README.md

   1 **IMPORTANT**: This file is in active development along with the policies in Firefox. Make sure to check the compatibility section to see if a policy is available in a specific version of Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases.
   2
   3 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   4
   5 | Policy Name | Description
   6 | --- | --- |
   7 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
   8 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
   9 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  10 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  11 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  12 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  13 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  14 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  15 | **[`Certificates`](#certificates)** |
  16 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  17 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  18 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  19 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  20 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  21 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  22 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  23 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  24 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  25 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  26 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  27 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  28 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  29 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  30 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  31 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  32 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  33 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  34 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  35 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  36 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  37 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  38 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  39 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  40 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  41 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  42 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  43 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  44 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  45 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  46 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  47 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  48 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  49 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  50 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  51 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  52 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  53 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  54 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  55 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  56 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  57 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  58 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  59 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  60 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  61 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  62 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  63 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  64 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  65 | **[`Proxy`](#proxy)** | Configure proxy settings.
  66 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  67 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  68 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  69 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  70 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  71 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  72 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  73 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  74 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  75 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  76 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  77 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  78 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  79 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  80 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  81
  82 ### AppUpdateURL
  83
  84 Change the URL for application update.
  85
  86 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  87 **CCK2 Equivalent:** N/A\
  88 **Preferences Affected:** `app.update.url`
  89
  90 #### Windows
  91 ```
  92 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  93 ```
  94 #### macOS
  95 ```
  96 <dict>
  97   <key>AppUpdateURL</key>
  98   <string>https://yoursite.com</string>
  99 </dict>
 100 ```
 101 ### JSON
 102 ```
 103 {
 104   "policies": {
 105     "AppUpdateURL": "https://yoursite.com"
 106   }
 107 }
 108 ```
 109 ### Authentication
 110
 111 Configure sites that support integrated authentication.
 112
 113 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 114
 115 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 116 **CCK2 Equivalent:** N/A\
 117 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 118
 119 #### Windows
 120 ```
 121 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 122 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 123 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 124 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 125 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 126 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 127 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 128 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 129 ```
 130 #### macOS
 131 ```
 132 <dict>
 133   <key>Authentication</key>
 134   <dict>
 135     <key>SPNEGO</key>
 136     <array>
 137       <string>mydomain.com</string>
 138       <string>https://myotherdomain.com</string>
 139     </array>
 140     <key>Delegated</key>
 141     <array>
 142       <string>mydomain.com</string>
 143       <string>https://myotherdomain.com</string>
 144     </array>
 145     <key>NTLM</key>
 146     <array>
 147       <string>mydomain.com</string>
 148       <string>https://myotherdomain.com</string>
 149     </array>
 150     <key>AllowNonFQDN</key>
 151       <dict>
 152       <key>SPNEGO</key>
 153       <true/> | <false/>
 154       <key>NTLM</key>
 155       <true/> | <false/>
 156     </dict>
 157   </dict>
 158 </dict>
 159 ```
 160 ### JSON
 161 ```
 162 {
 163   "policies": {
 164     "Authentication": {
 165       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 166       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 167       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 168       "AllowNonFQDN": {
 169         "SPNEGO": true | false,
 170         "NTLM": true | false
 171       }
 172     }
 173   }
 174 }
 175 ```
 176 ### BlockAboutAddons
 177
 178 Block access to the Add-ons Manager (about:addons).
 179
 180 **Compatibility:** Firefox 60, Firefox ESR 60\
 181 **CCK2 Equivalent:** `disableAddonsManager`\
 182 **Preferences Affected:** N/A
 183
 184 #### Windows
 185 ```
 186 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 187 ```
 188 #### macOS
 189 ```
 190 <dict>
 191   <key>BlockAboutAddons</key>
 192   <true/> | <false/>
 193 </dict>
 194 ```
 195 #### JSON
 196 ```
 197 {
 198   "policies": {
 199     "BlockAboutAddons": true | false
 200   }
 201 }
 202 ```
 203 ### BlockAboutConfig
 204
 205 Block access to about:config.
 206
 207 **Compatibility:** Firefox 60, Firefox ESR 60\
 208 **CCK2 Equivalent:** `disableAboutConfig`\
 209 **Preferences Affected:** N/A
 210
 211 #### Windows
 212 ```
 213 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 214 ```
 215 #### macOS
 216 ```
 217 <dict>
 218   <key>BlockAboutConfig</key>
 219   <true/> | <false/>
 220 </dict>
 221 ```
 222 #### JSON
 223 ```
 224 {
 225   "policies": {
 226     "BlockAboutConfig": true | false
 227   }
 228 }
 229 ```
 230 ### BlockAboutProfiles
 231
 232 Block access to About Profiles (about:profiles).
 233
 234 **Compatibility:** Firefox 60, Firefox ESR 60\
 235 **CCK2 Equivalent:** `disableAboutProfiles`\
 236 **Preferences Affected:** N/A
 237
 238 #### Windows
 239 ```
 240 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 241 ```
 242 #### macOS
 243 ```
 244 <dict>
 245   <key>BlockAboutProfiles</key>
 246   <true/> | <false/>
 247 </dict>
 248 ```
 249 #### JSON
 250 ```
 251 {
 252   "policies": {
 253     "BlockAboutProfiles": true | false
 254   }
 255 }
 256 ```
 257 ### BlockAboutSupport
 258
 259 Block access to Troubleshooting Information (about:support).
 260
 261 **Compatibility:** Firefox 60, Firefox ESR 60\
 262 **CCK2 Equivalent:** `disableAboutSupport`\
 263 **Preferences Affected:** N/A
 264
 265 #### Windows
 266 ```
 267 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 268 ```
 269 #### macOS
 270 ```
 271 <dict>
 272   <key>BlockAboutSupport</key>
 273   <true/> | <false/>
 274 </dict>
 275 ```
 276 #### JSON
 277 ```
 278 {
 279   "policies": {
 280     "BlockAboutSupport": true | false
 281   }
 282 }
 283 ```
 284 ### Bookmarks
 285
 286 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 287
 288 **Compatibility:** Firefox 60, Firefox ESR 60\
 289 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 290 **Preferences Affected:** N/A
 291
 292 #### Windows
 293 ```
 294 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 295 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 296 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 297 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 298 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 299 ```
 300 #### macOS
 301 ```
 302 <dict>
 303   <key>Bookmarks</key>
 304   <array>
 305     <dict>
 306       <key>Title</key>
 307       <string>Example</string>
 308       <key>URL</key>
 309       <string>https://example.com</string>
 310       <key>Favicon</key>
 311       <string>https://example.com/favicon.ico</string>
 312       <key>Placement</key>
 313       <string>toolbar | menu</string>
 314       <key>Folder</key>
 315       <string>FolderName</string>
 316     </dict>
 317   </array>
 318 </dict>
 319 ```
 320 ### JSON
 321 ```
 322 {
 323   "policies": {
 324     "Bookmarks": [
 325       {
 326         "Title": "Example",
 327         "URL": "https://example.com",
 328         "Favicon": "https://example.com/favicon.ico",
 329         "Placement": "toolbar" | "menu",
 330         "Folder": "FolderName"
 331       }
 332     ]
 333   }
 334 }
 335 ```
 336 ### CaptivePortal
 337 Enable or disable the detection of captive portals.
 338
 339 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 340 **CCK2 Equivalent:** N/A\
 341 **Preferences Affected:** `network.captive-portal-service.enabled`
 342
 343 #### Windows
 344 ```
 345 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 346 ```
 347 #### macOS
 348 ```
 349 <dict>
 350   <key>CaptivePortal</key>
 351   <true/> | <false/>
 352 </dict>
 353 ```
 354 #### JSON
 355 ```
 356 {
 357   "policies": {
 358     "CaptivePortal": true | false
 359   }
 360 }
 361 ```
 362 ### Certificates
 363
 364 ### Certificates | ImportEnterpriseRoots
 365
 366 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 367
 368 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 369
 370 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 371 **CCK2 Equivalent:** N/A\
 372 **Preferences Affected:** `security.enterprise_roots.enabled`
 373
 374 #### Windows
 375 ```
 376 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>Certificates</key>
 382   <dict>
 383     <key>ImportEnterpriseRoots</key>
 384     <true/> | <false/>
 385   </dict>
 386 </dict>
 387 ```
 388 #### JSON
 389 ```
 390 {
 391   "policies": {
 392     "Certificates": {
 393       "ImportEnterpriseRoots": true | false
 394     }
 395   }
 396 }
 397 ```
 398 ### Certificates | Install
 399
 400 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 401
 402 - Windows
 403   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 404   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 405 - macOS
