README-new.md

   1 **IMPORTANT**: This file is in active development along with the policies in Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases.
   2
   3 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   4
   5 The content of the JSON file should look like this:
   6 ```
   7 {
   8   "policies": {
   9     ...POLICIES...
  10   }
  11 }
  12 ```
  13 Policies are documented below.
  14
  15 ### AppUpdateURL
  16
  17 Change the URL for application update.
  18
  19 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  20 **CCK2 Equivalent:** N/A\
  21 **Preferences Affected:** `app.update.url`
  22
  23 #### Windows
  24 ```
  25 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  26 ```
  27 #### macOS
  28 ```
  29 <dict>
  30   <key>AppUpdateURL</key>
  31   <string>https://yoursite.com</string>
  32 </dict>
  33 ```
  34 ### JSON
  35 ```
  36 {
  37   "policies": {
  38     "AppUpdateURL": "https://yoursite.com"
  39   }
  40 }
  41 ```
  42 ### Authentication
  43
  44 Configure sites that support integrated authentication.
  45
  46 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
  47
  48 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
  49 **CCK2 Equivalent:** N/A\
  50 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
  51
  52 #### Windows
  53 ```
  54 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
  55 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
  56 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
  57 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
  58 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
  59 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
  60 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
  61 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
  62 ```
  63 #### macOS
  64 ```
  65 <dict>
  66   <key>Authentication</key>
  67   <dict>
  68     <key>SPNEGO</key>
  69     <array>
  70       <string>mydomain.com</string>
  71       <string>https://myotherdomain.com</string>
  72     </array>
  73     <key>Delegated</key>
  74     <array>
  75       <string>mydomain.com</string>
  76       <string>https://myotherdomain.com</string>
  77     </array>
  78     <key>NTLM</key>
  79     <array>
  80       <string>mydomain.com</string>
  81       <string>https://myotherdomain.com</string>
  82     </array>
  83     <key>AllowNonFQDN</key>
  84       <dict>
  85       <key>SPNEGO</key>
  86       <true/> | <false/>
  87       <key>NTLM</key>
  88       <true/> | <false/>
  89     </dict>
  90   </dict>
  91 </dict>
  92 ```
  93 ### JSON
  94 ```
  95 {
  96   "policies": {
  97     "Authentication": {
  98       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
  99       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 100       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 101       "AllowNonFQDN": {
 102         "SPNEGO": true | false,
 103         "NTLM": true | false
 104       }
 105     }
 106   }
 107 }
 108 ```
 109 ### BlockAboutAddons
 110
 111 Block access to the Add-ons Manager (about:addons).
 112
 113 **Compatibility:** Firefox 60, Firefox ESR 60\
 114 **CCK2 Equivalent:** `disableAddonsManager`\
 115 **Preferences Affected:** N/A
 116
 117 #### Windows
 118 ```
 119 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 120 ```
 121 #### macOS
 122 ```
 123 <dict>
 124   <key>BlockAboutAddons</key>
 125   <true/> | <false/>
 126 </dict>
 127 ```
 128 #### JSON
 129 ```
 130 {
 131   "policies": {
 132     "BlockAboutAddons": true | false
 133   }
 134 }
 135 ```
 136 ### BlockAboutConfig
 137
 138 Block access to about:config.
 139
 140 **Compatibility:** Firefox 60, Firefox ESR 60\
 141 **CCK2 Equivalent:** `disableAboutConfig`\
 142 **Preferences Affected:** N/A
 143
 144 #### Windows
 145 ```
 146 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 147 ```
 148 #### macOS
 149 ```
 150 <dict>
 151   <key>BlockAboutConfig</key>
 152   <true/> | <false/>
 153 </dict>
 154 ```
 155 #### JSON
 156 ```
 157 {
 158   "policies": {
 159     "BlockAboutConfig": true | false
 160   }
 161 }
 162 ```
 163 ### BlockAboutProfiles
 164
 165 Block access to About Profiles (about:profiles).
 166
 167 **Compatibility:** Firefox 60, Firefox ESR 60\
 168 **CCK2 Equivalent:** `disableAboutProfiles`\
 169 **Preferences Affected:** N/A
 170
 171 #### Windows
 172 ```
 173 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 174 ```
 175 #### macOS
 176 ```
 177 <dict>
 178   <key>BlockAboutProfiles</key>
 179   <true/> | <false/>
 180 </dict>
 181 ```
 182 #### JSON
 183 ```
 184 {
 185   "policies": {
 186     "BlockAboutProfiles": true | false
 187   }
 188 }
 189 ```
 190 ### BlockAboutSupport
 191
 192 Block access to Troubleshooting Information (about:support).
 193
 194 **Compatibility:** Firefox 60, Firefox ESR 60\
 195 **CCK2 Equivalent:** `disableAboutSupport`\
 196 **Preferences Affected:** N/A
 197
 198 #### Windows
 199 ```
 200 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 201 ```
 202 #### macOS
 203 ```
 204 <dict>
 205   <key>BlockAboutSupport</key>
 206   <true/> | <false/>
 207 </dict>
 208 ```
 209 #### JSON
 210 ```
 211 {
 212   "policies": {
 213     "BlockAboutSupport": true | false
 214   }
 215 }
 216 ```
 217 ### Bookmarks
 218
 219 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 220
 221 **Compatibility:** Firefox 60, Firefox ESR 60\
 222 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 223 **Preferences Affected:** N/A
 224
 225 #### Windows
 226 ```
 227 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 228 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 229 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 230 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 231 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 232 ```
 233 #### macOS
 234 ```
 235 <dict>
 236   <key>Bookmarks</key>
 237   <array>
 238     <dict>
 239       <key>Title</key>
 240       <string>Example</string>
 241       <key>URL</key>
 242       <string>https://example.com</string>
 243       <key>Favicon</key>
 244       <string>https://example.com/favicon.ico</string>
 245       <key>Placement</key>
 246       <string>toolbar | menu</string>
 247       <key>Folder</key>
 248       <string>FolderName</string>
 249     </dict>
 250   </array>
 251 </dict>
 252 ```
 253 ### JSON
 254 ```
 255 {
 256   "policies": {
 257     "Bookmarks": [
 258       {
 259         "Title": "Example",
 260         "URL": "https://example.com",
 261         "Favicon": "https://example.com/favicon.ico",
 262         "Placement": "toolbar" | "menu",
 263         "Folder": "FolderName"
 264       }
 265     ]
