README.md

   1 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   2
   3 | Policy Name | Description
   4 | --- | --- |
   5 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
   6 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
   7 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
   8 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
   9 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  10 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  11 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  12 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  13 | **[`Certificates`](#certificates)** |
  14 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  15 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  16 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  17 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  18 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  19 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  20 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  21 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  22 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  23 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  24 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  25 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  26 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  27 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  28 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  29 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  30 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  31 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  32 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  33 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  34 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  35 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  36 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  37 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  38 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  39 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  40 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  41 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  42 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  43 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  44 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  45 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  46 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  47 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  48 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  49 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  50 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  51 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  52 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  53 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  54 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  55 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  56 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  57 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  58 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  59 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  60 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  61 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  62 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  63 | **[`Proxy`](#proxy)** | Configure proxy settings.
  64 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  65 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  66 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  67 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  68 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  69 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  70 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  71 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  72 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  73 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  74 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  75 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  76 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  77 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  78
  79
  80 ### AppUpdateURL
  81
  82 Change the URL for application update.
  83
  84 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  85 **CCK2 Equivalent:** N/A\
  86 **Preferences Affected:** `app.update.url`
  87
  88 #### Windows
  89 ```
  90 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  91 ```
  92 #### macOS
  93 ```
  94 <dict>
  95   <key>AppUpdateURL</key>
  96   <string>https://yoursite.com</string>
  97 </dict>
  98 ```
  99 ### JSON
 100 ```
 101 {
 102   "policies": {
 103     "AppUpdateURL": "https://yoursite.com"
 104   }
 105 }
 106 ```
 107 ### Authentication
 108
 109 Configure sites that support integrated authentication.
 110
 111 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 112
 113 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 114 **CCK2 Equivalent:** N/A\
 115 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 116
 117 #### Windows
 118 ```
 119 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 120 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 121 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 122 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 123 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 124 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 125 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 126 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 127 ```
 128 #### macOS
 129 ```
 130 <dict>
 131   <key>Authentication</key>
 132   <dict>
 133     <key>SPNEGO</key>
 134     <array>
 135       <string>mydomain.com</string>
 136       <string>https://myotherdomain.com</string>
 137     </array>
 138     <key>Delegated</key>
 139     <array>
 140       <string>mydomain.com</string>
 141       <string>https://myotherdomain.com</string>
 142     </array>
 143     <key>NTLM</key>
 144     <array>
 145       <string>mydomain.com</string>
 146       <string>https://myotherdomain.com</string>
 147     </array>
 148     <key>AllowNonFQDN</key>
 149       <dict>
 150       <key>SPNEGO</key>
 151       <true/> | <false/>
 152       <key>NTLM</key>
 153       <true/> | <false/>
 154     </dict>
 155   </dict>
 156 </dict>
 157 ```
 158 ### JSON
 159 ```
 160 {
 161   "policies": {
 162     "Authentication": {
 163       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 164       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 165       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 166       "AllowNonFQDN": {
 167         "SPNEGO": true | false,
 168         "NTLM": true | false
 169       }
 170     }
 171   }
 172 }
 173 ```
 174 ### BlockAboutAddons
 175
 176 Block access to the Add-ons Manager (about:addons).
 177
 178 **Compatibility:** Firefox 60, Firefox ESR 60\
 179 **CCK2 Equivalent:** `disableAddonsManager`\
 180 **Preferences Affected:** N/A
 181
 182 #### Windows
 183 ```
 184 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 185 ```
 186 #### macOS
 187 ```
 188 <dict>
 189   <key>BlockAboutAddons</key>
 190   <true/> | <false/>
 191 </dict>
 192 ```
 193 #### JSON
 194 ```
 195 {
 196   "policies": {
 197     "BlockAboutAddons": true | false
 198   }
 199 }
 200 ```
 201 ### BlockAboutConfig
 202
 203 Block access to about:config.
 204
 205 **Compatibility:** Firefox 60, Firefox ESR 60\
 206 **CCK2 Equivalent:** `disableAboutConfig`\
 207 **Preferences Affected:** N/A
 208
 209 #### Windows
 210 ```
 211 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 212 ```
 213 #### macOS
 214 ```
 215 <dict>
 216   <key>BlockAboutConfig</key>
 217   <true/> | <false/>
 218 </dict>
 219 ```
 220 #### JSON
 221 ```
 222 {
 223   "policies": {
 224     "BlockAboutConfig": true | false
 225   }
 226 }
 227 ```
 228 ### BlockAboutProfiles
 229
 230 Block access to About Profiles (about:profiles).
 231
 232 **Compatibility:** Firefox 60, Firefox ESR 60\
 233 **CCK2 Equivalent:** `disableAboutProfiles`\
 234 **Preferences Affected:** N/A
 235
 236 #### Windows
 237 ```
 238 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 239 ```
 240 #### macOS
 241 ```
 242 <dict>
 243   <key>BlockAboutProfiles</key>
 244   <true/> | <false/>
 245 </dict>
 246 ```
 247 #### JSON
 248 ```
 249 {
 250   "policies": {
 251     "BlockAboutProfiles": true | false
 252   }
 253 }
 254 ```
 255 ### BlockAboutSupport
 256
 257 Block access to Troubleshooting Information (about:support).
 258
 259 **Compatibility:** Firefox 60, Firefox ESR 60\
 260 **CCK2 Equivalent:** `disableAboutSupport`\
 261 **Preferences Affected:** N/A
 262
 263 #### Windows
 264 ```
 265 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 266 ```
 267 #### macOS
 268 ```
 269 <dict>
 270   <key>BlockAboutSupport</key>
 271   <true/> | <false/>
 272 </dict>
 273 ```
 274 #### JSON
 275 ```
 276 {
 277   "policies": {
 278     "BlockAboutSupport": true | false
 279   }
 280 }
 281 ```
 282 ### Bookmarks
 283
 284 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 285
 286 **Compatibility:** Firefox 60, Firefox ESR 60\
 287 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 288 **Preferences Affected:** N/A
 289
 290 #### Windows
 291 ```
 292 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 293 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 294 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 295 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 296 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 297 ```
 298 #### macOS
 299 ```
 300 <dict>
 301   <key>Bookmarks</key>
 302   <array>
 303     <dict>
 304       <key>Title</key>
 305       <string>Example</string>
 306       <key>URL</key>
 307       <string>https://example.com</string>
 308       <key>Favicon</key>
 309       <string>https://example.com/favicon.ico</string>
 310       <key>Placement</key>
 311       <string>toolbar | menu</string>
 312       <key>Folder</key>
 313       <string>FolderName</string>
 314     </dict>
 315   </array>
 316 </dict>
 317 ```
 318 ### JSON
 319 ```
 320 {
 321   "policies": {
 322     "Bookmarks": [
 323       {
 324         "Title": "Example",
 325         "URL": "https://example.com",
 326         "Favicon": "https://example.com/favicon.ico",
 327         "Placement": "toolbar" | "menu",
 328         "Folder": "FolderName"
 329       }
 330     ]