 406   - /Library/Application Support/Mozilla/Certificates
 407   - ~/Library/Application Support/Mozilla/Certificates
 408 - Linux
 409   - /usr/lib/mozilla/certificates
 410   - /usr/lib64/mozilla/certificates
 411   - ~/.mozilla/certificates
 412
 413 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 414
 415 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 416
 417 Certificates are installed using the trust string `CT,CT,`.
 418
 419 Binary (DER) and ASCII (PEM) certificates are both supported.
 420
 421 **Compatibility:** Firefox 64, Firefox ESR 64\
 422 **CCK2 Equivalent:** `certs.ca`\
 423 **Preferences Affected:** N/A
 424
 425 #### Windows
 426 ```
 427 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 428 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 429 ```
 430 #### macOS
 431 ```
 432 <dict>
 433   <key>Certificates</key>
 434   <dict>
 435     <key>Install</key>
 436     <array>
 437       <string>cert1.der</string>
 438       <string>/Users/username/cert2.pem</string>
 439     </array>
 440   </dict>
 441 </dict>
 442 ```
 443 #### JSON
 444 ```
 445 {
 446   "policies": {
 447     "Certificates": {
 448       "Install": ["cert1.der", "/home/username/cert2.pem"]
 449     }
 450   }
 451 }
 452 ```
 453 ### Cookies
 454 Configure cookie preferences.
 455
 456 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 457
 458 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 459
 460 `Default` determines whether cookies are accepted at all.
 461
 462 `AcceptThirdParty` determines how third-party cookies are handled.
 463
 464 `ExpireAtSessionEnd` determines when cookies expire.
 465
 466 `RejectTracker` only rejects cookies for trackers.
 467
 468 `Locked` prevents the user from changing cookie preferences.
 469
 470 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 471 **CCK2 Equivalent:** N/A\
 472 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 473
 474 #### Windows
 475 ```
 476 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 478 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 479 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 480 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 481 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 482 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 483 ```
 484 #### macOS
 485 ```
 486 <dict>
 487   <key>Cookies</key>
 488   <dict>
 489     <key>Allow</key>
 490     <array>
 491       <string>http://example.com</string>
 492     </array>
 493     <key>Block</key>
 494     <array>
 495       <string>http://example.org</string>
 496     </array>
 497     <key>Default</key>
 498     <true/> | <false/>
 499     <key>AcceptThirdParty</key>
 500     <string>always | never | from-visited</string>
 501     <key>ExpireAtSessionEnd</key>
 502     <true/> | <false/>
 503     <key>RejectTracker</key>
 504     <true/> | <false/>
 505     <key>Locked</key>
 506     <true/> | <false/>
 507   </dict>
 508 </dict>
 509 ```
 510 #### JSON
 511 ```
 512 {
 513   "policies": {
 514     "Cookies": {
 515       "Allow": ["http://example.org/"],
 516       "Block": ["http://example.edu/"],
 517       "Default": true | false,
 518       "AcceptThirdParty": "always" | "never" | "from-visited"],
 519       "ExpireAtSessionEnd": true | false,
 520       "RejectTracker": true | false,
 521       "Locked": true | false
 522     }
 523   }
 524 }
 525 ```
 526 ### DisableSetDesktopBackground
 527 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 528
 529 **Compatibility:** Firefox 60, Firefox ESR 60\
 530 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 531 **Preferences Affected:** N/A
 532
 533 #### Windows
 534 ```
 535 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 536 ```
 537
 538 #### macOS
 539 ```
 540 <dict>
 541   <key>DisableSetDesktopBackground</key>
 542   <true/> | <false/>
 543 </dict>
 544 ```
 545 #### JSON
 546 ```
 547 {
 548   "policies": {
 549     "DisableSetDesktopBackground": true | false
 550   }
 551 }
 552 ```
 553 ### DisableMasterPasswordCreation
 554 Remove the master password functionality.
 555
 556 **Compatibility:** Firefox 60, Firefox ESR 60\
 557 **CCK2 Equivalent:** `noMasterPassword`\
 558 **Preferences Affected:** N/A
 559
 560 #### Windows
 561 ```
 562 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 563 ```
 564
 565 #### macOS
 566 ```
 567 <dict>
 568   <key>DisableMasterPasswordCreation</key>
 569   <true/> | <false/>
 570 </dict>
 571 ```
 572 #### JSON
 573 ```
 574 {
 575   "policies": {
 576     "DisableMasterPasswordCreation": true | false
 577   }
 578 }
 579 ```
 580 ### DisableAppUpdate
 581 Turn off application updates.
 582
 583 **Compatibility:** Firefox 60, Firefox ESR 60\
 584 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 585 **Preferences Affected:** N/A