 266   }
 267 }
 268 ```
 269 ### CaptivePortal
 270 Enable or disable the detection of captive portals.
 271
 272 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 273 **CCK2 Equivalent:** N/A\
 274 **Preferences Affected:** `network.captive-portal-service.enabled`
 275
 276 #### Windows
 277 ```
 278 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 279 ```
 280 #### macOS
 281 ```
 282 <dict>
 283   <key>CaptivePortal</key>
 284   <true/> | <false/>
 285 </dict>
 286 ```
 287 #### JSON
 288 ```
 289 {
 290   "policies": {
 291     "CaptivePortal": true | false
 292   }
 293 }
 294 ```
 295 ### Certificates
 296
 297 ### Certificates | ImportEnterpriseRoots
 298
 299 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 300
 301 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 302
 303 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 304 **CCK2 Equivalent:** N/A\
 305 **Preferences Affected:** `security.enterprise_roots.enabled`
 306
 307 #### Windows
 308 ```
 309 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 310 ```
 311 #### macOS
 312 ```
 313 <dict>
 314   <key>Certificates</key>
 315   <dict>
 316     <key>ImportEnterpriseRoots</key>
 317     <true/> | <false/>
 318   </dict>
 319 </dict>
 320 ```
 321 #### JSON
 322 ```
 323 {
 324   "policies": {
 325     "Certificates": {
 326       "ImportEnterpriseRoots": true | false
 327     }
 328   }
 329 }
 330 ```
 331 ### Certificates | Install
 332
 333 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 334
 335 - Windows
 336   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 337   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 338 - macOS
 339   - /Library/Application Support/Mozilla/Certificates
 340   - ~/Library/Application Support/Mozilla/Certificates
 341 - Linux
 342   - /usr/lib/mozilla/certificates
 343   - /usr/lib64/mozilla/certificates
 344   - ~/.mozilla/certificates
 345
 346 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 347
 348 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 349
 350 Certificates are installed using the trust string `CT,CT,`.
 351
 352 Binary (DER) and ASCII (PEM) certificates are both supported.
 353
 354 **Compatibility:** Firefox 64, Firefox ESR 64\
 355 **CCK2 Equivalent:** `certs.ca`\
 356 **Preferences Affected:** N/A
 357
 358 #### Windows
 359 ```
 360 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 361 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 362 ```
 363 #### macOS
 364 ```
 365 <dict>
 366   <key>Certificates</key>
 367   <dict>
 368     <key>Install</key>
 369     <array>
 370       <string>cert1.der</string>
 371       <string>/Users/username/cert2.pem</string>
 372     </array>
 373   </dict>
 374 </dict>
 375 ```
 376 #### JSON
 377 ```
 378 {
 379   "policies": {
 380     "Certificates": {
 381       "Install": ["cert1.der", "/home/username/cert2.pem"]
 382     }
 383   }
 384 }
 385 ```
 386 ### Cookies
 387 Configure cookie preferences.
 388
 389 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 390
 391 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 392
 393 `Default` determines whether cookies are accepted at all.
 394
 395 `AcceptThirdParty` determines how third-party cookies are handled.
 396
 397 `ExpireAtSessionEnd` determines when cookies expire.
 398
 399 `RejectTracker` only rejects cookies for trackers.
 400
 401 `Locked` prevents the user from changing cookie preferences.
 402
 403 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 404 **CCK2 Equivalent:** N/A\
 405 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 406
 407 #### Windows
 408 ```
 409 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 410 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 411 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 412 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 413 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 414 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 415 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 416 ```
 417 #### macOS
 418 ```
 419 <dict>
 420   <key>Cookies</key>
 421   <dict>
 422     <key>Allow</key>
 423     <array>
 424       <string>http://example.com</string>
 425     </array>
 426     <key>Block</key>
 427     <array>
 428       <string>http://example.org</string>
 429     </array>
 430     <key>Default</key>
 431     <true/> | <false/>
 432     <key>AcceptThirdParty</key>
 433     <string>always | never | from-visited</string>
 434     <key>ExpireAtSessionEnd</key>
 435     <true/> | <false/>
 436     <key>RejectTracker</key>
 437     <true/> | <false/>
 438     <key>Locked</key>
 439     <true/> | <false/>
 440   </dict>
 441 </dict>
 442 ```
 443 #### JSON
 444 ```
 445 {
 446   "policies": {
 447     "Cookies": {
 448       "Allow": ["http://example.org/"],
 449       "Block": ["http://example.edu/"],
 450       "Default": true | false,
 451       "AcceptThirdParty": "always" | "never" | "from-visited"],
 452       "ExpireAtSessionEnd": true | false,
 453       "RejectTracker": true | false,
 454       "Locked": true | false
 455     }
 456   }
 457 }
 458 ```
 459 ### DNSOverHTTPS
 460 Configure DNS over HTTPS.
 461
 462 `Enabled` determines whether DNS over HTTPS is enabled
 463
 464 `ProviderURL` is a URL to another provider.
 465
 466 `Locked` prevents the user from changing DNS over HTTPS preferences.
 467
 468 **Compatibility:** Firefox 63, Firefox ESR 68\
 469 **CCK2 Equivalent:** N/A\
 470 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
 471
 472 #### Windows
 473 ```
 474 Software\Policies\Mozilla\Firefox\Cookies\Enabled = 0x1 | 0x0
 475 Software\Policies\Mozilla\Firefox\Cookies\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
 476 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 477 ```
 478 #### macOS
 479 ```
 480 <dict>
 481   <key>Cookies</key>
 482   <dict>
 483     <key>Enabled</key>
 484     <true/> | <false/>
 485     <key>ProviderURL</key>
 486     <string>URL_TO_ALTERNATE_PROVIDER</string>
 487     <key>Locked</key>
 488     <true/> | <false/>
 489   </dict>
 490 </dict>
 491 ```
 492 #### JSON
 493 ```
 494 {
 495   "policies": {
 496     "DNSOverHTTPS": {
 497       "Enabled":  true | false,
 498       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
 499       "Locked": true | false
 500     }
 501   }
 502 }
 503 ```
 504 ### DisableSetDesktopBackground
 505 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 506
 507 **Compatibility:** Firefox 60, Firefox ESR 60\
 508 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 509 **Preferences Affected:** N/A