 331   }
 332 }
 333 ```
 334 ### CaptivePortal
 335 Enable or disable the detection of captive portals.
 336
 337 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 338 **CCK2 Equivalent:** N/A\
 339 **Preferences Affected:** `network.captive-portal-service.enabled`
 340
 341 #### Windows
 342 ```
 343 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 344 ```
 345 #### macOS
 346 ```
 347 <dict>
 348   <key>CaptivePortal</key>
 349   <true/> | <false/>
 350 </dict>
 351 ```
 352 #### JSON
 353 ```
 354 {
 355   "policies": {
 356     "CaptivePortal": true | false
 357   }
 358 }
 359 ```
 360 ### Certificates
 361
 362 ### Certificates | ImportEnterpriseRoots
 363
 364 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 365
 366 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 367
 368 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 369 **CCK2 Equivalent:** N/A\
 370 **Preferences Affected:** `security.enterprise_roots.enabled`
 371
 372 #### Windows
 373 ```
 374 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 375 ```
 376 #### macOS
 377 ```
 378 <dict>
 379   <key>Certificates</key>
 380   <dict>
 381     <key>ImportEnterpriseRoots</key>
 382     <true/> | <false/>
 383   </dict>
 384 </dict>
 385 ```
 386 #### JSON
 387 ```
 388 {
 389   "policies": {
 390     "Certificates": {
 391       "ImportEnterpriseRoots": true | false
 392     }
 393   }
 394 }
 395 ```
 396 ### Certificates | Install
 397
 398 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 399
 400 - Windows
 401   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 402   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 403 - macOS
 404   - /Library/Application Support/Mozilla/Certificates
 405   - ~/Library/Application Support/Mozilla/Certificates
 406 - Linux
 407   - /usr/lib/mozilla/certificates
 408   - /usr/lib64/mozilla/certificates
 409   - ~/.mozilla/certificates
 410
 411 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 412
 413 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 414
 415 Certificates are installed using the trust string `CT,CT,`.
 416
 417 Binary (DER) and ASCII (PEM) certificates are both supported.
 418
 419 **Compatibility:** Firefox 64, Firefox ESR 64\
 420 **CCK2 Equivalent:** `certs.ca`\
 421 **Preferences Affected:** N/A
 422
 423 #### Windows
 424 ```
 425 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 426 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 427 ```
 428 #### macOS
 429 ```
 430 <dict>
 431   <key>Certificates</key>
 432   <dict>
 433     <key>Install</key>
 434     <array>
 435       <string>cert1.der</string>
 436       <string>/Users/username/cert2.pem</string>
 437     </array>
 438   </dict>
 439 </dict>
 440 ```
 441 #### JSON
 442 ```
 443 {
 444   "policies": {
 445     "Certificates": {
 446       "Install": ["cert1.der", "/home/username/cert2.pem"]
 447     }
 448   }
 449 }
 450 ```
 451 ### Cookies
 452 Configure cookie preferences.
 453
 454 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 455
 456 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 457
 458 `Default` determines whether cookies are accepted at all.
 459
 460 `AcceptThirdParty` determines how third-party cookies are handled.
 461
 462 `ExpireAtSessionEnd` determines when cookies expire.
 463
 464 `RejectTracker` only rejects cookies for trackers.
 465
 466 `Locked` prevents the user from changing cookie preferences.
 467
 468 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 469 **CCK2 Equivalent:** N/A\
 470 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 471
 472 #### Windows
 473 ```
 474 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 475 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 476 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 477 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 478 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 479 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 480 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 481 ```
 482 #### macOS
 483 ```
 484 <dict>
 485   <key>Cookies</key>
 486   <dict>
 487     <key>Allow</key>
 488     <array>
 489       <string>http://example.com</string>
 490     </array>
 491     <key>Block</key>
 492     <array>
 493       <string>http://example.org</string>
 494     </array>
 495     <key>Default</key>
 496     <true/> | <false/>
 497     <key>AcceptThirdParty</key>
 498     <string>always | never | from-visited</string>
 499     <key>ExpireAtSessionEnd</key>
 500     <true/> | <false/>
 501     <key>RejectTracker</key>
 502     <true/> | <false/>
 503     <key>Locked</key>
 504     <true/> | <false/>
 505   </dict>
 506 </dict>
 507 ```
 508 #### JSON
 509 ```
 510 {
 511   "policies": {
 512     "Cookies": {
 513       "Allow": ["http://example.org/"],
 514       "Block": ["http://example.edu/"],
 515       "Default": true | false,
 516       "AcceptThirdParty": "always" | "never" | "from-visited"],
 517       "ExpireAtSessionEnd": true | false,
 518       "RejectTracker": true | false,
 519       "Locked": true | false
 520     }
 521   }
 522 }
 523 ```
 524 ### DisableSetDesktopBackground
 525 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 526
 527 **Compatibility:** Firefox 60, Firefox ESR 60\
 528 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 529 **Preferences Affected:** N/A
 530
 531 #### Windows
 532 ```
 533 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 534 ```
 535
 536 #### macOS
 537 ```
 538 <dict>
 539   <key>DisableSetDesktopBackground</key>
 540   <true/> | <false/>
 541 </dict>
 542 ```
 543 #### JSON
 544 ```
 545 {
 546   "policies": {
 547     "DisableSetDesktopBackground": true | false
 548   }
 549 }
 550 ```
 551 ### DisableMasterPasswordCreation
 552 Remove the master password functionality.
 553
 554 **Compatibility:** Firefox 60, Firefox ESR 60\
 555 **CCK2 Equivalent:** `noMasterPassword`\
 556 **Preferences Affected:** N/A
 557
 558 #### Windows
 559 ```
 560 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 561 ```
 562
 563 #### macOS
 564 ```
 565 <dict>
 566   <key>DisableMasterPasswordCreation</key>
 567   <true/> | <false/>
 568 </dict>
 569 ```
 570 #### JSON
 571 ```
 572 {
 573   "policies": {
 574     "DisableMasterPasswordCreation": true | false
 575   }
 576 }
 577 ```
 578 ### DisableAppUpdate
 579 Turn off application updates.
 580
 581 **Compatibility:** Firefox 60, Firefox ESR 60\
 582 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 583 **Preferences Affected:** N/A