 586
 587 #### Windows
 588 ```
 589 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 590 ```
 591 #### macOS
 592 ```
 593 <dict>
 594   <key>DisableAppUpdate</key>
 595   <true/> | <false/>
 596 </dict>
 597 ```
 598 #### JSON
 599 ```
 600 {
 601   "policies": {
 602     "DisableAppUpdate": true | false
 603   }
 604 }
 605 ```
 606 ### DisableBuiltinPDFViewer
 607 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 608
 609 **Compatibility:** Firefox 60, Firefox ESR 60\
 610 **CCK2 Equivalent:** `disablePDFjs`\
 611 **Preferences Affected:** `pdfjs.disabled`
 612
 613 #### Windows
 614 ```
 615 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 616 ```
 617
 618 #### macOS
 619 ```
 620 <dict>
 621   <key>DisableBuiltinPDFViewer</key>
 622   <true/> | <false/>
 623 </dict>
 624 ```
 625 #### JSON
 626 ```
 627 {
 628   "policies": {
 629     "DisableBuiltinPDFViewer": true | false
 630   }
 631 }
 632 ```
 633 ### DisableDeveloperTools
 634 Remove access to all developer tools.
 635
 636 **Compatibility:** Firefox 60, Firefox ESR 60\
 637 **CCK2 Equivalent:** `removeDeveloperTools`\
 638 **Preferences Affected:** `devtools.policy.disabled`
 639
 640 #### Windows
 641 ```
 642 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 643 ```
 644
 645 #### macOS
 646 ```
 647 <dict>
 648   <key>DisableDeveloperTools</key>
 649   <true/> | <false/>
 650 </dict>
 651 ```
 652 #### JSON
 653 ```
 654 {
 655   "policies": {
 656     "DisableDeveloperTools": true | false
 657   }
 658 }
 659 ```
 660 ### DisableFeedbackCommands
 661 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 662
 663 **Compatibility:** Firefox 60, Firefox ESR 60\
 664 **CCK2 Equivalent:** N/A\
 665 **Preferences Affected:** N/A
 666
 667 #### Windows
 668 ```
 669 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 670 ```
 671 #### macOS
 672 ```
 673 <dict>
 674   <key>DisableFeedbackCommands</key>
 675   <true/> | <false/>
 676 </dict>
 677 ```
 678 #### JSON
 679 ```
 680 {
 681   "policies": {
 682     "DisableFeedbackCommands": true | false
 683   }
 684 }
 685 ```
 686 ### DisableFirefoxScreenshots
 687 Remove access to Firefox Screenshots.
 688
 689 **Compatibility:** Firefox 60, Firefox ESR 60\
 690 **CCK2 Equivalent:** N/A\
 691 **Preferences Affected:** `extensions.screenshots.disabled`
 692
 693 #### Windows
 694 ```
 695 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 696 ```
 697 #### macOS
 698 ```
 699 <dict>
 700   <key>DisableFirefoxScreenshots</key>
 701   <true/> | <false/>
 702 </dict>
 703 ```
 704 #### JSON
 705 ```
 706 {
 707   "policies": {
 708     "DisableFirefoxScreenshots": true | false
 709   }
 710 }
 711 ```
 712 ### DisableFirefoxAccounts
 713 Disable Firefox Accounts integration (Sync).
 714
 715 **Compatibility:** Firefox 60, Firefox ESR 60\
 716 **CCK2 Equivalent:** `disableSync`\
 717 **Preferences Affected:** `identity.fxaccounts.enabled`
 718
 719 #### Windows
 720 ```
 721 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 722 ```
 723 #### macOS
 724 ```
 725 <dict>
 726   <key>DisableFirefoxAccounts</key>
 727   <true/> | <false/>
 728 </dict>
 729 ```
 730 #### JSON
 731 ```
 732 {
 733   "policies": {
 734     "DisableFirefoxAccounts": true | false
 735   }
 736 }
 737 ```
 738 ### DisableFirefoxStudies
 739 Disable Firefox studies (Shield).
 740
 741 **Compatibility:** Firefox 60, Firefox ESR 60\
 742 **CCK2 Equivalent:** `disableForget`\
 743 **Preferences Affected:** N/A
 744
 745 #### Windows
 746 ```
 747 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 748 ```
 749 #### macOS
 750 ```
 751 <dict>
 752   <key>DisableFirefoxStudies</key>
 753   <true/> | <false/>
 754 </dict>
 755 ```
 756 #### JSON
 757 ```
 758 {
 759   "policies": {
 760     "DisableFirefoxStudies": true | false
 761   }
 762 }
 763 ```
 764 ### DisableForgetButton
 765 Disable the "Forget" button.
 766
 767 **Compatibility:** Firefox 60, Firefox ESR 60\
 768 **CCK2 Equivalent:** `disableForget`\
 769 **Preferences Affected:** N/A
 770
 771 #### Windows
 772 ```
 773 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 774 ```
 775 #### macOS
 776 ```
 777 <dict>
 778   <key>DisableForgetButton</key>
 779   <true/> | <false/>
 780 </dict>
 781 ```
 782 #### JSON
 783 ```
 784 {
 785   "policies": {
 786     "DisableForgetButton": true | false
 787   }
 788 }
 789 ```
 790 ### DisableFormHistory
 791 Turn off saving information on web forms and the search bar.
 792
 793 **Compatibility:** Firefox 60, Firefox ESR 60\
 794 **CCK2 Equivalent:** `disableFormFill`\
 795 **Preferences Affected:** ` browser.formfill.enable`
 796
 797 #### Windows
 798 ```
 799 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 800 ```
 801 #### macOS
 802 ```
 803 <dict>
 804   <key>DisableFormHistory</key>
 805   <true/> | <false/>
 806 </dict>
 807 ```
 808 #### JSON
 809 ```
 810 {
 811   "policies": {
 812     "DisableFormHistory": true | false
 813   }
 814 }
 815 ```
 816 ### DisablePocket
 817 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 818
 819 **Compatibility:** Firefox 60, Firefox ESR 60\
 820 **CCK2 Equivalent:** `disablePocket`\
 821 **Preferences Affected:** `extensions.pocket.enabled`
 822
 823 #### Windows
 824 ```
 825 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 826 ```
 827 #### macOS
 828 ```
 829 <dict>
 830   <key>DisablePocket</key>
 831   <true/> | <false/>
 832 </dict>
 833 ```
 834 #### JSON
 835 ```
 836 {
 837   "policies": {
 838     "DisablePocket": true | false
 839   }
 840 }
 841 ```
 842 ### DisablePrivateBrowsing
 843 Remove access to private browsing.
 844
 845 **Compatibility:** Firefox 60, Firefox ESR 60\
 846 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 847 **Preferences Affected:** N/A
 848
 849 #### Windows
 850 ```
 851 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 852 ```
 853 #### macOS
 854 ```
 855 <dict>
 856   <key>DisablePrivateBrowsing</key>
 857   <true/> | <false/>
 858 </dict>
 859 ```
 860 #### JSON
 861 ```
 862 {
 863   "policies": {
 864     "DisablePrivateBrowsing": true | false
 865   }
 866 }
 867 ```
 868 ### DisableProfileImport
 869 Disables the "Import data from another browser" option in the bookmarks window.
 870
 871 **Compatibility:** Firefox 60, Firefox ESR 60\
 872 **CCK2 Equivalent:** N/A\
 873 **Preferences Affected:** N/A
 874
 875 #### Windows
 876 ```
 877 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 878 ```
 879 #### macOS
 880 ```
 881 <dict>
 882   <key>DisableProfileImport</key>
 883   <true/> | <false/>
 884 </dict>
 885 ```
 886 #### JSON
 887 ```
 888 {
 889   "policies": {
 890     "DisableProfileImport": true | false
 891   }
 892 }
 893 ```
 894 ### DisableProfileRefresh
 895 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 896
 897 **Compatibility:** Firefox 60, Firefox ESR 60\
 898 **CCK2 Equivalent:** `disableResetFirefox`\
 899 **Preferences Affected:** `browser.disableResetPrompt`
 900
 901 #### Windows
 902 ```
 903 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 904 ```
 905 #### macOS
 906 ```
 907 <dict>
 908   <key>DisableProfileRefresh</key>
 909   <true/> | <false/>
 910 </dict>
 911 ```
 912 #### JSON
 913 ```
 914 {
 915   "policies": {
 916     "DisableProfileRefresh": true | false
 917   }
 918 }
 919 ```
 920 ### DisableSafeMode
 921 Disable safe mode within the browser.
 922
 923 On Windows, this disables safe mode via the command line as well.
 924
 925 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 926 **CCK2 Equivalent:** `disableSafeMode`\
 927 **Preferences Affected:** N/A
 928
 929 #### Windows
 930 ```
 931 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 932 ```
 933 #### macOS
 934 ```
 935 <dict>
 936   <key>DisableSafeMode</key>
 937   <true/> | <false/>
 938 </dict>
 939 ```
 940 #### JSON
 941 ```
 942 {
 943   "policies": {
 944     "DisableSafeMode": true | false
 945   }
 946 }
 947 ```
 948 ### DisableSecurityBypass
 949 Prevent the user from bypassing security in certain cases.
 950
 951 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 952
 953 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 954
 955 **Compatibility:** Firefox 60, Firefox ESR 60\
 956 **CCK2 Equivalent:** N/A\
 957 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 958
 959 #### Windows
 960 ```
 961 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 962 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 963 ```
 964 #### macOS
 965 ```
 966 <dict>
 967   <key>DisableSecurityBypass</key>
 968   <dict>
 969     <key>InvalidCertificate</key>
 970     <true/> | <false/>
 971     <key><SafeBrowsing/key>
 972     <true/> | <false/>
 973   </dict>
 974 </dict>
 975 ```
 976 #### JSON
 977 ```
 978 {
 979   "policies": {
 980     "DisableSecurityBypass": {
 981       "InvalidCertificate": true false,
 982       "SafeBrowsing": true false
 983     }
 984   }
 985 }
 986 ```
 987 ### DisableSystemAddonUpdate
 988 Prevent system add-ons from being installed or update.
 989
 990 **Compatibility:** Firefox 60, Firefox ESR 60\
 991 **CCK2 Equivalent:** N/A\
 992 **Preferences Affected:** N/A
 993
 994 #### Windows
 995 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 996 ```
 997 #### macOS
 998 ```
 999 <dict>
1000   <key>DisableSystemAddonUpdate</key>
1001   <true/> | <false/>
1002 </dict>
1003 ```
1004 #### JSON
1005 ```
1006 {
1007   "policies": {
1008     "DisableSystemAddonUpdate": true | false
1009   }
1010 }
1011 ```
1012 ### DisableTelemetry
1013 Prevent the upload of telemetry data.
1014
1015 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1016
1017 **Compatibility:** Firefox 60, Firefox ESR 60\
1018 **CCK2 Equivalent:** `disableTelemetry`\
1019 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1020
1021 #### Windows
1022 ```
1023 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1024 ```
1025 #### macOS
1026 ```
1027 <dict>
1028   <key>DisableTelemetry</key>
1029   <true/> | <false/>
1030 </dict>
1031 ```
1032 #### JSON
1033 ```
1034 {
1035   "policies": {
1036     "DisableTelemetry": true | false
1037   }
1038 }
1039 ```
1040 ### DisplayBookmarksToolbar
1041 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1042
1043 **Compatibility:** Firefox 60, Firefox ESR 60\
1044 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1045 **Preferences Affected:** N/A
1046
1047 #### Windows
1048 ```
1049 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1050 ```
1051 #### macOS
1052 ```
1053 <dict>
1054   <key>DisplayBookmarksToolbar</key>
1055   <true/> | <false/>
1056 </dict>
1057 ```
1058 #### JSON
1059 ```
1060 {
1061   "policies": {
1062     "DisplayBookmarksToolbar": true | false
1063   }
1064 }
1065 ```
1066 ### DisplayMenuBar
1067 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1068
1069 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1070 **CCK2 Equivalent:** `displayMenuBar`\
1071 **Preferences Affected:** N/A
1072
1073 #### Windows
1074 ```
1075 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1076 ```
1077 #### macOS
1078 ```
1079 <dict>
1080   <key>DisplayMenuBar</key>
1081   <true/> | <false/>
1082 </dict>
1083 ```
1084 #### JSON
1085 ```
1086 {
1087   "policies": {
1088     "DisplayMenuBar": true | false
1089   }
1090 }
1091 ```
1092 ### DNSOverHTTPS
1093 Configure DNS over HTTPS.
1094
1095 `Enabled` determines whether DNS over HTTPS is enabled
1096
1097 `ProviderURL` is a URL to another provider.