 510
 511 #### Windows
 512 ```
 513 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 514 ```
 515
 516 #### macOS
 517 ```
 518 <dict>
 519   <key>DisableSetDesktopBackground</key>
 520   <true/> | <false/>
 521 </dict>
 522 ```
 523 #### JSON
 524 ```
 525 {
 526   "policies": {
 527     "DisableSetDesktopBackground": true | false
 528   }
 529 }
 530 ```
 531 ### DisableMasterPasswordCreation
 532 Remove the master password functionality.
 533
 534 **Compatibility:** Firefox 60, Firefox ESR 60\
 535 **CCK2 Equivalent:** `noMasterPassword`\
 536 **Preferences Affected:** N/A
 537
 538 #### Windows
 539 ```
 540 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 541 ```
 542
 543 #### macOS
 544 ```
 545 <dict>
 546   <key>DisableMasterPasswordCreation</key>
 547   <true/> | <false/>
 548 </dict>
 549 ```
 550 #### JSON
 551 ```
 552 {
 553   "policies": {
 554     "DisableMasterPasswordCreation": true | false
 555   }
 556 }
 557 ```
 558 ### DisableAppUpdate
 559 Turn off application updates.
 560
 561 **Compatibility:** Firefox 60, Firefox ESR 60\
 562 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 563 **Preferences Affected:** N/A