 584
 585 #### Windows
 586 ```
 587 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 588 ```
 589 #### macOS
 590 ```
 591 <dict>
 592   <key>DisableAppUpdate</key>
 593   <true/> | <false/>
 594 </dict>
 595 ```
 596 #### JSON
 597 ```
 598 {
 599   "policies": {
 600     "DisableAppUpdate": true | false
 601   }
 602 }
 603 ```
 604 ### DisableBuiltinPDFViewer
 605 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 606
 607 **Compatibility:** Firefox 60, Firefox ESR 60\
 608 **CCK2 Equivalent:** `disablePDFjs`\
 609 **Preferences Affected:** `pdfjs.disabled`
 610
 611 #### Windows
 612 ```
 613 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 614 ```
 615
 616 #### macOS
 617 ```
 618 <dict>
 619   <key>DisableBuiltinPDFViewer</key>
 620   <true/> | <false/>
 621 </dict>
 622 ```
 623 #### JSON
 624 ```
 625 {
 626   "policies": {
 627     "DisableBuiltinPDFViewer": true | false
 628   }
 629 }
 630 ```
 631 ### DisableDeveloperTools
 632 Remove access to all developer tools.
 633
 634 **Compatibility:** Firefox 60, Firefox ESR 60\
 635 **CCK2 Equivalent:** `removeDeveloperTools`\
 636 **Preferences Affected:** `devtools.policy.disabled`
 637
 638 #### Windows
 639 ```
 640 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 641 ```
 642
 643 #### macOS
 644 ```
 645 <dict>
 646   <key>DisableDeveloperTools</key>
 647   <true/> | <false/>
 648 </dict>
 649 ```
 650 #### JSON
 651 ```
 652 {
 653   "policies": {
 654     "DisableDeveloperTools": true | false
 655   }
 656 }
 657 ```
 658 ### DisableFeedbackCommands
 659 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 660
 661 **Compatibility:** Firefox 60, Firefox ESR 60\
 662 **CCK2 Equivalent:** N/A\
 663 **Preferences Affected:** N/A
 664
 665 #### Windows
 666 ```
 667 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 668 ```
 669 #### macOS
 670 ```
 671 <dict>
 672   <key>DisableFeedbackCommands</key>
 673   <true/> | <false/>
 674 </dict>
 675 ```
 676 #### JSON
 677 ```
 678 {
 679   "policies": {
 680     "DisableFeedbackCommands": true | false
 681   }
 682 }
 683 ```
 684 ### DisableFirefoxScreenshots
 685 Remove access to Firefox Screenshots.
 686
 687 **Compatibility:** Firefox 60, Firefox ESR 60\
 688 **CCK2 Equivalent:** N/A\
 689 **Preferences Affected:** `extensions.screenshots.disabled`
 690
 691 #### Windows
 692 ```
 693 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 694 ```
 695 #### macOS
 696 ```
 697 <dict>
 698   <key>DisableFirefoxScreenshots</key>
 699   <true/> | <false/>
 700 </dict>
 701 ```
 702 #### JSON
 703 ```
 704 {
 705   "policies": {
 706     "DisableFirefoxScreenshots": true | false
 707   }
 708 }
 709 ```
 710 ### DisableFirefoxAccounts
 711 Disable Firefox Accounts integration (Sync).
 712
 713 **Compatibility:** Firefox 60, Firefox ESR 60\
 714 **CCK2 Equivalent:** `disableSync`\
 715 **Preferences Affected:** `identity.fxaccounts.enabled`
 716
 717 #### Windows
 718 ```
 719 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 720 ```
 721 #### macOS
 722 ```
 723 <dict>
 724   <key>DisableFirefoxAccounts</key>
 725   <true/> | <false/>
 726 </dict>
 727 ```
 728 #### JSON
 729 ```
 730 {
 731   "policies": {
 732     "DisableFirefoxAccounts": true | false
 733   }
 734 }
 735 ```
 736 ### DisableFirefoxStudies
 737 Disable Firefox studies (Shield).
 738
 739 **Compatibility:** Firefox 60, Firefox ESR 60\
 740 **CCK2 Equivalent:** `disableForget`\
 741 **Preferences Affected:** N/A
 742
 743 #### Windows
 744 ```
 745 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 746 ```
 747 #### macOS
 748 ```
 749 <dict>
 750   <key>DisableFirefoxStudies</key>
 751   <true/> | <false/>
 752 </dict>
 753 ```
 754 #### JSON
 755 ```
 756 {
 757   "policies": {
 758     "DisableFirefoxStudies": true | false
 759   }
 760 }
 761 ```
 762 ### DisableForgetButton
 763 Disable the "Forget" button.
 764
 765 **Compatibility:** Firefox 60, Firefox ESR 60\
 766 **CCK2 Equivalent:** `disableForget`\
 767 **Preferences Affected:** N/A
 768
 769 #### Windows
 770 ```
 771 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 772 ```
 773 #### macOS
 774 ```
 775 <dict>
 776   <key>DisableForgetButton</key>
 777   <true/> | <false/>
 778 </dict>
 779 ```
 780 #### JSON
 781 ```
 782 {
 783   "policies": {
 784     "DisableForgetButton": true | false
 785   }
 786 }
 787 ```
 788 ### DisableFormHistory
 789 Turn off saving information on web forms and the search bar.
 790
 791 **Compatibility:** Firefox 60, Firefox ESR 60\
 792 **CCK2 Equivalent:** `disableFormFill`\
 793 **Preferences Affected:** ` browser.formfill.enable`
 794
 795 #### Windows
 796 ```
 797 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 798 ```
 799 #### macOS
 800 ```
 801 <dict>
 802   <key>DisableFormHistory</key>
 803   <true/> | <false/>
 804 </dict>
 805 ```
 806 #### JSON
 807 ```
 808 {
 809   "policies": {
 810     "DisableFormHistory": true | false
 811   }
 812 }
 813 ```
 814 ### DisablePocket
 815 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 816
 817 **Compatibility:** Firefox 60, Firefox ESR 60\
 818 **CCK2 Equivalent:** `disablePocket`\
 819 **Preferences Affected:** `extensions.pocket.enabled`
 820
 821 #### Windows
 822 ```
 823 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 824 ```
 825 #### macOS
 826 ```
 827 <dict>
 828   <key>DisablePocket</key>
 829   <true/> | <false/>
 830 </dict>
 831 ```
 832 #### JSON
 833 ```
 834 {
 835   "policies": {
 836     "DisablePocket": true | false
 837   }
 838 }
 839 ```
 840 ### DisablePrivateBrowsing
 841 Remove access to private browsing.
 842
 843 **Compatibility:** Firefox 60, Firefox ESR 60\
 844 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 845 **Preferences Affected:** N/A