1098
1099 `Locked` prevents the user from changing DNS over HTTPS preferences.
1100
1101 **Compatibility:** Firefox 63, Firefox ESR 68\
1102 **CCK2 Equivalent:** N/A\
1103 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1104
1105 #### Windows
1106 ```
1107 Software\Policies\Mozilla\Firefox\Cookies\Enabled = 0x1 | 0x0
1108 Software\Policies\Mozilla\Firefox\Cookies\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1109 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1110 ```
1111 #### macOS
1112 ```
1113 <dict>
1114   <key>Cookies</key>
1115   <dict>
1116     <key>Enabled</key>
1117     <true/> | <false/>
1118     <key>ProviderURL</key>
1119     <string>URL_TO_ALTERNATE_PROVIDER</string>
1120     <key>Locked</key>
1121     <true/> | <false/>
1122   </dict>
1123 </dict>
1124 ```
1125 #### JSON
1126 ```
1127 {
1128   "policies": {
1129     "DNSOverHTTPS": {
1130       "Enabled":  true | false,
1131       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1132       "Locked": true | false
1133     }
1134   }
1135 }
1136 ```
1137 ### DontCheckDefaultBrowser
1138 Don't check if Firefox is the default browser at startup.
1139
1140 **Compatibility:** Firefox 60, Firefox ESR 60\
1141 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1142 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1143
1144 #### Windows
1145 ```
1146 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1147 ```
1148 #### macOS
1149 ```
1150 <dict>
1151   <key>DontCheckDefaultBrowser</key>
1152   <true/> | <false/>
1153 </dict>
1154 ```
1155 #### JSON
1156 ```
1157 {
1158   "policies": {
1159     "DontCheckDefaultBrowser": true | false
1160   }
1161 }
1162 ```
1163 ### DefaultDownloadDirectory
1164 Set the default download directory.
1165
1166 You can use ${home} for the native home directory.
1167
1168 **Compatibility:** Firefox 68, Firefox ESR 68\
1169 **CCK2 Equivalent:** N/A\
1170 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1171
1172 #### Windows
1173 ```
1174 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1175 ```
1176 #### macOS
1177 ```
1178 <dict>
1179   <key>DefaultDownloadDirectory</key>
1180   <string>${home}/Downloads</string>
1181 </dict>
1182 ```
1183 #### JSON
1184 ```
1185 {
1186   "policies": {
1187     "DefaultDownloadDirectory": "${home}/Downloads"
1188 }
1189 ```
1190 ### DownloadDirectory
1191 Set and lock the download directory.
1192
1193 You can use ${home} for the native home directory.
1194
1195 **Compatibility:** Firefox 68, Firefox ESR 68\
1196 **CCK2 Equivalent:** N/A\
1197 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1198
1199 #### Windows
1200 ```
1201 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1202 ```
1203 #### macOS
1204 ```
1205 <dict>
1206   <key>DownloadDirectory</key>
1207   <string>${home}/Downloads</string>
1208 </dict>
1209 ```
1210 #### JSON
1211 ```
1212 {
1213   "policies": {
1214     "DownloadDirectory": "${home}/Downloads"
1215 }
1216 ```
1217 ### EnableTrackingProtection
1218 Configure tracking protection.
1219
1220 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1221
1222 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1223
1224 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1225
1226 **Compatibility:** Firefox 60, Firefox ESR 60\
1227 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1228 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1229
1230 #### Windows
1231 ```
1232 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1233 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1234 ```
1235 #### macOS
1236 ```
1237 <dict>
1238   <key>EnableTrackingProtection</key>
1239   <dict>
1240     <key>Value</key>
1241     <true/> | <false/>
1242
1243     <key><Locked/key>
1244     <true/> | <false/>
1245   </dict>
1246 </dict>
1247 ```
1248 #### JSON
1249 ```
1250 {
1251   "policies": {
1252     "EnableTrackingProtection": {
1253       "Value": [true, false],
1254       "Locked": [true, false]
1255     }
1256 }
1257 ```
1258 ### EnterprisePoliciesEnabled
1259 Enable policy support on macOS.
1260
1261 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1262 **CCK2 Equivalent:** N/A\
1263 **Preferences Affected:** N/A
1264
1265 #### macOS
1266 ```
1267 <dict>
1268   <key>EnterprisePoliciesEnabled</key>
1269   <true/>
1270 </dict>
1271 ```
1272 ### Extensions
1273 Control the installation, uninstallation and locking of extensions.
1274
1275 `Install` is a list of URLs or native paths for extensions to be installed.
1276
1277 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1278
1279 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1280
1281 **Compatibility:** Firefox 60, Firefox ESR 60\
1282 **CCK2 Equivalent:** `addons`\
1283 **Preferences Affected:** N/A
1284
1285 #### Windows
1286 ```
1287 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1288 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1289 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1290 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1291 ```
1292 #### macOS
1293 ```
1294 <dict>
1295   <key>Extensions</key>
1296   <dict>
1297     <key>Install</key>
1298     <array>
1299       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1300       <string>//path/to/xpi</string>
1301     </array>
1302     <key>Uninstall</key>
1303     <array>
1304       <string>bad_addon_id@mozilla.org</string>
1305     </array>
1306     <key>Locked</key>
1307     <array>
1308       <string>addon_id@mozilla.org</string>
1309     </array>
1310   </dict>
1311 </dict>
1312 ```
1313 #### JSON
1314
1315
1316 ```
1317 {
1318   "policies": {
1319     "Extensions": {
1320       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1321       "Uninstall": ["bad_addon_id@mozilla.org"],
1322       "Locked":  ["addon_id@mozilla.org"]
1323     }
1324   }
1325 }
1326 ```
1327 ### ExtensionSettings
1328 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1329
1330 This policy maps an extension ID to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1331
1332 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1333
1334 The configuration for each extension is another dictionary that can contain the fields documented below.
1335
1336 | Name | Description |
1337 | --- | --- |
1338 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1339 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1340 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1341 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1342 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1343 | `install_url`| Maps to a string indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi
1344 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1345 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1346 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1347
1348 **Compatibility:** Firefox 68, Firefox ESR 68, Firefox 68.0.1 (Windows)\
1349 **CCK2 Equivalent:** N/A\
1350 **Preferences Affected:** N/A
1351
1352 #### Windows
1353 Currently, you have to remove all newlines from your JSON. We will be removing that limitation in a future release.
1354
1355 Software\Policies\Mozilla\Firefox\ExtensionSettings = '{"*": {"installation_mode": "blocked"}}`
1356 #### macOS
1357 ```
1358 <dict>
1359   <key>ExtensionSettings</key>
1360   <dict>
1361     <key>*</key>
1362     <dict>
1363       <key>blocked_install_message</key>
1364       <string>Custom error message.</string>
1365       <key>install_sources</key>
1366       <array>
1367         <string>https://addons.mozilla.org/</string>
1368       </array>
1369       <key>installation_mode</key>
1370       <string>blocked</string>
1371     </dict>
1372     <key>uBlock0@raymondhill.net</key>
1373     <dict>
1374       <key>installation_mode</key>
1375        <string>force_installed</string>
1376       <key>install_url</key>
1377       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1378     </dict>
1379   </dict>
1380 </dict>
1381 ```
1382 #### JSON
1383 ```
1384 {
1385   "policies": {
1386     "ExtensionSettings": {
1387       "*": {
1388         "blocked_install_message": "Custom error message.",
1389         "install_sources": ["https://addons.mozilla.org/"],
1390         "installation_mode": "blocked"
1391       },
1392       "uBlock0@raymondhill.net": {
1393         "installation_mode": "force_installed",
1394         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1395       }
1396     }
1397   }
1398 }
1399 ```
1400
1401 ### ExtensionUpdate
1402 Control extension updates.
1403
1404 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1405 **CCK2 Equivalent:** N/A\
1406 **Preferences Affected:** `extensions.update.enabled`
1407
1408 #### Windows
1409 ```
1410 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1411 ```
1412 #### macOS
1413 ```
1414 <dict>
1415   <key>ExtensionUpdate</key>
1416   <true/> | <false/>
1417 </dict>
1418 ```
1419 #### JSON
1420 ```
1421 {
1422   "policies": {
1423     "ExtensionUpdate": true | false
1424   }
1425 }
1426 ```
1427 ### FlashPlugin
1428 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1429
1430 `Allow` is a list of origins where Flash are allowed.