 564
 565 #### Windows
 566 ```
 567 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 568 ```
 569 #### macOS
 570 ```
 571 <dict>
 572   <key>DisableAppUpdate</key>
 573   <true/> | <false/>
 574 </dict>
 575 ```
 576 #### JSON
 577 ```
 578 {
 579   "policies": {
 580     "DisableAppUpdate": true | false
 581   }
 582 }
 583 ```
 584 ### DisableBuiltinPDFViewer
 585 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 586
 587 **Compatibility:** Firefox 60, Firefox ESR 60\
 588 **CCK2 Equivalent:** `disablePDFjs`\
 589 **Preferences Affected:** `pdfjs.disabled`
 590
 591 #### Windows
 592 ```
 593 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 594 ```
 595
 596 #### macOS
 597 ```
 598 <dict>
 599   <key>DisableBuiltinPDFViewer</key>
 600   <true/> | <false/>
 601 </dict>
 602 ```
 603 #### JSON
 604 ```
 605 {
 606   "policies": {
 607     "DisableBuiltinPDFViewer": true | false
 608   }
 609 }
 610 ```
 611 ### DisableDeveloperTools
 612 Remove access to all developer tools.
 613
 614 **Compatibility:** Firefox 60, Firefox ESR 60\
 615 **CCK2 Equivalent:** `removeDeveloperTools`\
 616 **Preferences Affected:** `devtools.policy.disabled`
 617
 618 #### Windows
 619 ```
 620 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 621 ```
 622
 623 #### macOS
 624 ```
 625 <dict>
 626   <key>DisableDeveloperTools</key>
 627   <true/> | <false/>
 628 </dict>
 629 ```
 630 #### JSON
 631 ```
 632 {
 633   "policies": {
 634     "DisableDeveloperTools": true | false
 635   }
 636 }
 637 ```
 638 ### DisableFeedbackCommands
 639 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 640
 641 **Compatibility:** Firefox 60, Firefox ESR 60\
 642 **CCK2 Equivalent:** N/A\
 643 **Preferences Affected:** N/A
 644
 645 #### Windows
 646 ```
 647 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 648 ```
 649 #### macOS
 650 ```
 651 <dict>
 652   <key>DisableFeedbackCommands</key>
 653   <true/> | <false/>
 654 </dict>
 655 ```
 656 #### JSON
 657 ```
 658 {
 659   "policies": {
 660     "DisableFeedbackCommands": true | false
 661   }
 662 }
 663 ```
 664 ### DisableFirefoxScreenshots
 665 Remove access to Firefox Screenshots.
 666
 667 **Compatibility:** Firefox 60, Firefox ESR 60\
 668 **CCK2 Equivalent:** N/A\
 669 **Preferences Affected:** `extensions.screenshots.disabled`
 670
 671 #### Windows
 672 ```
 673 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 674 ```
 675 #### macOS
 676 ```
 677 <dict>
 678   <key>DisableFirefoxScreenshots</key>
 679   <true/> | <false/>
 680 </dict>
 681 ```
 682 #### JSON
 683 ```
 684 {
 685   "policies": {
 686     "DisableFirefoxScreenshots": true | false
 687   }
 688 }
 689 ```
 690 ### DisableFirefoxAccounts
 691 Disable Firefox Accounts intergration (Sync).
 692
 693 **Compatibility:** Firefox 60, Firefox ESR 60\
 694 **CCK2 Equivalent:** `disableSync`\
 695 **Preferences Affected:** `identity.fxaccounts.enabled`
 696
 697 #### Windows
 698 ```
 699 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 700 ```
 701 #### macOS
 702 ```
 703 <dict>
 704   <key>DisableFirefoxAccounts</key>
 705   <true/> | <false/>
 706 </dict>
 707 ```
 708 #### JSON
 709 ```
 710 {
 711   "policies": {
 712     "DisableFirefoxAccounts": true | false
 713   }
 714 }
 715 ```
 716 ### DisableFirefoxStudies
 717 Disable Firefox studies (Shield).
 718
 719 **Compatibility:** Firefox 60, Firefox ESR 60\
 720 **CCK2 Equivalent:** `disableForget`\
 721 **Preferences Affected:** N/A
 722
 723 #### Windows
 724 ```
 725 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 726 ```
 727 #### macOS
 728 ```
 729 <dict>
 730   <key>DisableFirefoxStudies</key>
 731   <true/> | <false/>
 732 </dict>
 733 ```
 734 #### JSON
 735 ```
 736 {
 737   "policies": {
 738     "DisableFirefoxStudies": true | false
 739   }
 740 }
 741 ```
 742 ### DisableForgetButton
 743 Disable the "Forget" button.
 744
 745 **Compatibility:** Firefox 60, Firefox ESR 60\
 746 **CCK2 Equivalent:** `disableForget`\
 747 **Preferences Affected:** N/A
 748
 749 #### Windows
 750 ```
 751 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 752 ```
 753 #### macOS
 754 ```
 755 <dict>
 756   <key>DisableForgetButton</key>
 757   <true/> | <false/>
 758 </dict>
 759 ```
 760 #### JSON
 761 ```
 762 {
 763   "policies": {
 764     "DisableForgetButton": true | false
 765   }
 766 }
 767 ```
 768 ### DisableFormHistory
 769 Turn off saving information on web forms and the search bar.
 770
 771 **Compatibility:** Firefox 60, Firefox ESR 60\
 772 **CCK2 Equivalent:** `disableFormFill`\
 773 **Preferences Affected:** ` browser.formfill.enable`
 774
 775 #### Windows
 776 ```
 777 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 778 ```
 779 #### macOS
 780 ```
 781 <dict>
 782   <key>DisableFormHistory</key>
 783   <true/> | <false/>
 784 </dict>
 785 ```
 786 #### JSON
 787 ```
 788 {
 789   "policies": {
 790     "DisableFormHistory": true | false
 791   }
 792 }
 793 ```
 794 ### DisablePocket
 795 Removes Pocket in the Firefox UI. It does not remove it from the new tab page.
 796
 797 **Compatibility:** Firefox 60, Firefox ESR 60\
 798 **CCK2 Equivalent:** `disablePocket`\
 799 **Preferences Affected:** `extensions.pocket.enabled`
 800
 801 #### Windows
 802 ```
 803 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 804 ```
 805 #### macOS
 806 ```
 807 <dict>
 808   <key>DisablePocket</key>
 809   <true/> | <false/>
 810 </dict>
 811 ```
 812 #### JSON
 813 ```
 814 {
 815   "policies": {
 816     "DisablePocket": true | false
 817   }
 818 }
 819 ```
 820 ### DisablePrivateBrowsing
 821 Removes access to private browsing.
 822
 823 **Compatibility:** Firefox 60, Firefox ESR 60\
 824 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 825 **Preferences Affected:** N/A
 826
 827 #### Windows
 828 ```
 829 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 830 ```
 831 #### macOS
 832 ```
 833 <dict>
 834   <key>DisablePrivateBrowsing</key>
 835   <true/> | <false/>
 836 </dict>
 837 ```
 838 #### JSON
 839 ```
 840 {
 841   "policies": {
 842     "DisablePrivateBrowsing": true | false
 843   }
 844 }
 845 ```
 846 ### DisableProfileImport
 847 Disables the "Import data from another browser" option in the bookmarks window.
 848
 849 **Compatibility:** Firefox 60, Firefox ESR 60\
 850 **CCK2 Equivalent:** N/A\
 851 **Preferences Affected:** N/A
 852
 853 #### Windows
 854 ```
 855 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 856 ```
 857 #### macOS
 858 ```
 859 <dict>
 860   <key>DisableProfileImport</key>
 861   <true/> | <false/>
 862 </dict>
 863 ```
 864 #### JSON
 865 ```
 866 {
 867   "policies": {
 868     "DisableProfileImport": true | false
 869   }
 870 }
 871 ```
 872 ### DisableProfileRefresh
 873 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 874
 875 **Compatibility:** Firefox 60, Firefox ESR 60\
 876 **CCK2 Equivalent:** `disableResetFirefox`\
 877 **Preferences Affected:** `browser.disableResetPrompt`
 878
 879 #### Windows
 880 ```
 881 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 882 ```
 883 #### macOS
 884 ```
 885 <dict>
 886   <key>DisableProfileRefresh</key>
 887   <true/> | <false/>
 888 </dict>
 889 ```
 890 #### JSON
 891 ```
 892 {
 893   "policies": {
 894     "DisableProfileRefresh": true | false
 895   }
 896 }
 897 ```
 898 ### DisableSafeMode
 899 Disable safe mode.
 900
 901 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 902 **CCK2 Equivalent:** `disableSafeMode`\
 903 **Preferences Affected:** N/A
 904
 905 #### Windows
 906 ```
 907 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 908 ```
 909 #### macOS
 910 ```
 911 <dict>
 912   <key>DisableSafeMode</key>
 913   <true/> | <false/>
 914 </dict>
 915 ```
 916 #### JSON
 917 ```
 918 {
 919   "policies": {
 920     "DisableSafeMode": true | false
 921   }
 922 }
 923 ```
 924 ### DisableSecurityBypass
 925 Prevent the user from bypassing security in certain cases.
 926
 927 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 928
 929 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 930
 931 **Compatibility:** Firefox 60, Firefox ESR 60\
 932 **CCK2 Equivalent:** N/A\
 933 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 934
 935 #### Windows
 936 ```
 937 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 938 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 939 ```
 940 #### macOS
 941 ```
 942 <dict>
 943   <key>DisableSecurityBypass</key>
 944   <dict>
 945     <key>InvalidCertificate</key>
 946     <true/> | <false/>
 947
 948     <key><SafeBrowsing/key>
 949     <true/> | <false/>
 950   </dict>
 951 </dict>
 952 ```
 953 #### JSON
 954 ```
 955 {
 956   "policies": {
 957     "DisableSecurityBypass": {
 958       "InvalidCertificate": true false,
 959       "SafeBrowsing": true false
 960     }
 961   }
 962 }
 963 ```
 964 ### DisableSystemAddonUpdate
 965 Prevent system add-ons from being installed or update.
 966
 967 **Compatibility:** Firefox 60, Firefox ESR 60\
 968 **CCK2 Equivalent:** N/A\
 969 **Preferences Affected:** N/A
 970
 971 #### Windows
 972 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 973 ```
 974 #### macOS
 975 ```
 976 <dict>
 977   <key>DisableSystemAddonUpdate</key>
 978   <true/> | <false/>
 979 </dict>
 980 ```
 981 #### JSON
 982 ```
 983 {
 984   "policies": {
 985     "DisableSystemAddonUpdate": true | false
 986   }
 987 }
 988 ```
 989 ### DisableTelemetry
 990 Prevent the upload of telemetry data.
 991
 992 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
 993
 994 **Compatibility:** Firefox 60, Firefox ESR 60\
 995 **CCK2 Equivalent:** `disableTelemetry`\
 996 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
 997
 998 #### Windows
 999 ```
1000 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1001 ```
1002 #### macOS
1003 ```
1004 <dict>
1005   <key>DisableTelemetry</key>
1006   <true/> | <false/>
1007 </dict>
1008 ```
1009 #### JSON
1010 ```
1011 {
1012   "policies": {
1013     "DisableTelemetry": true | false
1014   }
1015 }
1016 ```
1017 ### DisplayBookmarksToolbar
1018 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1019
1020 **Compatibility:** Firefox 60, Firefox ESR 60\
1021 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1022 **Preferences Affected:** N/A
1023
1024 #### Windows
1025 ```
1026 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1027 ```
1028 #### macOS
1029 ```
1030 <dict>
1031   <key>DisplayBookmarksToolbar</key>
1032   <true/> | <false/>
1033 </dict>
1034 ```
1035 #### JSON
1036 ```
1037 {
1038   "policies": {
1039     "DisplayBookmarksToolbar": true | false
1040   }
1041 }
1042 ```
1043 ### DontCheckDefaultBrowser
1044 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1045
1046 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1047 **CCK2 Equivalent:** `displayMenuBar`\
1048 **Preferences Affected:** N/~
1049
1050 #### Windows
1051 ```
1052 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1053 ```
1054 #### macOS
1055 ```
1056 <dict>
1057   <key>DisplayMenuBar</key>
1058   <true/> | <false/>
1059 </dict>
1060 ```
1061 #### JSON
1062 ```
1063 {
1064   "policies": {
1065     "DisplayMenuBar": true | false
1066   }
1067 }
1068 ```
1069 ### DontCheckDefaultBrowser
1070 Don't check if Firefox is the default browser at startup.
1071
1072 **Compatibility:** Firefox 60, Firefox ESR 60\
1073 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1074 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1075
1076 #### Windows
1077 ```
1078 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1079 ```
1080 #### macOS
1081 ```
1082 <dict>
1083   <key>DontCheckDefaultBrowser</key>
1084   <true/> | <false/>
1085 </dict>
1086 ```
1087 #### JSON
1088 ```
1089 {
1090   "policies": {
1091     "DontCheckDefaultBrowser": true | false
1092   }
1093 }
1094 ```
1095 ### EnableTrackingProtection
1096 Configure tracking proection.
1097
1098 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1099
1100 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1101
1102 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1103
1104 **Compatibility:** Firefox 60, Firefox ESR 60\
1105 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1106 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1107
1108 #### Windows
1109 ```
1110 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1111 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1112 ```
1113 #### macOS
1114 ```
1115 <dict>
1116   <key>EnableTrackingProtection</key>
1117   <dict>
1118     <key>Value</key>
1119     <true/> | <false/>
1120
1121     <key><Locked/key>
1122     <true/> | <false/>
1123   </dict>
1124 </dict>
1125 ```
1126 #### JSON
1127 ```
1128 {
1129   "policies": {
1130     "EnableTrackingProtection": {
1131       "Value": [true, false],
1132       "Locked": [true, false]
1133     }
1134 }
1135 ```
1136 ### Extensions
1137 Controls the installation, uninstallation and locking of extensions.
1138
1139 `Install` is a list of URLs or native paths for extensions to be installed.