 846
 847 #### Windows
 848 ```
 849 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 850 ```
 851 #### macOS
 852 ```
 853 <dict>
 854   <key>DisablePrivateBrowsing</key>
 855   <true/> | <false/>
 856 </dict>
 857 ```
 858 #### JSON
 859 ```
 860 {
 861   "policies": {
 862     "DisablePrivateBrowsing": true | false
 863   }
 864 }
 865 ```
 866 ### DisableProfileImport
 867 Disables the "Import data from another browser" option in the bookmarks window.
 868
 869 **Compatibility:** Firefox 60, Firefox ESR 60\
 870 **CCK2 Equivalent:** N/A\
 871 **Preferences Affected:** N/A
 872
 873 #### Windows
 874 ```
 875 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 876 ```
 877 #### macOS
 878 ```
 879 <dict>
 880   <key>DisableProfileImport</key>
 881   <true/> | <false/>
 882 </dict>
 883 ```
 884 #### JSON
 885 ```
 886 {
 887   "policies": {
 888     "DisableProfileImport": true | false
 889   }
 890 }
 891 ```
 892 ### DisableProfileRefresh
 893 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 894
 895 **Compatibility:** Firefox 60, Firefox ESR 60\
 896 **CCK2 Equivalent:** `disableResetFirefox`\
 897 **Preferences Affected:** `browser.disableResetPrompt`
 898
 899 #### Windows
 900 ```
 901 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 902 ```
 903 #### macOS
 904 ```
 905 <dict>
 906   <key>DisableProfileRefresh</key>
 907   <true/> | <false/>
 908 </dict>
 909 ```
 910 #### JSON
 911 ```
 912 {
 913   "policies": {
 914     "DisableProfileRefresh": true | false
 915   }
 916 }
 917 ```
 918 ### DisableSafeMode
 919 Disable safe mode within the browser.
 920
 921 On Windows, this disables safe mode via the command line as well.
 922
 923 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 924 **CCK2 Equivalent:** `disableSafeMode`\
 925 **Preferences Affected:** N/A
 926
 927 #### Windows
 928 ```
 929 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableSafeMode</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### JSON
 939 ```
 940 {
 941   "policies": {
 942     "DisableSafeMode": true | false
 943   }
 944 }
 945 ```
 946 ### DisableSecurityBypass
 947 Prevent the user from bypassing security in certain cases.
 948
 949 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 950
 951 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 952
 953 **Compatibility:** Firefox 60, Firefox ESR 60\
 954 **CCK2 Equivalent:** N/A\
 955 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 956
 957 #### Windows
 958 ```
 959 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 960 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 961 ```
 962 #### macOS
 963 ```
 964 <dict>
 965   <key>DisableSecurityBypass</key>
 966   <dict>
 967     <key>InvalidCertificate</key>
 968     <true/> | <false/>
 969     <key><SafeBrowsing/key>
 970     <true/> | <false/>
 971   </dict>
 972 </dict>
 973 ```
 974 #### JSON
 975 ```
 976 {
 977   "policies": {
 978     "DisableSecurityBypass": {
 979       "InvalidCertificate": true false,
 980       "SafeBrowsing": true false
 981     }
 982   }
 983 }
 984 ```
 985 ### DisableSystemAddonUpdate
 986 Prevent system add-ons from being installed or update.
 987
 988 **Compatibility:** Firefox 60, Firefox ESR 60\
 989 **CCK2 Equivalent:** N/A\
 990 **Preferences Affected:** N/A
 991
 992 #### Windows
 993 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
 994 ```
 995 #### macOS
 996 ```
 997 <dict>
 998   <key>DisableSystemAddonUpdate</key>
 999   <true/> | <false/>
1000 </dict>
1001 ```
1002 #### JSON
1003 ```
1004 {
1005   "policies": {
1006     "DisableSystemAddonUpdate": true | false
1007   }
1008 }
1009 ```
1010 ### DisableTelemetry
1011 Prevent the upload of telemetry data.
1012
1013 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1014
1015 **Compatibility:** Firefox 60, Firefox ESR 60\
1016 **CCK2 Equivalent:** `disableTelemetry`\
1017 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1018
1019 #### Windows
1020 ```
1021 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1022 ```
1023 #### macOS
1024 ```
1025 <dict>
1026   <key>DisableTelemetry</key>
1027   <true/> | <false/>
1028 </dict>
1029 ```
1030 #### JSON
1031 ```
1032 {
1033   "policies": {
1034     "DisableTelemetry": true | false
1035   }
1036 }
1037 ```
1038 ### DisplayBookmarksToolbar
1039 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1040
1041 **Compatibility:** Firefox 60, Firefox ESR 60\
1042 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1043 **Preferences Affected:** N/A
1044
1045 #### Windows
1046 ```
1047 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1048 ```
1049 #### macOS
1050 ```
1051 <dict>
1052   <key>DisplayBookmarksToolbar</key>
1053   <true/> | <false/>
1054 </dict>
1055 ```
1056 #### JSON
1057 ```
1058 {
1059   "policies": {
1060     "DisplayBookmarksToolbar": true | false
1061   }
1062 }
1063 ```
1064 ### DisplayMenuBar
1065 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1066
1067 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1068 **CCK2 Equivalent:** `displayMenuBar`\
1069 **Preferences Affected:** N/A
1070
1071 #### Windows
1072 ```
1073 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1074 ```
1075 #### macOS
1076 ```
1077 <dict>
1078   <key>DisplayMenuBar</key>
1079   <true/> | <false/>
1080 </dict>
1081 ```
1082 #### JSON
1083 ```
1084 {
1085   "policies": {
1086     "DisplayMenuBar": true | false
1087   }
1088 }
1089 ```
1090 ### DNSOverHTTPS
1091 Configure DNS over HTTPS.
1092
1093 `Enabled` determines whether DNS over HTTPS is enabled
1094
1095 `ProviderURL` is a URL to another provider.
1096
1097 `Locked` prevents the user from changing DNS over HTTPS preferences.
1098
1099 **Compatibility:** Firefox 63, Firefox ESR 68\
1100 **CCK2 Equivalent:** N/A\
1101 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1102
1103 #### Windows
1104 ```
1105 Software\Policies\Mozilla\Firefox\Cookies\Enabled = 0x1 | 0x0
1106 Software\Policies\Mozilla\Firefox\Cookies\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1107 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1108 ```
1109 #### macOS
1110 ```
1111 <dict>
1112   <key>Cookies</key>
1113   <dict>
1114     <key>Enabled</key>
1115     <true/> | <false/>
1116     <key>ProviderURL</key>
1117     <string>URL_TO_ALTERNATE_PROVIDER</string>
1118     <key>Locked</key>
1119     <true/> | <false/>
1120   </dict>
1121 </dict>
1122 ```
1123 #### JSON
1124 ```
1125 {
1126   "policies": {
1127     "DNSOverHTTPS": {
1128       "Enabled":  true | false,
1129       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1130       "Locked": true | false
1131     }
1132   }
1133 }
1134 ```
1135 ### DontCheckDefaultBrowser
1136 Don't check if Firefox is the default browser at startup.
1137
1138 **Compatibility:** Firefox 60, Firefox ESR 60\
1139 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1140 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1141
1142 #### Windows
1143 ```
1144 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1145 ```
1146 #### macOS
1147 ```
1148 <dict>
1149   <key>DontCheckDefaultBrowser</key>
1150   <true/> | <false/>
1151 </dict>
1152 ```
1153 #### JSON
1154 ```
1155 {
1156   "policies": {
1157     "DontCheckDefaultBrowser": true | false
1158   }
1159 }
1160 ```
1161 ### DefaultDownloadDirectory
1162 Set the default download directory.
1163
1164 You can use ${home} for the native home directory.
1165
1166 **Compatibility:** Firefox 68, Firefox ESR 68\
1167 **CCK2 Equivalent:** N/A\
1168 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1169
1170 #### Windows
1171 ```
1172 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1173 ```
1174 #### macOS
1175 ```
1176 <dict>
1177   <key>DefaultDownloadDirectory</key>
1178   <string>${home}/Downloads</string>
1179 </dict>
1180 ```
1181 #### JSON
1182 ```
1183 {
1184   "policies": {
1185     "DefaultDownloadDirectory": "${home}/Downloads"
