</key>
2378   <string>unified | separate</string>
2379 </dict>
2380 ```
2381
2382 #### JSON
2383 ```
2384 {
2385   "policies": {
2386     "SearchBar": "unified" | "separate"
2387   }
2388 }
2389 ```
2390
2391
2392
2393
2394
2395 ### SearchEngines (This policy is only available on the ESR.)
2396
2397 ### SearchEngines | Default
2398
2399 Set the default search engine. This policy is only available on the ESR.
2400
2401 **Compatibility:** Firefox ESR 60\
2402 **CCK2 Equivalent:** `defaultSearchEngine`\
2403 **Preferences Affected:** N/A
2404
2405 #### Windows
2406 ```
2407 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2408 ```
2409 #### macOS
2410 ```
2411 <dict>
2412   <key>SearchEngines</key>
2413   <dict>
2414     <key>Default</key>
2415     <string>NAME_OF_SEARCH_ENGINE</string>
2416   </dict>
2417 </dict>
2418 ```
2419 #### JSON
2420 ```
2421 {
2422   "policies": {
2423     "SearchEngines": {
2424       "Default": "NAME_OF_SEARCH_ENGINE"
2425     }
2426   }
2427 }
2428 ```
2429 ### SearchEngines | PreventInstalls
2430
2431 Prevent installing search engines from webpages.
2432
2433 **Compatibility:** Firefox ESR 60\
2434 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2435 **Preferences Affected:** N/A
2436
2437 #### Windows
2438 ```
2439 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2440 ```
2441 #### macOS
2442 ```
2443 <dict>
2444   <key>SearchEngines</key>
2445   <dict>
2446     <key>PreventInstalls</key>
2447     <true/> | <false/>
2448   </dict>
2449 </dict>
2450 ```
2451 #### JSON
2452 ```
2453 {
2454   "policies": {
2455     "SearchEngines": {
2456       "PreventInstalls": true | false
2457     }
2458   }
2459 }
2460 ```
2461 ### SearchEngines | Remove
2462
2463 Hide built-in search engines. This policy is only available on the ESR.
2464
2465 **Compatibility:** Firefox ESR 60.2\
2466 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2467 **Preferences Affected:** N/A
2468
2469 #### Windows
2470 ```
2471 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2472 ```
2473 #### macOS
2474 ```
2475 <dict>
2476   <key>SearchEngines</key>
2477   <dict>
2478     <key>Remove</key>
2479     <array>
2480       <string>NAME_OF_SEARCH_ENGINE</string>
2481     </array>
2482   </dict>
2483 </dict>
2484 ```
2485 #### JSON
2486 ```
2487 {
2488   "policies": {
2489     "SearchEngines": {
2490       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2491     }
2492   }
2493 }
2494 ```
2495 ### SearchEngines | Add
2496
2497 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2498
2499 `Name` is the name of the search engine.
2500
2501 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2502
2503 `Method` is either GET or POST
2504
2505 `IconURL` is a URL for the icon to use.
2506
2507 `Alias` is a keyword to use for the engine.
2508
2509 `Description` is a description of the search engine.
2510
2511 `PostData` is the POST data as name value pairs separated by &.
2512
2513 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2514
2515 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2516 **CCK2 Equivalent:** `searchplugins`\
2517 **Preferences Affected:** N/A
2518
2519 #### Windows
2520 ```
2521 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2522 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2523 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2524 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2525 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2526 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2527 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2528 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2529 ```
2530
2531 #### macOS
2532 ```
2533 <dict>
2534   <key>SearchEngines</key>
2535   <dict>
2536     <key>Add</key>
2537     <array>
2538       <dict>
2539         <key>Name</key>
2540         <string>Example1</string>
2541         <key>URLTemplate</key>
2542         <string>https://www.example.org/q={searchTerms}</string>
2543         <key>Method</key>
2544         <string>GET | POST </string>
2545         <key>IconURL</key>
2546         <string>https://www.example.org/favicon.ico</string>
2547         <key>Alias</key>
2548         <string>example</string>
2549         <key>Description</key>
2550         <string>Example Description</string>
2551         <key>SuggestURLTemplate</key>
2552         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2553         <key>PostData</key>
2554         <string>name=value&q={searchTerms}</string>
2555       </dict>
2556     <array>
2557   </dict>
2558 </dict>
2559 ```
2560 #### JSON
2561 ```
2562 {
2563   "policies": {
2564     "SearchEngines": {
2565       "Add": [
2566         {
2567           "Name": "Example1",
2568           "URLTemplate": "https://www.example.org/q={searchTerms}",
2569           "Method": "GET" | "POST",
2570           "IconURL": "https://www.example.org/favicon.ico",
2571           "Alias": "example",
2572           "Description": "Description",
2573           "PostData": "name=value&q={searchTerms}",
2574           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2575         }
2576       ]