1140
1141 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1142
1143 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1144
1145 **Compatibility:** Firefox 60, Firefox ESR 60\
1146 **CCK2 Equivalent:** `addons`\
1147 **Preferences Affected:** N/A
1148
1149 #### Windows
1150 ```
1151 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1152 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1153 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1154 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1155 ```
1156 #### macOS
1157 ```
1158 <dict>
1159   <key>Extensions</key>
1160   <dict>
1161     <key>Install</key>
1162     <array>
1163       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1164       <string>//path/to/xpi</string>
1165     </array>
1166     <key>Uninstall</key>
1167     <array>
1168       <string>bad_addon_id@mozilla.org</string>
1169     </array>
1170     <key>Locked</key>
1171     <array>
1172       <string>addon_id@mozilla.org</string>
1173     </array>
1174   </dict>
1175 </dict>
1176 ```
1177 #### JSON
1178
1179
1180 ```
1181 {
1182   "policies": {
1183     "Extensions": {
1184       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1185       "Uninstall": ["bad_addon_id@mozilla.org"],
1186       "Locked":  ["addon_id@mozilla.org"]
1187     }
1188   }
1189 }
1190 ```
1191 ### ExtensionUpdate
1192 Control extension updates.
1193
1194 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1195 **CCK2 Equivalent:** N/A\
1196 **Preferences Affected:** `extensions.update.enabled`
1197
1198 #### Windows
1199 ```
1200 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1201 ```
1202 #### macOS
1203 ```
1204 <dict>
1205   <key>ExtensionUpdate</key>
1206   <true/> | <false/>
1207 </dict>
1208 ```
1209 #### JSON
1210 ```
1211 {
1212   "policies": {
1213     "ExtensionUpdate": true | false
1214   }
1215 }
1216 ```
1217 ### HardwareAcceleration
1218 Control hardware acceleration.
1219
1220 **Compatibility:** Firefox 60, Firefox ESR 60\
1221 **CCK2 Equivalent:** N/A\
1222 **Preferences Affected:** `layers.acceleration.disabled`
1223
1224 #### Windows
1225 ```
1226 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1227 ```
1228 #### macOS
1229 ```
1230 <dict>
1231   <key>HardwareAcceleration</key>
1232   <true/> | <false/>
1233 </dict>
1234 ```
1235 #### JSON
1236 ```
1237 {
1238   "policies": {
1239     "HardwareAcceleration": true | false
1240   }
1241 }
1242 ```
1243 ### NoDefaultBookmarks
1244 Disable the creation of default bookmarks.
1245
1246 This policy is only effective if the user profile has not been created yet.
1247
1248 **Compatibility:** Firefox 60, Firefox ESR 60\
1249 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1250 **Preferences Affected:** N/A
1251
1252 #### Windows
1253 ```
1254 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1255 ```
1256 #### macOS
1257 ```
1258 <dict>
1259   <key>NoDefaultBookmarks</key>
1260   <true/> | <false/>
1261 </dict>
1262 ```
1263 #### JSON
1264 ```
1265 {
1266   "policies": {
1267     "NoDefaultBookmarks": true | false
1268   }
1269 }
1270 ```
1271 ### OfferToSaveLogins
1272 Control whether or not Firefox offers to save passwords.
1273
1274 **Compatibility:** Firefox 60, Firefox ESR 60\
1275 **CCK2 Equivalent:** `dontRememberPasswords`\
1276 **Preferences Affected:** `signon.rememberSignons`
1277
1278 #### Windows
1279 ```
1280 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1281 ```
1282 #### macOS
1283 ```
1284 <dict>
1285   <key>OfferToSaveLogins</key>
1286   <true/> | <false/>
1287 </dict>
1288 ```
1289 #### JSON
1290 ```
1291 {
1292   "policies": {
1293     "OfferToSaveLogins": true | false
1294   }
1295 }
1296 ```
1297 ### Homepage
1298 Configure the default homepage and how Firefox starts.
1299
1300 `URL` is the default homepage.
1301
1302 `Locked` prevents the user from changing homepage preferences.
1303
1304 `Additional` allows for more than one homepage.
1305
1306 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1307
1308 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1309 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1310 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1311
1312 #### Windows
1313 ```
1314 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1315 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1316 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1317 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1318 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1319 ```
1320 #### macOS
1321 ```
1322 <dict>
1323   <key>Homepage</key>
1324   <dict>
1325     <key>URL</key>
1326     <string>http://example.com</string>
1327     <key>Locked</key>
1328     <true/> | <false/>
1329     <key>Additional</key>
1330     <array>
1331       <string>http://example.org</string>
1332       <string>http://example.edu</string>
1333     </array>
1334     <key>StartPage</key>
1335     <string>always | never | from-visited</string>
1336   </dict>
1337 </dict>
1338 ```
1339 #### JSON
1340 ```
1341 {
1342   "policies": {
1343     "Homepage": {
1344       "URL": "http://example.com/",
1345       "Locked": true | false,
1346       "Additional": ["http://example.org/",
1347                      "http://example.edu/"],
1348       "StartPage": "none" | "homepage" |  "previous-session"
1349     }
1350   }
1351 }
1352 ```
1353 ### PopupBlocking
1354 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1355
1356 `Allow` is a list of origins where popup-windows are allowed.
1357
1358 `Default` determines whether or not pop-up windows are allowed by default.
1359
1360 `Locked` prevents the user from changing pop-up preferences.
1361
1362 **Compatibility:** Firefox 60, Firefox ESR 60\
1363 **CCK2 Equivalent:** `permissions.popup`\
1364 **Preferences Affected:** `dom.disable_open_during_load`
1365
1366 #### Windows
1367 ```
1368 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
1369 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
1370 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
1371 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
1372 ```
1373 #### macOS
1374 ```
1375 <dict>
1376   <key>PopupBlocking</key>
1377   <dict>
1378     <key>Allow</key>
1379     <array>
1380       <string>http://example.org</string>
1381       <string>http://example.edu</string>
1382     </array>
1383     <key>Default</key>
1384     <true/> | <false/>
1385     <key>Locked</key>
1386     <true/> | <false/>
1387   </dict>
1388 </dict>
1389 ```
1390 #### JSON
1391 ```
1392 {
1393   "policies": {
1394     "PopupBlocking": {
1395       "Allow": ["http://example.org/",
1396                 "http://example.edu/"],
1397       "Default": true | false,
1398       "Locked": true | false
1399     }
1400   }
1401 }
1402 ```
1403 ### InstallAddonsPermission
1404 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1405
1406 `Allow` is a list of origins where extension installs are allowed.