1186 }
1187 ```
1188 ### DownloadDirectory
1189 Set and lock the download directory.
1190
1191 You can use ${home} for the native home directory.
1192
1193 **Compatibility:** Firefox 68, Firefox ESR 68\
1194 **CCK2 Equivalent:** N/A\
1195 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1196
1197 #### Windows
1198 ```
1199 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1200 ```
1201 #### macOS
1202 ```
1203 <dict>
1204   <key>DownloadDirectory</key>
1205   <string>${home}/Downloads</string>
1206 </dict>
1207 ```
1208 #### JSON
1209 ```
1210 {
1211   "policies": {
1212     "DownloadDirectory": "${home}/Downloads"
1213 }
1214 ```
1215 ### EnableTrackingProtection
1216 Configure tracking protection.
1217
1218 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1219
1220 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1221
1222 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1223
1224 **Compatibility:** Firefox 60, Firefox ESR 60\
1225 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1226 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1227
1228 #### Windows
1229 ```
1230 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1231 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1232 ```
1233 #### macOS
1234 ```
1235 <dict>
1236   <key>EnableTrackingProtection</key>
1237   <dict>
1238     <key>Value</key>
1239     <true/> | <false/>
1240
1241     <key><Locked/key>
1242     <true/> | <false/>
1243   </dict>
1244 </dict>
1245 ```
1246 #### JSON
1247 ```
1248 {
1249   "policies": {
1250     "EnableTrackingProtection": {
1251       "Value": [true, false],
1252       "Locked": [true, false]
1253     }
1254 }
1255 ```
1256 ### EnterprisePoliciesEnabled
1257 Enable policy support on macOS.
1258
1259 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1260 **CCK2 Equivalent:** N/A\
1261 **Preferences Affected:** N/A
1262
1263 #### macOS
1264 ```
1265 <dict>
1266   <key>EnterprisePoliciesEnabled</key>
1267   <true/>
1268 </dict>
1269 ```
1270 ### Extensions
1271 Control the installation, uninstallation and locking of extensions.
1272
1273 `Install` is a list of URLs or native paths for extensions to be installed.
1274
1275 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1276
1277 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1278
1279 **Compatibility:** Firefox 60, Firefox ESR 60\
1280 **CCK2 Equivalent:** `addons`\
1281 **Preferences Affected:** N/A
1282
1283 #### Windows
1284 ```
1285 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1286 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1287 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1288 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1289 ```
1290 #### macOS
1291 ```
1292 <dict>
1293   <key>Extensions</key>
1294   <dict>
1295     <key>Install</key>
1296     <array>
1297       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1298       <string>//path/to/xpi</string>
1299     </array>
1300     <key>Uninstall</key>
1301     <array>
1302       <string>bad_addon_id@mozilla.org</string>
1303     </array>
1304     <key>Locked</key>
1305     <array>
1306       <string>addon_id@mozilla.org</string>
1307     </array>
1308   </dict>
1309 </dict>
1310 ```
1311 #### JSON
1312
1313
1314 ```
1315 {
1316   "policies": {
1317     "Extensions": {
1318       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1319       "Uninstall": ["bad_addon_id@mozilla.org"],
1320       "Locked":  ["addon_id@mozilla.org"]
1321     }
1322   }
1323 }
1324 ```
1325 ### ExtensionSettings
1326 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1327
1328 This policy maps an extension ID to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1329
1330 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1331
1332 The configuration for each extension is another dictionary that can contain the fields documented below.
1333
1334 | Name | Description |
1335 | --- | --- |
1336 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1337 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1338 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1339 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1340 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1341 | `install_url`| Maps to a string indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi
1342 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1343 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1344 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1345
1346 **Compatibility:** Firefox 68, Firefox ESR 68\
1347 **CCK2 Equivalent:** N/A\
1348 **Preferences Affected:** N/A
1349
1350 #### Windows
1351 Due to a bug in Firefox 68, this policy is not working via GPO on Windows. We will have a fix soon.
1352 #### macOS
1353 ```
1354 <dict>
1355   <key>ExtensionSettings</key>
1356   <dict>
1357     <key>*</key>
1358     <dict>
1359       <key>blocked_install_message</key>
1360       <string>Custom error message.</string>
1361       <key>install_sources</key>
1362       <array>
1363         <string>https://addons.mozilla.org/</string>
1364       </array>
1365       <key>installation_mode</key>
1366       <string>blocked</string>
1367     </dict>
1368     <key>uBlock0@raymondhill.net</key>
1369     <dict>
1370       <key>installation_mode</key>
1371        <string>force_installed</string>
1372       <key>install_url</key>
1373       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1374     </dict>
1375   </dict>
1376 </dict>
1377 ```
1378 #### JSON
1379 ```
1380 {
1381   "policies": {
1382     "ExtensionSettings": {
1383       "*": {
1384         "blocked_install_message": "Custom error message.",
1385         "install_sources": ["https://addons.mozilla.org/"],
1386         "installation_mode": "blocked"
1387       },
1388       "uBlock0@raymondhill.net": {
1389         "installation_mode": "force_installed",
1390         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1391       }
1392     }
1393   }
1394 }
1395 ```
1396
1397 ### ExtensionUpdate
1398 Control extension updates.
1399
1400 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1401 **CCK2 Equivalent:** N/A\
1402 **Preferences Affected:** `extensions.update.enabled`
1403
1404 #### Windows
1405 ```
1406 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1407 ```
1408 #### macOS
1409 ```
1410 <dict>
1411   <key>ExtensionUpdate</key>
1412   <true/> | <false/>
1413 </dict>
1414 ```
1415 #### JSON
1416 ```
1417 {
1418   "policies": {
1419     "ExtensionUpdate": true | false
1420   }
1421 }
1422 ```
1423 ### FlashPlugin
1424 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1425
1426 `Allow` is a list of origins where Flash are allowed.
1427
1428 `Block` is a list of origins where Flash is not allowed.
1429
1430 `Default` determines whether or not Flash is allowed by default.
1431
1432 `Locked` prevents the user from changing Flash preferences.
1433
1434 **Compatibility:** Firefox 60, Firefox ESR 60\
1435 **CCK2 Equivalent:** `permissions.plugin`\
1436 **Preferences Affected:** `plugin.state.flash`
1437
1438 #### Windows
1439 ```
1440 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1441 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1442 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1443 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1444 ```