2577     }
2578   }
2579 }
2580 ```
2581 ### SearchSuggestEnabled
2582
2583 Enable search suggestions.
2584
2585 **Compatibility:** Firefox 68, Firefox ESR 68\
2586 **CCK2 Equivalent:** N/A\
2587 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2588
2589 #### Windows
2590 ```
2591 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2592 ```
2593 #### macOS
2594 ```
2595 <dict>
2596   <key>SearchSuggestEnabled</key>
2597   <true/> | <false/>
2598 </dict>
2599 ```
2600 #### JSON
2601 ```
2602 {
2603   "policies": {
2604     "SearchSuggestEnabled": true | false
2605   }
2606 }
2607 ```
2608 ### SecurityDevices
2609
2610 Install PKCS #11 modules.
2611
2612 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2613 **CCK2 Equivalent:** `certs.devices`\
2614 **Preferences Affected:** N/A
2615
2616 #### Windows
2617 ```
2618 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2619 ```
2620 #### macOS
2621 ```
2622 <dict>
2623   <key>SecurityDevices</key>
2624   <dict>
2625     <key>NAME_OF_DEVICE</key>
2626     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2627   </dict>
2628 </dict>
2629 ```
2630
2631 #### JSON
2632 ```
2633 {
2634   "policies": {
2635     "SecurityDevices": {
2636       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2637     }
2638   }
2639 }
2640 ```
2641 ### SSLVersionMax
2642
2643 Set and lock the maximum version of TLS.
2644
2645 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2646 **CCK2 Equivalent:** N/A\
2647 **Preferences Affected:** `security.tls.version.max`
2648
2649 #### Windows
2650 ```
2651 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2652 ```
2653 #### macOS
2654 ```
2655 <dict>
2656   <key>SSLVersionMax</key>
2657   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2658 </dict>
2659 ```
2660
2661 #### JSON
2662 ```
2663 {
2664   "policies": {
2665     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2666   }
2667 }
2668 ```
2669 ### SSLVersionMin
2670
2671 Set and lock the minimum version of TLS.
2672
2673 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2674 **CCK2 Equivalent:** N/A\
2675 **Preferences Affected:** `security.tls.version.min`
2676
2677 #### Windows
2678 ```
2679 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2680 ```
2681 #### macOS
2682 ```
2683 <dict>
2684   <key>SSLVersionMin</key>
2685   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2686 </dict>
2687 ```
2688
2689 #### JSON
2690 ```
2691 {
2692   "policies": {
2693     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2694   }
2695 }
2696 ```
2697 ### SupportMenu
2698 Add a menuitem to the help menu for specifying support information.
2699
2700 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
2701 **CCK2 Equivalent:** helpMenu\
2702 **Preferences Affected:** N/A
2703
2704 #### Windows
2705 ```
2706 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
2707 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
2708 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S"
2709 ```
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>SupportMenu</key>
2714   <dict>
2715     <key>Title</key>
2716     <string>SupportMenu</string>
2717     <key>URL</key>
2718     <string>http://example.com/support</string>
2719     <key>AccessKey</key>
2720     <string>S</string>
2721   </dict>
2722 </dict>
2723 ```
2724 #### JSON
2725 ```
2726 {
2727   "policies": {
2728     "SupportMenu": {
2729       "Title": "Support Menu",
2730       "URL": "http://example.com/support",
2731       "AccessKey": "S"
2732     }
2733   }
2734 }
2735 ```
2736 ### WebsiteFilter
2737 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2738
2739 **Compatibility:** Firefox 60, Firefox ESR 60\
2740 **CCK2 Equivalent:** N/A\
2741 **Preferences Affected:** N/A
2742
2743 #### Windows
2744 ```
2745 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2746 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2747 ```
2748 #### macOS
2749 ```
2750 <dict>
2751   <key>WebsiteFilter</key>
2752   <dict>
2753     <key>Block</key>
2754     <array>
2755       <string><all_urls></string>
2756     </array>
2757     <key>Exceptions</key>
2758     <array>
2759       <string>http://example.org/*</string>
2760     </array>
2761   </dict>
2762
2763 </dict>
2764 ```
2765 #### JSON
2766 ```
2767 {
2768   "policies": {
2769     "WebsiteFilter": {
2770       "Block": ["<all_urls>"],
2771       "Exceptions": ["http://example.org/*"]
2772     }
2773   }
2774 }
2775 ```