1407
1408 `Default` determines whether or not extension installs are allowed by default.
1409
1410 **Compatibility:** Firefox 60, Firefox ESR 60\
1411 **CCK2 Equivalent:** `permissions.install`\
1412 **Preferences Affected:** `xpinstall.enabled`
1413
1414 #### Windows
1415 ```
1416 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1417 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1418 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1419 ```
1420 #### macOS
1421 ```
1422 <dict>
1423   <key>InstallAddonsPermission</key>
1424   <dict>
1425     <key>Allow</key>
1426     <array>
1427       <string>http://example.org</string>
1428       <string>http://example.edu</string>
1429     </array>
1430     <key>Default</key>
1431     <true/> | <false/>
1432   </dict>
1433 </dict>
1434 ```
1435 #### JSON
1436 ```
1437 {
1438   "policies": {
1439     "InstallAddonsPermission": {
1440       "Allow": ["http://example.org/",
1441                 "http://example.edu/"],
1442       "Default": true | false
1443     }
1444   }
1445 }
1446 ```
1447 ### FlashPlugin
1448 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1449
1450 `Allow` is a list of origins where Flash are allowed.
1451
1452 `Block` is a list of origins where Flash is not allowed.
1453
1454 `Default` determines whether or not Flash is allowed by default.
1455
1456 `Locked` prevents the user from changing Flash preferences.
1457
1458 **Compatibility:** Firefox 60, Firefox ESR 60\
1459 **CCK2 Equivalent:** `permissions.plugin`\
1460 **Preferences Affected:** `plugin.state.flash`
1461
1462 #### Windows
1463 ```
1464 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1465 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1466 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1467 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1468 ```
1469 #### macOS
1470 ```
1471 <dict>
1472   <key>FlashPlugin</key>
1473   <dict>
1474     <key>Allow</key>
1475     <array>
1476       <string>http://example.org</string>
1477     </array>
1478     <key>Block</key>
1479     <array>
1480       <string>http://example.edu</string>
1481     </array>
1482     <key>Default</key>
1483     <true/> | <false/>
1484     <key>Locked</key>
1485     <true/> | <false/>
1486   </dict>
1487 </dict>
1488 ```
1489 #### JSON
1490 ```
1491 {
1492   "policies": {
1493     "FlashPlugin": {
1494       "Allow": ["http://example.org/"],
1495       "Block": ["http://example.edu/"],
1496       "Default": true | false,
1497       "Locked": true | false
1498     }
1499   }
1500 }
1501 ```
1502 ### NetworkPrediction
1503 Enable or disable  network prediction (DNS prefetching).
1504
1505 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1506 **CCK2 Equivalent:** N/A\
1507 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1508
1509 #### Windows
1510 ```
1511 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1512 ```
1513 #### macOS
1514 ```
1515 <dict>
1516   <key>NetworkPrediction</key>
1517   <true/> | <false/>
1518 </dict>
1519 ```
1520 #### JSON
1521 ```
1522 {
1523   "policies": {
1524     "NetworkPrediction": true | false
1525 }
1526 ```
1527 ### OverrideFirstRunPage
1528 Override the first run page. If the value is blank, no first run page is displayed.
1529
1530 **Compatibility:** Firefox 60, Firefox ESR 60\
1531 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1532 **Preferences Affected:** `startup.homepage_welcome_url`
1533
1534 #### Windows
1535 ```
1536 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>OverrideFirstRunPage</key>
1542   <string>http://example.org</string>
1543 </dict>
1544 ```
1545 #### JSON
1546 ```
1547 {
1548   "policies": {
1549     "OverrideFirstRunPage": ""http://example.org""
1550 }
1551 ```
1552 ### OverridePostUpdatePage
1553 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1554
1555 **Compatibility:** Firefox 60, Firefox ESR 60\
1556 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1557 **Preferences Affected:** `startup.homepage_override_url`
1558
1559 #### Windows
1560 ```
1561 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1562 ```
1563 #### macOS
1564 ```
1565 <dict>
1566   <key>OverridePostUpdatePage</key>
1567   <string>http://example.org</string>
1568 </dict>
1569 ```
1570 #### JSON
1571 ```
1572 {
1573   "policies": {
1574     "OverridePostUpdatePage": ""http://example.org""
1575 }
1576 ```
1577 ### Permissions
1578 Set permissions associated with camera, microphone, location, and notifications
1579
1580 `Allow` is a list of origins where the feature is allowed.
1581
1582 `Block` is a list of origins where the feature is not allowed.
1583
1584 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1585
1586 `Locked` prevents the user from changing preferences for the feature.
1587
1588 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1589 **CCK2 Equivalent:** N/A\
1590 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1591
1592 #### Windows
1593 ```
1594 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1595 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1596 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1597 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1598 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1599 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1600 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1601 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1602 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1603 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1604 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1605 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1606 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1607 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1608 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1609 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1610 ```
1611 #### macOS
1612 ```
1613 <dict>
1614   <key>Permissions</key>
1615   <dict>
1616     <key>Camera</key>
1617     <dict>
1618       <key>Allow</key>
1619       <array>
1620         <string>https://example.org</string>
1621       </array>
1622       <key>Block</key>
1623       <array>
1624         <string>https://example.edu</string>
1625       </array>
1626       <key>BlockNewRequests</key>
1627       <true/>
1628       <key>Locked</key>
1629       <true/>
1630     </dict>
1631     <key>Microphone</key>
1632     <dict>
1633       <key>Allow</key>
1634       <array>
1635         <string>https://example.org</string>
1636       </array>
1637       <key>Block</key>
1638       <array>
1639         <string>https://example.edu</string>
1640       </array>
1641       <key>BlockNewRequests</key>
1642       <true/>
1643       <key>Locked</key>
1644       <true/>
1645     </dict>
1646     <key>Location</key>
1647     <dict>
1648       <key>Allow</key>
1649       <array>
1650         <string>https://example.org</string>
1651       </array>
1652       <key>Block</key>
1653       <array>
1654         <string>https://example.edu</string>
1655       </array>
1656       <key>BlockNewRequests</key>
1657       <true/>
1658       <key>Locked</key>
1659       <true/>
1660     </dict>
1661     <key>Notifications</key>
1662     <dict>
1663       <key>Allow</key>
1664       <array>
1665         <string>https://example.org</string>
1666       </array>
1667       <key>Block</key>
1668       <array>
1669         <string>https://example.edu</string>
1670       </array>
1671       <key>BlockNewRequests</key>
1672       <true/>
1673       <key>Locked</key>
1674       <true/>
1675     </dict>
1676   </dict>
1677 </dict>
1678 ```
1679 #### JSON
1680 ```
1681 {
1682   "policies": {
1683     "Permissions": {
1684       "Camera": {
1685         "Allow": ["https://example.org"],
1686         "Block": ["https://example.edu"],
1687         "BlockNewRequests": true | false,
1688         "Locked": true | false
1689       },
1690       "Microphone": {
1691         "Allow": ["https://example.org"],
1692         "Block": ["https://example.edu"],
1693         "BlockNewRequests": true | false,
1694         "Locked": true | false
1695       },
1696       "Location": {
1697         "Allow": ["https://example.org"],
1698         "Block": ["https://example.edu"],
1699         "BlockNewRequests": true | false,
1700         "Locked": true | false
1701       },
1702       "Notifications": {
1703         "Allow": ["https://example.org"],
1704         "Block": ["https://example.edu"],
1705         "BlockNewRequests": true | false,
1706         "Locked": true | false
1707       }
1708     }
1709   }
1710 }
1711 ```
1712 ### Proxy
1713 This policy allows you to specify proxy settings. These settings correspond to the connection settings in Firefox preferences.