1445 #### macOS
1446 ```
1447 <dict>
1448   <key>FlashPlugin</key>
1449   <dict>
1450     <key>Allow</key>
1451     <array>
1452       <string>http://example.org</string>
1453     </array>
1454     <key>Block</key>
1455     <array>
1456       <string>http://example.edu</string>
1457     </array>
1458     <key>Default</key>
1459     <true/> | <false/>
1460     <key>Locked</key>
1461     <true/> | <false/>
1462   </dict>
1463 </dict>
1464 ```
1465 #### JSON
1466 ```
1467 {
1468   "policies": {
1469     "FlashPlugin": {
1470       "Allow": ["http://example.org/"],
1471       "Block": ["http://example.edu/"],
1472       "Default": true | false,
1473       "Locked": true | false
1474     }
1475   }
1476 }
1477 ```
1478 ### FirefoxHome
1479 Customize the Firefox Home page.
1480
1481 **Compatibility:** Firefox 68, Firefox ESR 68\
1482 **CCK2 Equivalent:** N/A\
1483 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1484
1485 #### Windows
1486 ```
1487 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1488 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1489 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1490 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1491 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1492 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1493 ```
1494 #### macOS
1495 ```
1496 <dict>
1497   <key>FirefoxHome</key>
1498   <dict>
1499     <key>Search</key>
1500     <true/> | <false/>
1501     <key>TopSites</key>
1502     <true/> | <false/>
1503     <key>Highlights</key>
1504     <true/> | <false/>
1505     <key>Pocket</key>
1506     <true/> | <false/>
1507     <key>Snippets</key>
1508     <true/> | <false/>
1509     <key>Locked</key>
1510     <true/> | <false/>
1511   </dict>
1512 </dict>
1513 ```
1514 #### JSON
1515 ```
1516 {
1517   "policies": {
1518     "FirefoxHome": {
1519       "Search": true | false,
1520       "TopSites": true | false,
1521       "Highlights": true | false,
1522       "Pocket": true | false,
1523       "Snippets": true | false,
1524       "Locked": true | false
1525     }
1526   }
1527 }
1528 ```
1529 ### HardwareAcceleration
1530 Control hardware acceleration.
1531
1532 **Compatibility:** Firefox 60, Firefox ESR 60\
1533 **CCK2 Equivalent:** N/A\
1534 **Preferences Affected:** `layers.acceleration.disabled`
1535
1536 #### Windows
1537 ```
1538 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>HardwareAcceleration</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### JSON
1548 ```
1549 {
1550   "policies": {
1551     "HardwareAcceleration": true | false
1552   }
1553 }
1554 ```
1555 ### Homepage
1556 Configure the default homepage and how Firefox starts.
1557
1558 `URL` is the default homepage.
1559
1560 `Locked` prevents the user from changing homepage preferences.
1561
1562 `Additional` allows for more than one homepage.
1563
1564 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1565
1566 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1567 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1568 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1569
1570 #### Windows
1571 ```
1572 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1573 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1574 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1575 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1576 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1577 ```
1578 #### macOS
1579 ```
1580 <dict>
1581   <key>Homepage</key>
1582   <dict>
1583     <key>URL</key>
1584     <string>http://example.com</string>
1585     <key>Locked</key>
1586     <true/> | <false/>
1587     <key>Additional</key>
1588     <array>
1589       <string>http://example.org</string>
1590       <string>http://example.edu</string>
1591     </array>
1592     <key>StartPage</key>
1593     <string>always | never | from-visited</string>
1594   </dict>
1595 </dict>
1596 ```
1597 #### JSON
1598 ```
1599 {
1600   "policies": {
1601     "Homepage": {
1602       "URL": "http://example.com/",
1603       "Locked": true | false,
1604       "Additional": ["http://example.org/",
1605                      "http://example.edu/"],
1606       "StartPage": "none" | "homepage" |  "previous-session"
1607     }
1608   }
1609 }
1610 ```
1611 ### InstallAddonsPermission
1612 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1613
1614 `Allow` is a list of origins where extension installs are allowed.
1615
1616 `Default` determines whether or not extension installs are allowed by default.
1617
1618 **Compatibility:** Firefox 60, Firefox ESR 60\
1619 **CCK2 Equivalent:** `permissions.install`\
1620 **Preferences Affected:** `xpinstall.enabled`
1621
1622 #### Windows
1623 ```
1624 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1625 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1626 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1627 ```
1628 #### macOS
1629 ```
1630 <dict>
1631   <key>InstallAddonsPermission</key>
1632   <dict>
1633     <key>Allow</key>
1634     <array>
1635       <string>http://example.org</string>
1636       <string>http://example.edu</string>
1637     </array>
1638     <key>Default</key>
1639     <true/> | <false/>
1640   </dict>
1641 </dict>
1642 ```
1643 #### JSON
1644 ```
1645 {
1646   "policies": {
1647     "InstallAddonsPermission": {
1648       "Allow": ["http://example.org/",
1649                 "http://example.edu/"],
1650       "Default": true | false
1651     }
1652   }
1653 }
1654 ```
1655 ### LocalFileLinks
1656 Enable linking to local files by origin.
1657
1658 **Compatibility:** Firefox 68, Firefox ESR 68\
1659 **CCK2 Equivalent:** N/A\
1660 **Preferences Affected:** `capability.policy.localfilelinks.*`
1661
1662 #### Windows
1663 ```
1664 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1665 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1666 ```
1667 #### macOS
1668 ```
1669 <dict>
1670   <key>LocalFileLinks</key>
1671   <array>
1672     <string>http://example.org</string>
1673     <string>http://example.edu</string>
1674   </array>
1675 </dict>
1676 ```
1677 #### JSON
1678 ```
1679 {
1680   "policies": {
1681     "LocalFileLinks": ["http://example.org/",
1682                        "http://example.edu/"]
1683   }
1684 }
1685 ```
1686 ### NoDefaultBookmarks
1687 Disable the creation of default bookmarks.
1688
1689 This policy is only effective if the user profile has not been created yet.
1690
1691 **Compatibility:** Firefox 60, Firefox ESR 60\
1692 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1693 **Preferences Affected:** N/A
1694
1695 #### Windows
1696 ```
1697 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1698 ```
1699 #### macOS
1700 ```
1701 <dict>
1702   <key>NoDefaultBookmarks</key>
1703   <true/> | <false/>
1704 </dict>
1705 ```
1706 #### JSON
1707 ```
1708 {
1709   "policies": {
1710     "NoDefaultBookmarks": true | false
1711   }
1712 }
1713 ```
1714 ### NetworkPrediction
1715 Enable or disable network prediction (DNS prefetching).
1716
1717 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1718 **CCK2 Equivalent:** N/A\