1431
1432 `Block` is a list of origins where Flash is not allowed.
1433
1434 `Default` determines whether or not Flash is allowed by default.
1435
1436 `Locked` prevents the user from changing Flash preferences.
1437
1438 **Compatibility:** Firefox 60, Firefox ESR 60\
1439 **CCK2 Equivalent:** `permissions.plugin`\
1440 **Preferences Affected:** `plugin.state.flash`
1441
1442 #### Windows
1443 ```
1444 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1445 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1446 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1447 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1448 ```
1449 #### macOS
1450 ```
1451 <dict>
1452   <key>FlashPlugin</key>
1453   <dict>
1454     <key>Allow</key>
1455     <array>
1456       <string>http://example.org</string>
1457     </array>
1458     <key>Block</key>
1459     <array>
1460       <string>http://example.edu</string>
1461     </array>
1462     <key>Default</key>
1463     <true/> | <false/>
1464     <key>Locked</key>
1465     <true/> | <false/>
1466   </dict>
1467 </dict>
1468 ```
1469 #### JSON
1470 ```
1471 {
1472   "policies": {
1473     "FlashPlugin": {
1474       "Allow": ["http://example.org/"],
1475       "Block": ["http://example.edu/"],
1476       "Default": true | false,
1477       "Locked": true | false
1478     }
1479   }
1480 }
1481 ```
1482 ### FirefoxHome
1483 Customize the Firefox Home page.
1484
1485 **Compatibility:** Firefox 68, Firefox ESR 68\
1486 **CCK2 Equivalent:** N/A\
1487 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1488
1489 #### Windows
1490 ```
1491 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1492 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1493 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1494 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1495 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1496 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1497 ```
1498 #### macOS
1499 ```
1500 <dict>
1501   <key>FirefoxHome</key>
1502   <dict>
1503     <key>Search</key>
1504     <true/> | <false/>
1505     <key>TopSites</key>
1506     <true/> | <false/>
1507     <key>Highlights</key>
1508     <true/> | <false/>
1509     <key>Pocket</key>
1510     <true/> | <false/>
1511     <key>Snippets</key>
1512     <true/> | <false/>
1513     <key>Locked</key>
1514     <true/> | <false/>
1515   </dict>
1516 </dict>
1517 ```
1518 #### JSON
1519 ```
1520 {
1521   "policies": {
1522     "FirefoxHome": {
1523       "Search": true | false,
1524       "TopSites": true | false,
1525       "Highlights": true | false,
1526       "Pocket": true | false,
1527       "Snippets": true | false,
1528       "Locked": true | false
1529     }
1530   }
1531 }
1532 ```
1533 ### HardwareAcceleration
1534 Control hardware acceleration.
1535
1536 **Compatibility:** Firefox 60, Firefox ESR 60\
1537 **CCK2 Equivalent:** N/A\
1538 **Preferences Affected:** `layers.acceleration.disabled`
1539
1540 #### Windows
1541 ```
1542 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1543 ```
1544 #### macOS
1545 ```
1546 <dict>
1547   <key>HardwareAcceleration</key>
1548   <true/> | <false/>
1549 </dict>
1550 ```
1551 #### JSON
1552 ```
1553 {
1554   "policies": {
1555     "HardwareAcceleration": true | false
1556   }
1557 }
1558 ```
1559 ### Homepage
1560 Configure the default homepage and how Firefox starts.
1561
1562 `URL` is the default homepage.
1563
1564 `Locked` prevents the user from changing homepage preferences.
1565
1566 `Additional` allows for more than one homepage.
1567
1568 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1569
1570 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1571 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1572 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1573
1574 #### Windows
1575 ```
1576 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1577 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1578 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1579 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1580 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1581 ```
1582 #### macOS
1583 ```
1584 <dict>
1585   <key>Homepage</key>
1586   <dict>
1587     <key>URL</key>
1588     <string>http://example.com</string>
1589     <key>Locked</key>
1590     <true/> | <false/>
1591     <key>Additional</key>
1592     <array>
1593       <string>http://example.org</string>
1594       <string>http://example.edu</string>
1595     </array>
1596     <key>StartPage</key>
1597     <string>always | never | from-visited</string>
1598   </dict>
1599 </dict>
1600 ```
1601 #### JSON
1602 ```
1603 {
1604   "policies": {
1605     "Homepage": {
1606       "URL": "http://example.com/",
1607       "Locked": true | false,
1608       "Additional": ["http://example.org/",
1609                      "http://example.edu/"],
1610       "StartPage": "none" | "homepage" |  "previous-session"
1611     }
1612   }
1613 }
1614 ```
1615 ### InstallAddonsPermission
1616 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1617
1618 `Allow` is a list of origins where extension installs are allowed.
1619
1620 `Default` determines whether or not extension installs are allowed by default.
1621
1622 **Compatibility:** Firefox 60, Firefox ESR 60\
1623 **CCK2 Equivalent:** `permissions.install`\
1624 **Preferences Affected:** `xpinstall.enabled`
1625
1626 #### Windows
1627 ```
1628 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1629 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1630 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>InstallAddonsPermission</key>
1636   <dict>
1637     <key>Allow</key>
1638     <array>
1639       <string>http://example.org</string>
1640       <string>http://example.edu</string>
1641     </array>
1642     <key>Default</key>
1643     <true/> | <false/>
1644   </dict>
1645 </dict>
1646 ```
1647 #### JSON
1648 ```
1649 {
1650   "policies": {
1651     "InstallAddonsPermission": {
1652       "Allow": ["http://example.org/",
1653                 "http://example.edu/"],
1654       "Default": true | false
1655     }
1656   }
1657 }
1658 ```
1659 ### LocalFileLinks
1660 Enable linking to local files by origin.
1661
1662 **Compatibility:** Firefox 68, Firefox ESR 68\
1663 **CCK2 Equivalent:** N/A\
1664 **Preferences Affected:** `capability.policy.localfilelinks.*`
1665
1666 #### Windows
1667 ```
1668 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1669 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>LocalFileLinks</key>
1675   <array>
1676     <string>http://example.org</string>
1677     <string>http://example.edu</string>
1678   </array>
1679 </dict>
1680 ```
1681 #### JSON
1682 ```
1683 {
1684   "policies": {
1685     "LocalFileLinks": ["http://example.org/",
1686                        "http://example.edu/"]
1687   }
1688 }
1689 ```
1690 ### NoDefaultBookmarks
1691 Disable the creation of default bookmarks.
1692
1693 This policy is only effective if the user profile has not been created yet.
1694
1695 **Compatibility:** Firefox 60, Firefox ESR 60\
1696 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1697 **Preferences Affected:** N/A