1714 To specify ports, append them to the hostnames with a colon (:).
1715
1716 `Mode` is the proxy method being used.
1717
1718 `Locked` is whether or not proxy settings can be changed.
1719
1720 `HTTPProxy` is the HTTP proxy server.
1721
1722 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
1723
1724 `SSLProxy` is the SSL proxy server.
1725
1726 `FTPProxy` is the FTP proxy server.
1727
1728 `SOCKSProxy` is the SOCKS proxy server
1729
1730 `SOCKSVersion` is the SOCKS version (4 or 5)
1731
1732 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
1733
1734 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
1735
1736 | `AutoLogin` means do not prompt for authentication if password is saved.
1737
1738 | `UseProxyForDNS` to use proxy DNS when using SOCK v5.
1739
1740 **Compatibility:** Firefoox 60, Firefox ESR 60\
1741 **CCK2 Equivalent:** `networkProxy*`\
1742 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
1743
1744 #### Windows
1745 ```
1746 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
1747 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
1748 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
1749 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
1750 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
1751 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
1752 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
1753 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
1754 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
1755 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
1756 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
1757 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
1758 ```
1759 #### macOS
1760 ```
1761 <dict>
1762   <key>Proxy</key>
1763   <dict>
1764     <key>Mode</key>
1765     <string>none | system | manual | autoDetect| autoConfig</string>
1766     <key>Locked</key>
1767     <true> | </false>
1768     <key>HTTPProxy</key>
1769     <string>https://httpproxy.example.com</string>
1770     <key>UseHTTPProxyForAllProtocols</key>
1771     <true> | </false>
1772     <key>SSLProxy</key>
1773     <string>https://sslproxy.example.com</string>
1774     <key>FTPProxy</key>
1775     <string>https://ftpproxy.example.com</string>
1776     <key>SOCKSProxy</key>
1777     <string>https://socksproxy.example.com</string>
1778     <key>SOCKSVersion</key>
1779     <string>4 | 5</string>
1780     <key>Passthrough</key>
1781     <string>&lt;local>&gt;</string>
1782     <key>AutoConfigURL</key>
1783     <string>URL_TO_AUTOCONFIG</string>
1784     <key>AutoLogin</key>
1785     <true> | </false>
1786     <key>UseProxyForDNS</key>
1787     <true> | </false>
1788   </dict>
1789 </dict>
1790 ```
1791 ### JSON
1792 ```
1793 {
1794   "policies": {
1795     "Proxy": {
1796       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
1797       "Locked": [true, false],
1798       "HTTPProxy": "hostname",
1799       "UseHTTPProxyForAllProtocols": [true, false],
1800       "SSLProxy": "hostname",
1801       "FTPProxy": "hostname",
1802       "SOCKSProxy": "hostname",
1803       "SOCKSVersion": 4 | 5
1804       "Passthrough": "<local>",
1805       "AutoConfigURL": "URL_TO_AUTOCONFIG",
1806       "AutoLogin":  [true, false],
1807       "UseProxyForDNS": [true, false]
1808     }
1809   }
1810 }
1811 ```
1812 ### RequestedLocales
1813 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
1814
1815 **Compatibility:** Firefox 64, Firefox ESR 60.4\
1816 **CCK2 Equivalent:** N/A\
1817 **Preferences Affected:** N/A
1818 #### Windows
1819 ```
1820 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
1821 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
1822 ```
1823 #### macOS
1824 ```
1825 <dict>
1826   <key>RequestedLocales</key>
1827   <array>
1828     <string>de</string>
1829     <string>en-US</string>
1830   </array>
1831 </dict>
1832 ```
1833 #### JSON
1834 ```
1835 {
1836   "policies": {
1837     "RequestedLocales": ["de", "en-US"]
1838   }
1839 }
1840 ```
1841 ### SanitizeOnShutdown
1842 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
1843
1844 **Compatibility:** Firefox 60, Firefox ESR 60\
1845 **CCK2 Equivalent:** N/A\
1846 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown,privacy.clearOnShutdown.cache,privacy.clearOnShutdown.cookies,privacy.clearOnShutdown.downloads,privacy.clearOnShutdown.formdata,privacy.clearOnShutdown.history,privacy.clearOnShutdown.sessions,privacy.clearOnShutdown.siteSettings,privacy.clearOnShutdown.offlineApps`
1847 #### Windows
1848 ```
1849 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
1850 ```
1851 #### macOS
1852 ```
1853 <dict>
1854   <key>SanitizeOnShutdown</key>
1855   <true/> | <false/>
1856 </dict>
1857 ```
1858 #### JSON
1859 ```
1860 {
1861   "policies": {
1862     "SanitizeOnShutdown": true | false
1863   }
1864 }
1865 ```
1866 ### SearchBar
1867 Sets whether or not search bar is displayed.
1868
1869 **Compatibility:** Firefox 60, Firefox ESR 60\
1870 **CCK2 Equivalent:** `showSearchBar`\
1871 **Preferences Affected:** N/A
1872
1873 #### Windows
1874 ```
1875 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
1876 ```
1877 #### macOS
1878 ```
1879 <dict>
1880   <key>SearchBar</key>
1881   <string>unified | separate</string>
1882 </dict>
1883 ```
1884
1885 #### JSON
1886 ```
1887 {
1888   "policies": {
1889     "SearchBar": "unified" | "separate"
1890   }
1891 }
1892 ```
1893 ### WebsiteFilter
1894 Block webs
1895 This policy blocks websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
1896
1897 **Compatibility:** Firefox 60, Firefox ESR 60\
1898 **CCK2 Equivalent:** N/A\
1899 **Preferences Affected:** N/A
1900
1901 #### Windows
1902 ```
1903 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
1904 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
1905 ```
1906 #### macOS
1907 ```
1908 <dict>
1909   <key>WebsiteFilter</key>
1910   <dict>
1911     <key>Block</key>
1912     <array>
1913       <string><all_urls></string>
1914     </array>
1915     <key>Exceptions</key>
1916     <array>
1917       <string>http://example.org/*</string>
1918     </array>
1919   </dict>
1920
1921 </dict>
1922 ```
1923 ### JSON
1924 ```
1925 {
1926   "policies": {
1927     "WebsiteFilter": {
1928       "Block": ["<all_urls>"],
1929       "Exceptions": ["http://example.org/*"]
1930     }
1931   }
1932 }
1933 ```
1934
1935
1936
1937
1938 ### SearchEngines (This policy is only available on the ESR.)