1719 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1720
1721 #### Windows
1722 ```
1723 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1724 ```
1725 #### macOS
1726 ```
1727 <dict>
1728   <key>NetworkPrediction</key>
1729   <true/> | <false/>
1730 </dict>
1731 ```
1732 #### JSON
1733 ```
1734 {
1735   "policies": {
1736     "NetworkPrediction": true | false
1737 }
1738 ```
1739 ### NewTabPage
1740 Enable or disable the New Tab page.
1741
1742 **Compatibility:** Firefox 68, Firefox ESR 68\
1743 **CCK2 Equivalent:** N/A\
1744 **Preferences Affected:** `browser.newtabpage.enabled`
1745
1746 #### Windows
1747 ```
1748 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1749 ```
1750 #### macOS
1751 ```
1752 <dict>
1753   <key>NewTabPage</key>
1754   <true/> | <false/>
1755 </dict>
1756 ```
1757 #### JSON
1758 ```
1759 {
1760   "policies": {
1761     "NewTabPage": true | false
1762 }
1763 ```
1764 ### OfferToSaveLogins
1765 Control whether or not Firefox offers to save passwords.
1766
1767 **Compatibility:** Firefox 60, Firefox ESR 60\
1768 **CCK2 Equivalent:** `dontRememberPasswords`\
1769 **Preferences Affected:** `signon.rememberSignons`
1770
1771 #### Windows
1772 ```
1773 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1774 ```
1775 #### macOS
1776 ```
1777 <dict>
1778   <key>OfferToSaveLogins</key>
1779   <true/> | <false/>
1780 </dict>
1781 ```
1782 #### JSON
1783 ```
1784 {
1785   "policies": {
1786     "OfferToSaveLogins": true | false
1787   }
1788 }
1789 ```
1790 ### OverrideFirstRunPage
1791 Override the first run page. If the value is blank, no first run page is displayed.
1792
1793 **Compatibility:** Firefox 60, Firefox ESR 60\
1794 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1795 **Preferences Affected:** `startup.homepage_welcome_url`
1796
1797 #### Windows
1798 ```
1799 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1800 ```
1801 #### macOS
1802 ```
1803 <dict>
1804   <key>OverrideFirstRunPage</key>
1805   <string>http://example.org</string>
1806 </dict>
1807 ```
1808 #### JSON
1809 ```
1810 {
1811   "policies": {
1812     "OverrideFirstRunPage": "http://example.org"
1813 }
1814 ```
1815 ### OverridePostUpdatePage
1816 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1817
1818 **Compatibility:** Firefox 60, Firefox ESR 60\
1819 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1820 **Preferences Affected:** `startup.homepage_override_url`
1821
1822 #### Windows
1823 ```
1824 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1825 ```
1826 #### macOS
1827 ```
1828 <dict>
1829   <key>OverridePostUpdatePage</key>
1830   <string>http://example.org</string>
1831 </dict>
1832 ```
1833 #### JSON
1834 ```
1835 {
1836   "policies": {
1837     "OverridePostUpdatePage": "http://example.org"
1838 }
1839 ```
1840 ### Permissions
1841 Set permissions associated with camera, microphone, location, and notifications
1842
1843 `Allow` is a list of origins where the feature is allowed.
1844
1845 `Block` is a list of origins where the feature is not allowed.
1846
1847 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1848
1849 `Locked` prevents the user from changing preferences for the feature.
1850
1851 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1852 **CCK2 Equivalent:** N/A\
1853 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1854
1855 #### Windows
1856 ```
1857 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1858 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1859 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1860 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1861 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1862 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1863 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1864 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1865 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1866 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1867 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1868 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1869 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1870 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1871 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1872 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1873 ```
1874 #### macOS
1875 ```
1876 <dict>
1877   <key>Permissions</key>
1878   <dict>
1879     <key>Camera</key>
1880     <dict>
1881       <key>Allow</key>
1882       <array>
1883         <string>https://example.org</string>
1884       </array>
1885       <key>Block</key>
1886       <array>
1887         <string>https://example.edu</string>
1888       </array>
1889       <key>BlockNewRequests</key>
1890       <true/>
1891       <key>Locked</key>
1892       <true/>
1893     </dict>
1894     <key>Microphone</key>
1895     <dict>
1896       <key>Allow</key>
1897       <array>
1898         <string>https://example.org</string>
1899       </array>
1900       <key>Block</key>
1901       <array>
1902         <string>https://example.edu</string>
1903       </array>
1904       <key>BlockNewRequests</key>
1905       <true/>
1906       <key>Locked</key>
1907       <true/>
1908     </dict>
1909     <key>Location</key>
1910     <dict>
1911       <key>Allow</key>
1912       <array>
1913         <string>https://example.org</string>
1914       </array>
1915       <key>Block</key>
1916       <array>
1917         <string>https://example.edu</string>
1918       </array>
1919       <key>BlockNewRequests</key>
1920       <true/>
1921       <key>Locked</key>
1922       <true/>
1923     </dict>
1924     <key>Notifications</key>
1925     <dict>
1926       <key>Allow</key>
1927       <array>
1928         <string>https://example.org</string>
1929       </array>
1930       <key>Block</key>
1931       <array>
1932         <string>https://example.edu</string>
1933       </array>
1934       <key>BlockNewRequests</key>
1935       <true/>
1936       <key>Locked</key>
1937       <true/>
1938     </dict>
1939   </dict>
1940 </dict>
1941 ```
1942 #### JSON
1943 ```
1944 {
1945   "policies": {
1946     "Permissions": {
1947       "Camera": {
1948         "Allow": ["https://example.org"],
1949         "Block": ["https://example.edu"],
1950         "BlockNewRequests": true | false,
1951         "Locked": true | false
1952       },
1953       "Microphone": {
1954         "Allow": ["https://example.org"],
1955         "Block": ["https://example.edu"],
1956         "BlockNewRequests": true | false,
1957         "Locked": true | false
1958       },
1959       "Location": {
1960         "Allow": ["https://example.org"],
1961         "Block": ["https://example.edu"],
1962         "BlockNewRequests": true | false,
1963         "Locked": true | false
1964       },
1965       "Notifications": {
1966         "Allow": ["https://example.org"],
1967         "Block": ["https://example.edu"],
1968         "BlockNewRequests": true | false,
1969         "Locked": true | false
1970       }
1971     }
1972   }
1973 }
1974 ```
1975 ### PopupBlocking
1976 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1977
1978 `Allow` is a list of origins where popup-windows are allowed.
1979
1980 `Default` determines whether or not pop-up windows are allowed by default.
1981
1982 `Locked` prevents the user from changing pop-up preferences.