1698
1699 #### Windows
1700 ```
1701 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1702 ```
1703 #### macOS
1704 ```
1705 <dict>
1706   <key>NoDefaultBookmarks</key>
1707   <true/> | <false/>
1708 </dict>
1709 ```
1710 #### JSON
1711 ```
1712 {
1713   "policies": {
1714     "NoDefaultBookmarks": true | false
1715   }
1716 }
1717 ```
1718 ### NetworkPrediction
1719 Enable or disable network prediction (DNS prefetching).
1720
1721 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1722 **CCK2 Equivalent:** N/A\
1723 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1724
1725 #### Windows
1726 ```
1727 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1728 ```
1729 #### macOS
1730 ```
1731 <dict>
1732   <key>NetworkPrediction</key>
1733   <true/> | <false/>
1734 </dict>
1735 ```
1736 #### JSON
1737 ```
1738 {
1739   "policies": {
1740     "NetworkPrediction": true | false
1741 }
1742 ```
1743 ### NewTabPage
1744 Enable or disable the New Tab page.
1745
1746 **Compatibility:** Firefox 68, Firefox ESR 68\
1747 **CCK2 Equivalent:** N/A\
1748 **Preferences Affected:** `browser.newtabpage.enabled`
1749
1750 #### Windows
1751 ```
1752 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1753 ```
1754 #### macOS
1755 ```
1756 <dict>
1757   <key>NewTabPage</key>
1758   <true/> | <false/>
1759 </dict>
1760 ```
1761 #### JSON
1762 ```
1763 {
1764   "policies": {
1765     "NewTabPage": true | false
1766 }
1767 ```
1768 ### OfferToSaveLogins
1769 Control whether or not Firefox offers to save passwords.
1770
1771 **Compatibility:** Firefox 60, Firefox ESR 60\
1772 **CCK2 Equivalent:** `dontRememberPasswords`\
1773 **Preferences Affected:** `signon.rememberSignons`
1774
1775 #### Windows
1776 ```
1777 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1778 ```
1779 #### macOS
1780 ```
1781 <dict>
1782   <key>OfferToSaveLogins</key>
1783   <true/> | <false/>
1784 </dict>
1785 ```
1786 #### JSON
1787 ```
1788 {
1789   "policies": {
1790     "OfferToSaveLogins": true | false
1791   }
1792 }
1793 ```
1794 ### OverrideFirstRunPage
1795 Override the first run page. If the value is blank, no first run page is displayed.
1796
1797 **Compatibility:** Firefox 60, Firefox ESR 60\
1798 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1799 **Preferences Affected:** `startup.homepage_welcome_url`
1800
1801 #### Windows
1802 ```
1803 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1804 ```
1805 #### macOS
1806 ```
1807 <dict>
1808   <key>OverrideFirstRunPage</key>
1809   <string>http://example.org</string>
1810 </dict>
1811 ```
1812 #### JSON
1813 ```
1814 {
1815   "policies": {
1816     "OverrideFirstRunPage": "http://example.org"
1817 }
1818 ```
1819 ### OverridePostUpdatePage
1820 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1821
1822 **Compatibility:** Firefox 60, Firefox ESR 60\
1823 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1824 **Preferences Affected:** `startup.homepage_override_url`
1825
1826 #### Windows
1827 ```
1828 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1829 ```
1830 #### macOS
1831 ```
1832 <dict>
1833   <key>OverridePostUpdatePage</key>
1834   <string>http://example.org</string>
1835 </dict>
1836 ```
1837 #### JSON
1838 ```
1839 {
1840   "policies": {
1841     "OverridePostUpdatePage": "http://example.org"
1842 }
1843 ```
1844 ### Permissions
1845 Set permissions associated with camera, microphone, location, and notifications
1846
1847 `Allow` is a list of origins where the feature is allowed.
1848
1849 `Block` is a list of origins where the feature is not allowed.
1850
1851 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1852
1853 `Locked` prevents the user from changing preferences for the feature.
1854
1855 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1856 **CCK2 Equivalent:** N/A\
1857 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1858
1859 #### Windows
1860 ```
1861 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1862 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1863 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1864 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1865 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1866 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1867 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1868 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1869 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1870 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1871 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1872 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1873 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1874 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1875 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1876 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1877 ```
1878 #### macOS
1879 ```
1880 <dict>
1881   <key>Permissions</key>
1882   <dict>
1883     <key>Camera</key>
1884     <dict>
1885       <key>Allow</key>
1886       <array>
1887         <string>https://example.org</string>
1888       </array>
1889       <key>Block</key>
1890       <array>
1891         <string>https://example.edu</string>
1892       </array>
1893       <key>BlockNewRequests</key>
1894       <true/>
1895       <key>Locked</key>
1896       <true/>
1897     </dict>
1898     <key>Microphone</key>
1899     <dict>
1900       <key>Allow</key>
1901       <array>
1902         <string>https://example.org</string>
1903       </array>
1904       <key>Block</key>
1905       <array>
1906         <string>https://example.edu</string>
1907       </array>
1908       <key>BlockNewRequests</key>
1909       <true/>
1910       <key>Locked</key>
1911       <true/>
1912     </dict>
1913     <key>Location</key>
1914     <dict>
1915       <key>Allow</key>
1916       <array>
1917         <string>https://example.org</string>
1918       </array>
1919       <key>Block</key>
1920       <array>
1921         <string>https://example.edu</string>
1922       </array>
1923       <key>BlockNewRequests</key>
1924       <true/>
1925       <key>Locked</key>
1926       <true/>
1927     </dict>
1928     <key>Notifications</key>
1929     <dict>
1930       <key>Allow</key>
1931       <array>
1932         <string>https://example.org</string>
1933       </array>
1934       <key>Block</key>
1935       <array>
1936         <string>https://example.edu</string>
1937       </array>
1938       <key>BlockNewRequests</key>
1939       <true/>
1940       <key>Locked</key>
1941       <true/>
1942     </dict>
1943   </dict>
1944 </dict>
1945 ```
1946 #### JSON
1947 ```
1948 {
1949   "policies": {
1950     "Permissions": {
1951       "Camera": {
1952         "Allow": ["https://example.org"],
1953         "Block": ["https://example.edu"],
1954         "BlockNewRequests": true | false,
1955         "Locked": true | false
1956       },
1957       "Microphone": {
1958         "Allow": ["https://example.org"],
1959         "Block": ["https://example.edu"],
1960         "BlockNewRequests": true | false,
1961         "Locked": true | false
1962       },
1963       "Location": {
1964         "Allow": ["https://example.org"],
1965         "Block": ["https://example.edu"],
1966         "BlockNewRequests": true | false,
1967         "Locked": true | false
1968       },
1969       "Notifications": {
1970         "Allow": ["https://example.org"],
1971         "Block": ["https://example.edu"],
1972         "BlockNewRequests": true | false,
1973         "Locked": true | false
1974       }
1975     }
1976   }
1977 }
1978 ```
1979 ### PopupBlocking
1980 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1981
1982 `Allow` is a list of origins where popup-windows are allowed.
1983
1984 `Default` determines whether or not pop-up windows are allowed by default.
1985
1986 `Locked` prevents the user from changing pop-up preferences.
1987
1988 **Compatibility:** Firefox 60, Firefox ESR 60\
1989 **CCK2 Equivalent:** `permissions.popup`\
1990 **Preferences Affected:** `dom.disable_open_during_load`
1991
1992 #### Windows
1993 ```
1994 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
1995 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
1996 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
1997 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
1998 ```
1999 #### macOS
2000 ```
2001 <dict>
2002   <key>PopupBlocking</key>
2003   <dict>
2004     <key>Allow</key>
2005     <array>
2006       <string>http://example.org</string>
2007       <string>http://example.edu</string>
2008     </array>
2009     <key>Default</key>
2010     <true/> | <false/>
2011     <key>Locked</key>
2012     <true/> | <false/>
2013   </dict>
2014 </dict>
2015 ```
2016 #### JSON
2017 ```
2018 {
2019   "policies": {
2020     "PopupBlocking": {
2021       "Allow": ["http://example.org/",
2022                 "http://example.edu/"],
2023       "Default": true | false,
2024       "Locked": true | false
2025     }
2026   }
2027 }
2028 ```
2029 ### Preferences
2030 Set and lock certain preferences.
2031
2032 **Compatibility:** See below\
2033 **CCK2 Equivalent:** `preferences`\
2034 **Preferences Affected:** See below
2035
2036 | Preference | Type | Compatibility
2037 | --- | --- | ---
2038 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR
2039 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR
2040 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR
2041 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR
2042 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR
2043 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR
2044 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR
2045 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR
2046 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR
2047 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR
2048 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR
2049 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR
2050 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR
2051 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR
2052 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR
2053 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR
2054 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR
2055 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR
2056 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR
2057 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR
2058 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR
2059 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR
2060 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR
2061 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR
2062 #### Windows
2063 ```
2064 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2065 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2066 ```
2067 #### macOS
2068 ```
2069 <dict>
2070   <key>Preferences</key>
2071   <dict>
2072     <key>boolean_preference_name</key>
2073     <true/> | <false/>
2074     <key>string_preference_name</key>
2075     <string>string_value</string>
2076   </dict>
2077 </dict>
2078 ```
2079 #### JSON
2080 ```
2081 {
2082   "policies": {
2083     "Preferences": {
2084       "boolean_preference_name": true | false,
2085       "string_preference_name": "string_value"