1939
1940 ### SearchEngines | Default
1941
1942 This policy allows you to set the default search engine. This policy is only available on the ESR.
1943
1944 **Compatibility:** Firefox ESR 60\
1945 **CCK2 Equivalent:** `defaultSearchEngine`\
1946 **Preferences Affected:** N/A
1947
1948 ### Windows
1949 ```
1950 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
1951 ```
1952 #### macOS
1953 ```
1954 <dict>
1955   <key>SearchEngines</key>
1956   <dict>
1957     <key>Default</key>
1958     <string>NAME_OF_SEARCH_ENGINE</string>
1959   </dict>
1960 </dict>
1961 ```
1962 ### JSON
1963 ```
1964 {
1965   "policies": {
1966     "SearchEngines": {
1967       "Default": "NAME_OF_SEARCH_ENGINE"
1968     }
1969   }
1970 }
1971 ```
1972 ### SearchEngines | PreventInstalls
1973
1974 Prevent installing search engines from webpages.
1975
1976 **Compatibility:** Firefox ESR 60\
1977 **CCK2 Equivalent:** `disableSearchEngineInstall`\
1978 **Preferences Affected:** N/A
1979
1980 ### Windows
1981 ```
1982 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
1983 ```
1984 #### macOS
1985 ```
1986 <dict>
1987   <key>SearchEngines</key>
1988   <dict>
1989     <key>PreventInstalls</key>
1990     <true/> | <false/>
1991   </dict>
1992 </dict>
1993 ```
1994 ### JSON
1995 ```
1996 {
1997   "policies": {
1998     "SearchEngines": {
1999       "PreventInstalls": true | false
2000     }
2001   }
2002 }
2003 ```
2004 ### SearchEngines | Remove
2005
2006 This policy allows you to hide built-in search engines. This policy is only available on the ESR.
2007
2008 **Compatibility:** Firefox ESR 60\
2009 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2010 **Preferences Affected:** N/A
2011
2012 ### Windows
2013 ```
2014 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2015 ```
2016 #### macOS
2017 ```
2018 <dict>
2019   <key>SearchEngines</key>
2020   <dict>
2021     <key>Remove</key>
2022     <array>
2023       <string>NAME_OF_SEARCH_ENGINE</string>
2024     </array>
2025   </dict>
2026 </dict>
2027 ```
2028 ### JSON
2029 ```
2030 {
2031   "policies": {
2032     "SearchEngines": {
2033       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2034     }
2035   }
2036 }
2037 ```
2038 ### SearchEngines | Add
2039
2040 This policy allows you to add up to five new search engines. This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2041
2042 ### Keys
2043 `Name` is the name of the search engine.
2044
2045 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2046
2047 `Method` is either GET or POST
2048
2049 `IconURL` is a URL for the icon to use.
2050
2051 `Alias` is a keyword to use for the engine.
2052
2053 `Description` is a description of the search engine.
2054
2055 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2056
2057 **Compatibility:** Firefox ESR 60\
2058 **CCK2 Equivalent:** `config.searchplugins`\
2059 **Preferences Affected:** N/A
2060
2061 #### Windows
2062 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name =
2063 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate =
2064 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method =
2065 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL =
2066 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias =
2067 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description =
2068 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate =
2069
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>SearchEngines</key>
2074   <dict>
2075     <key>Add</key>
2076     <array>
2077       <dict>
2078         <key>Name</key>
2079         <string>Example1</string>
2080         <key>URLTemplate</key>
2081         <string>https://www.example.org</string>
2082         <key>Method</key>
2083         <string>https://www.example.org/favicon.ico</string>
2084         <key>IconURL</key>
2085         <string>toolbar</string>
2086         <key>Alias</key>
2087         <string>Example1Folder</string>
2088         <key>Description</key>
2089         <string>Example1Folder</string>
2090         <key>Alias</key>
2091         <string>SuggestURLTemplate</string>
2092       </dict>
2093     <array>
2094   </dict>
2095 </dict>
2096 ```
2097 ### JSON
2098 ```
2099 {
2100   "policies": {
2101     "SearchEngines": {
2102       "Add": [
2103         {
2104           "Name": "",
2105           "URLTemplate": "URL including {searchTerms} to substitute for the terms",
2106           "Method": ["GET", "POST"],
2107           "IconURL": "URL to icon",
2108           "Alias": "Alias that can be used to access the engine",
2109           "Description": "Description",
2110           "SuggestURLTemplate": "URL for suggestions using {searchTerms}"
2111         }
2112       ]
2113     }
2114   }
2115 }
2116 ```
2117 ### SecurityDevices
2118
2119 Install PKCS #11 modules.
2120
2121 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2122 **CCK2 Equivalent:** `certs.devices`\
2123 **Preferences Affected:** N/A
2124
2125 #### Windows
2126 ```
2127 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2128 ```
2129 #### macOS
2130 ```
2131 <dict>
2132   <key>SecurityDevices</key>
2133   <dict>
2134     <key>NAME_OF_DEVICE</key>
2135     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2136   </dict>
2137 </dict>
2138 ```
2139
2140 #### JSON
2141 ```
2142 {
2143   "policies": {
2144     "SecurityDevices": {
2145       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2146     }
2147   }
2148 }
2149 ```
2150 ### SSLVersionMax
2151
2152 Set and lock the maximum version of TLS.
2153
2154 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2155 **CCK2 Equivalent:** N/A\
2156 **Preferences Affected:** `security.tls.version.max`
2157
2158 #### Windows
2159 ```
2160 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2161 ```
2162 #### macOS
2163 ```
2164 <dict>
2165   <key>SSLVersionMax</key>
2166   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2167 </dict>
2168 ```
2169
2170 #### JSON
2171 ```
2172 {
2173   "policies": {
2174     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2175   }
2176 }
2177 ```
2178 ### SSLVersionMin
2179
2180 Set and lock the minimum version of TLS.
2181
2182 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2183 **CCK2 Equivalent:** N/A\
2184 **Preferences Affected:** `security.tls.version.min`
2185
2186 #### Windows
2187 ```
2188 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2189 ```
2190 #### macOS
2191 ```
2192 <dict>
2193   <key>SSLVersionMin</key>
2194   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2195 </dict>
2196 ```
2197
2198 #### JSON
2199 ```
2200 {
2201   "policies": {
2202     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2203   }
2204 }
2205 ```