2086     }
2087   }
2088 }
2089 ```
2090 ### PromptForDownloadLocation
2091 Ask where to save each file before downloading.
2092
2093 **Compatibility:** Firefox 68, Firefox ESR 68\
2094 **CCK2 Equivalent:** N/A
2095 **Preferences Affected:** `browser.download.useDownloadDir`
2096
2097 #### Windows
2098 ```
2099 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2100 ```
2101 #### macOS
2102 ```
2103 <dict>
2104   <key>PromptForDownloadLocation</key>
2105   <true/> | <false/>
2106 </dict>
2107 ```
2108 #### JSON
2109 ```
2110 {
2111   "policies": {
2112     "PromptForDownloadLocation": true | false
2113   }
2114 }
2115 ```
2116 ### Proxy
2117 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2118 To specify ports, append them to the hostnames with a colon (:).
2119
2120 `Mode` is the proxy method being used.
2121
2122 `Locked` is whether or not proxy settings can be changed.
2123
2124 `HTTPProxy` is the HTTP proxy server.
2125
2126 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2127
2128 `SSLProxy` is the SSL proxy server.
2129
2130 `FTPProxy` is the FTP proxy server.
2131
2132 `SOCKSProxy` is the SOCKS proxy server
2133
2134 `SOCKSVersion` is the SOCKS version (4 or 5)
2135
2136 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2137
2138 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2139
2140 `AutoLogin` means do not prompt for authentication if password is saved.
2141
2142 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2143
2144 **Compatibility:** Firefoox 60, Firefox ESR 60\
2145 **CCK2 Equivalent:** `networkProxy*`\
2146 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2147
2148 #### Windows
2149 ```
2150 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2151 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2152 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2153 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2154 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2155 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2156 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2157 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2158 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2159 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2160 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2161 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2162 ```
2163 #### macOS
2164 ```
2165 <dict>
2166   <key>Proxy</key>
2167   <dict>
2168     <key>Mode</key>
2169     <string>none | system | manual | autoDetect| autoConfig</string>
2170     <key>Locked</key>
2171     <true> | </false>
2172     <key>HTTPProxy</key>
2173     <string>https://httpproxy.example.com</string>
2174     <key>UseHTTPProxyForAllProtocols</key>
2175     <true> | </false>
2176     <key>SSLProxy</key>
2177     <string>https://sslproxy.example.com</string>
2178     <key>FTPProxy</key>
2179     <string>https://ftpproxy.example.com</string>
2180     <key>SOCKSProxy</key>
2181     <string>https://socksproxy.example.com</string>
2182     <key>SOCKSVersion</key>
2183     <string>4 | 5</string>
2184     <key>Passthrough</key>
2185     <string>&lt;local>&gt;</string>
2186     <key>AutoConfigURL</key>
2187     <string>URL_TO_AUTOCONFIG</string>
2188     <key>AutoLogin</key>
2189     <true> | </false>
2190     <key>UseProxyForDNS</key>
2191     <true> | </false>
2192   </dict>
2193 </dict>
2194 ```
2195 ### JSON
2196 ```
2197 {
2198   "policies": {
2199     "Proxy": {
2200       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2201       "Locked": [true, false],
2202       "HTTPProxy": "hostname",
2203       "UseHTTPProxyForAllProtocols": [true, false],
2204       "SSLProxy": "hostname",
2205       "FTPProxy": "hostname",
2206       "SOCKSProxy": "hostname",
2207       "SOCKSVersion": 4 | 5
2208       "Passthrough": "<local>",
2209       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2210       "AutoLogin":  [true, false],
2211       "UseProxyForDNS": [true, false]
2212     }
2213   }
2214 }
2215 ```
2216 ### RequestedLocales
2217 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2218
2219 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2220
2221 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2222 **CCK2 Equivalent:** N/A\
2223 **Preferences Affected:** N/A
2224 #### Windows
2225 ```
2226 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2227 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2228
2229 or
2230
2231 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2232 ```
2233 #### macOS
2234 ```
2235 <dict>
2236   <key>RequestedLocales</key>
2237   <array>
2238     <string>de</string>
2239     <string>en-US</string>
2240   </array>
2241 </dict>
2242
2243 or
2244
2245 <dict>
2246   <key>RequestedLocales</key>
2247   <string>de,en-US</string>
2248 </dict>
2249
2250 ```
2251 #### JSON
2252 ```
2253 {
2254   "policies": {
2255     "RequestedLocales": ["de", "en-US"]
2256   }
2257 }
2258
2259 or
2260
2261 {
2262   "policies": {
2263     "RequestedLocales": "de,en-US"
2264   }
2265 }
2266 ```
2267 ### SanitizeOnShutdown (Selective)
2268 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2269
2270 **Compatibility:** Firefox 68, Firefox ESR 68\
2271 **CCK2 Equivalent:** N/A\
2272 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2273 #### Windows
2274 ```
2275 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2276 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2277 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2278 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2279 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2280 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2281 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2282 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2283 ```
2284 #### macOS
2285 ```
2286 <dict>
2287   <key>SanitizeOnShutdown</key>
2288   <dict>
2289     <key>Cache</key>
2290     <true/> | <false/>
2291     <key>Cookies</key>
2292     <true/> | <false/>
2293     <key>Downloads</key>
2294     <true/> | <false/>
2295     <key>FormData</key>
2296     <true/> | <false/>
2297     <key>History</key>
2298     <true/> | <false/>
2299     <key>Sessions</key>
2300     <true/> | <false/>
2301     <key>SiteSettings</key>
2302     <true/> | <false/>
2303     <key>OfflineApps</key>
2304     <true/> | <false/>
2305   </dict>
2306 </dict>
2307 ```
2308 #### JSON
2309 ```
2310 {
2311   "policies": {
2312     "SanitizeOnShutdown": {
2313       "Cache": true | false,
2314       "Cookies": true | false,
2315       "Downloads": true | false,
2316       "FormData": true | false,
2317       "History": true | false,
2318       "Sessions": true | false,
2319       "SiteSettings": true | false,
2320       "OfflineApps": true | false
2321     }
2322   }
2323 }
2324 ```
2325 ### SanitizeOnShutdown (All)
2326 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2327
2328 **Compatibility:** Firefox 60, Firefox ESR 60\
2329 **CCK2 Equivalent:** N/A\
2330 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2331 #### Windows
2332 ```
2333 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2334 ```
2335 #### macOS
2336 ```
2337 <dict>
2338   <key>SanitizeOnShutdown</key>
2339   <true/> | <false/>
2340 </dict>
2341 ```
2342 #### JSON
2343 ```
2344 {
2345   "policies": {
2346     "SanitizeOnShutdown": true | false
2347   }
2348 }
2349 ```
2350 ### SearchBar
2351 Set whether or not search bar is displayed.
2352
2353 **Compatibility:** Firefox 60, Firefox ESR 60\
2354 **CCK2 Equivalent:** `showSearchBar`\
2355 **Preferences Affected:** N/A
2356
2357 #### Windows
2358 ```
2359 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2360 ```
2361 #### macOS
2362 ```
2363 <dict>
2364   <key>SearchBar</key>
2365   <string>unified | separate</string>
2366 </dict>
2367 ```
2368
2369 #### JSON
2370 ```
2371 {
2372   "policies": {
2373     "SearchBar": "unified" | "separate"
2374   }
2375 }
2376 ```
2377
2378
2379
2380
2381
2382 ### SearchEngines (This policy is only available on the ESR.)
2383
2384 ### SearchEngines | Default
2385
2386 Set the default search engine. This policy is only available on the ESR.
2387
2388 **Compatibility:** Firefox ESR 60\
2389 **CCK2 Equivalent:** `defaultSearchEngine`\
2390 **Preferences Affected:** N/A
2391
2392 ### Windows
2393 ```
2394 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2395 ```
2396 #### macOS
2397 ```
2398 <dict>
2399   <key>SearchEngines</key>
2400   <dict>
2401     <key>Default</key>
2402     <string>NAME_OF_SEARCH_ENGINE</string>
2403   </dict>
2404 </dict>
2405 ```
2406 ### JSON
2407 ```
2408 {
2409   "policies": {
2410     "SearchEngines": {
2411       "Default": "NAME_OF_SEARCH_ENGINE"
2412     }
2413   }
2414 }
2415 ```
2416 ### SearchEngines | PreventInstalls
2417
2418 Prevent installing search engines from webpages.
2419
2420 **Compatibility:** Firefox ESR 60\
2421 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2422 **Preferences Affected:** N/A
2423
2424 ### Windows
2425 ```
2426 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2427 ```
2428 #### macOS
2429 ```
2430 <dict>
2431   <key>SearchEngines</key>
2432   <dict>
2433     <key>PreventInstalls</key>
2434     <true/> | <false/>
2435   </dict>
2436 </dict>
2437 ```
2438 ### JSON
2439 ```
2440 {
2441   "policies": {
2442     "SearchEngines": {
2443       "PreventInstalls": true | false
2444     }
2445   }
2446 }
2447 ```
2448 ### SearchEngines | Remove
2449
2450 Hide built-in search engines. This policy is only available on the ESR.
2451
2452 **Compatibility:** Firefox ESR 60.2\
2453 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2454 **Preferences Affected:** N/A
2455
2456 ### Windows
2457 ```
2458 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2459 ```
2460 #### macOS
2461 ```
2462 <dict>
2463   <key>SearchEngines</key>
2464   <dict>
2465     <key>Remove</key>
2466     <array>
2467       <string>NAME_OF_SEARCH_ENGINE</string>
2468     </array>
2469   </dict>
2470 </dict>
2471 ```
2472 ### JSON
2473 ```
2474 {
2475   "policies": {
2476     "SearchEngines": {
2477       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2478     }
2479   }
2480 }
2481 ```
2482 ### SearchEngines | Add
2483
2484 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2485
2486 `Name` is the name of the search engine.
2487
2488 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2489
2490 `Method` is either GET or POST
2491
2492 `IconURL` is a URL for the icon to use.
2493
2494 `Alias` is a keyword to use for the engine.
2495
2496 `Description` is a description of the search engine.
2497
2498 `PostData` is the POST data as name value pairs separated by &.
2499
2500 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2501
2502 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2503 **CCK2 Equivalent:** `searchplugins`\
2504 **Preferences Affected:** N/A
2505
2506 #### Windows
2507 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2508 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2509 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2510 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2511 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2512 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2513 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2514 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2515
2516 #### macOS
2517 ```
2518 <dict>
2519   <key>SearchEngines</key>
2520   <dict>
2521     <key>Add</key>
2522     <array>
2523       <dict>
2524         <key>Name</key>
2525         <string>Example1</string>
2526         <key>URLTemplate</key>
2527         <string>https://www.example.org/q={searchTerms}</string>
2528         <key>Method</key>
2529         <string>GET | POST </string>
2530         <key>IconURL</key>
2531         <string>https://www.example.org/favicon.ico</string>
2532         <key>Alias</key>
2533         <string>example</string>
2534         <key>Description</key>
2535         <string>Example Description</string>
2536         <key>SuggestURLTemplate</key>
2537         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2538         <key>PostData</key>
2539         <string>name=value&q={searchTerms}</string>
2540       </dict>
2541     <array>
2542   </dict>
2543 </dict>
2544 ```
2545 ### JSON
2546 ```
2547 {
2548   "policies": {
2549     "SearchEngines": {
2550       "Add": [
2551         {
2552           "Name": "Example1",
2553           "URLTemplate": "https://www.example.org/q={searchTerms}",
2554           "Method": "GET" | "POST",
2555           "IconURL": "https://www.example.org/favicon.ico",
2556           "Alias": "example",
2557           "Description": "Description",
2558           "PostData": "name=value&q={searchTerms}",
2559           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2560         }
2561       ]
2562     }
2563   }
2564 }
2565 ```
2566 ### SearchSuggestEnabled
2567
2568 Enable search suggestions.
2569
2570 **Compatibility:** Firefox 68, Firefox ESR 68\
2571 **CCK2 Equivalent:** N/A\
2572 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2573
2574 ### Windows
2575 ```
2576 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2577 ```
2578 #### macOS
2579 ```
2580 <dict>
2581   <key>SearchSuggestEnabled</key>
2582   <true/> | <false/>
2583 </dict>
2584 ```
2585 ### JSON
2586 ```
2587 {
2588   "policies": {
2589     "SearchSuggestEnabled": true | false
2590   }
2591 }
2592 ```
2593 ### SecurityDevices
2594
2595 Install PKCS #11 modules.
2596
2597 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2598 **CCK2 Equivalent:** `certs.devices`\
2599 **Preferences Affected:** N/A
2600
2601 #### Windows
2602 ```
2603 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2604 ```
2605 #### macOS
2606 ```
2607 <dict>
2608   <key>SecurityDevices</key>
2609   <dict>
2610     <key>NAME_OF_DEVICE</key>
2611     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2612   </dict>
2613 </dict>
2614 ```
2615
2616 #### JSON
2617 ```
2618 {
2619   "policies": {
2620     "SecurityDevices": {
2621       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2622     }
2623   }
2624 }
2625 ```
2626 ### SSLVersionMax
2627
2628 Set and lock the maximum version of TLS.
2629
2630 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** `security.tls.version.max`
2633
2634 #### Windows
2635 ```
2636 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2637 ```
2638 #### macOS
2639 ```
2640 <dict>
2641   <key>SSLVersionMax</key>
2642   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2643 </dict>
2644 ```
2645
2646 #### JSON
2647 ```
2648 {
2649   "policies": {
2650     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2651   }
2652 }
2653 ```
2654 ### SSLVersionMin
2655
2656 Set and lock the minimum version of TLS.
2657
2658 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2659 **CCK2 Equivalent:** N/A\
2660 **Preferences Affected:** `security.tls.version.min`
2661
2662 #### Windows
2663 ```
2664 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2665 ```
2666 #### macOS
2667 ```
2668 <dict>
2669   <key>SSLVersionMin</key>
2670   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2671 </dict>
2672 ```
2673
2674 #### JSON
2675 ```
2676 {
2677   "policies": {
2678     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2679   }
2680 }
2681 ```
2682 ### SupportMenu
2683 Add a menuitem to the help menu for specifying support information.
2684
2685 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
2686 **CCK2 Equivalent:** helpMenu\
2687 **Preferences Affected:** N/A
2688
2689 #### Windows
2690 ```
2691 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
2692 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
2693 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S"
2694 ```
2695 #### macOS
2696 ```
2697 <dict>
2698   <key>SupportMenu</key>
2699   <dict>
2700     <key>Title</key>
2701     <string>SupportMenu</string>
2702     <key>URL</key>
2703     <string>http://example.com/support</string>
2704     <key>AccessKey</key>
2705     <string>S</string>
2706   </dict>
2707 </dict>
2708 ```
2709 ### JSON
2710 ```
2711 {
2712   "policies": {
2713     "SupportMenu": {
2714       "Title": "Support Menu",
2715       "URL": "http://example.com/support",
2716       "AccessKey": "S"
2717     }
2718   }
2719 }
2720 ```
2721 ### WebsiteFilter
2722 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2723
2724 **Compatibility:** Firefox 60, Firefox ESR 60\
2725 **CCK2 Equivalent:** N/A\
2726 **Preferences Affected:** N/A
2727
2728 #### Windows
2729 ```
2730 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2731 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2732 ```
2733 #### macOS
2734 ```
2735 <dict>
2736   <key>WebsiteFilter</key>
2737   <dict>
2738     <key>Block</key>
2739     <array>
2740       <string><all_urls></string>
2741     </array>
2742     <key>Exceptions</key>
2743     <array>
2744       <string>http://example.org/*</string>
2745     </array>
2746   </dict>
2747
2748 </dict>
2749 ```
2750 ### JSON
2751 ```
2752 {
2753   "policies": {
2754     "WebsiteFilter": {
2755       "Block": ["<all_urls>"],
2756       "Exceptions": ["http://example.org/*"]
2757     }
2758   }
2759 }
2760 ```