1983
1984 **Compatibility:** Firefox 60, Firefox ESR 60\
1985 **CCK2 Equivalent:** `permissions.popup`\
1986 **Preferences Affected:** `dom.disable_open_during_load`
1987
1988 #### Windows
1989 ```
1990 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
1991 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
1992 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
1993 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
1994 ```
1995 #### macOS
1996 ```
1997 <dict>
1998   <key>PopupBlocking</key>
1999   <dict>
2000     <key>Allow</key>
2001     <array>
2002       <string>http://example.org</string>
2003       <string>http://example.edu</string>
2004     </array>
2005     <key>Default</key>
2006     <true/> | <false/>
2007     <key>Locked</key>
2008     <true/> | <false/>
2009   </dict>
2010 </dict>
2011 ```
2012 #### JSON
2013 ```
2014 {
2015   "policies": {
2016     "PopupBlocking": {
2017       "Allow": ["http://example.org/",
2018                 "http://example.edu/"],
2019       "Default": true | false,
2020       "Locked": true | false
2021     }
2022   }
2023 }
2024 ```
2025 ### Preferences
2026 Set and lock certain preferences.
2027
2028 **Compatibility:** See below\
2029 **CCK2 Equivalent:** `preferences`\
2030 **Preferences Affected:** See below
2031
2032 | Preference | Type | Compatibility
2033 | --- | --- | ---
2034 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR
2035 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR
2036 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR
2037 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR
2038 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR
2039 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR
2040 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR
2041 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR
2042 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR
2043 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR
2044 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR
2045 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR
2046 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR
2047 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR
2048 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR
2049 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR
2050 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR
2051 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR
2052 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR
2053 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR
2054 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR
2055 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR
2056 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR
2057 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR
2058 #### Windows
2059 ```
2060 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2061 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2062 ```
2063 #### macOS
2064 ```
2065 <dict>
2066   <key>Preferences</key>
2067   <dict>
2068     <key>boolean_preference_name</key>
2069     <true/> | <false/>
2070     <key>string_preference_name</key>
2071     <string>string_value</string>
2072   </dict>
2073 </dict>
2074 ```
2075 #### JSON
2076 ```
2077 {
2078   "policies": {
2079     "Preferences": {
2080       "boolean_preference_name": true | false,
2081       "string_preference_name": "string_value"
2082     }
2083   }
2084 }
2085 ```
2086 ### PromptForDownloadLocation
2087 Ask where to save each file before downloading.
2088
2089 **Compatibility:** Firefox 68, Firefox ESR 68\
2090 **CCK2 Equivalent:** N/A
2091 **Preferences Affected:** `browser.download.useDownloadDir`
2092
2093 #### Windows
2094 ```
2095 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2096 ```
2097 #### macOS
2098 ```
2099 <dict>
2100   <key>PromptForDownloadLocation</key>
2101   <true/> | <false/>
2102 </dict>
2103 ```
2104 #### JSON
2105 ```
2106 {
2107   "policies": {
2108     "PromptForDownloadLocation": true | false
2109   }
2110 }
2111 ```
2112 ### Proxy
2113 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2114 To specify ports, append them to the hostnames with a colon (:).
2115
2116 `Mode` is the proxy method being used.
2117
2118 `Locked` is whether or not proxy settings can be changed.
2119
2120 `HTTPProxy` is the HTTP proxy server.
2121
2122 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2123
2124 `SSLProxy` is the SSL proxy server.
2125
2126 `FTPProxy` is the FTP proxy server.
2127
2128 `SOCKSProxy` is the SOCKS proxy server
2129
2130 `SOCKSVersion` is the SOCKS version (4 or 5)
2131
2132 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2133
2134 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2135
2136 `AutoLogin` means do not prompt for authentication if password is saved.
2137
2138 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2139
2140 **Compatibility:** Firefoox 60, Firefox ESR 60\
2141 **CCK2 Equivalent:** `networkProxy*`\
2142 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2143
2144 #### Windows
2145 ```
2146 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2147 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2148 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2149 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2150 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2151 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2152 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2153 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2154 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2155 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2156 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2157 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2158 ```
2159 #### macOS
2160 ```
2161 <dict>
2162   <key>Proxy</key>
2163   <dict>
2164     <key>Mode</key>
2165     <string>none | system | manual | autoDetect| autoConfig</string>
2166     <key>Locked</key>
2167     <true> | </false>
2168     <key>HTTPProxy</key>
2169     <string>https://httpproxy.example.com</string>
2170     <key>UseHTTPProxyForAllProtocols</key>
2171     <true> | </false>
2172     <key>SSLProxy</key>
2173     <string>https://sslproxy.example.com</string>
2174     <key>FTPProxy</key>
2175     <string>https://ftpproxy.example.com</string>
2176     <key>SOCKSProxy</key>
2177     <string>https://socksproxy.example.com</string>
2178     <key>SOCKSVersion</key>
2179     <string>4 | 5</string>
2180     <key>Passthrough</key>
2181     <string>&lt;local>&gt;</string>
2182     <key>AutoConfigURL</key>
2183     <string>URL_TO_AUTOCONFIG</string>
2184     <key>AutoLogin</key>
2185     <true> | </false>
2186     <key>UseProxyForDNS</key>
2187     <true> | </false>
2188   </dict>
2189 </dict>
2190 ```
2191 ### JSON
2192 ```
2193 {
2194   "policies": {
2195     "Proxy": {
2196       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2197       "Locked": [true, false],
2198       "HTTPProxy": "hostname",
2199       "UseHTTPProxyForAllProtocols": [true, false],
2200       "SSLProxy": "hostname",
2201       "FTPProxy": "hostname",
2202       "SOCKSProxy": "hostname",
2203       "SOCKSVersion": 4 | 5
2204       "Passthrough": "<local>",
2205       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2206       "AutoLogin":  [true, false],
2207       "UseProxyForDNS": [true, false]
2208     }
2209   }
2210 }
2211 ```
2212 ### RequestedLocales
2213 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2214
2215 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2216
2217 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2218 **CCK2 Equivalent:** N/A\
2219 **Preferences Affected:** N/A
2220 #### Windows
2221 ```
2222 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2223 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2224
2225 or
2226
2227 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2228 ```
2229 #### macOS
2230 ```
2231 <dict>
2232   <key>RequestedLocales</key>
2233   <array>
2234     <string>de</string>
2235     <string>en-US</string>
2236   </array>
2237 </dict>
2238
2239 or
2240
2241 <dict>
2242   <key>RequestedLocales</key>
2243   <string>de,en-US</string>
2244 </dict>
2245
2246 ```
2247 #### JSON
2248 ```
2249 {
2250   "policies": {
2251     "RequestedLocales": ["de", "en-US"]
2252   }
2253 }
2254
2255 or
2256
2257 {
2258   "policies": {
2259     "RequestedLocales": "de,en-US"
2260   }
2261 }
2262 ```
2263 ### SanitizeOnShutdown (Selective)
2264 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2265
2266 **Compatibility:** Firefox 68, Firefox ESR 68\
2267 **CCK2 Equivalent:** N/A\
2268 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2269 #### Windows
2270 ```
2271 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2272 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2273 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2274 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2275 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2276 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2277 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2278 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2279 ```
2280 #### macOS
2281 ```
2282 <dict>
2283   <key>SanitizeOnShutdown</key>
2284   <dict>
2285     <key>Cache</key>
2286     <true/> | <false/>
2287     <key>Cookies</key>
2288     <true/> | <false/>
2289     <key>Downloads</key>
2290     <true/> | <false/>
2291     <key>FormData</key>
2292     <true/> | <false/>
2293     <key>History</key>
2294     <true/> | <false/>
2295     <key>Sessions</key>
2296     <true/> | <false/>
2297     <key>SiteSettings</key>
2298     <true/> | <false/>
2299     <key>OfflineApps</key>
2300     <true/> | <false/>
2301   </dict>
2302 </dict>
2303 ```
2304 #### JSON
2305 ```
2306 {
2307   "policies": {
2308     "SanitizeOnShutdown": {
2309       "Cache": true | false,
2310       "Cookies": true | false,
2311       "Downloads": true | false,
2312       "FormData": true | false,
2313       "History": true | false,
2314       "Sessions": true | false,
2315       "SiteSettings": true | false,
2316       "OfflineApps": true | false
2317     }
2318   }
2319 }
2320 ```
2321 ### SanitizeOnShutdown (All)
2322 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2323
2324 **Compatibility:** Firefox 60, Firefox ESR 60\
2325 **CCK2 Equivalent:** N/A\
2326 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2327 #### Windows
2328 ```
2329 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2330 ```
2331 #### macOS
2332 ```
2333 <dict>
2334   <key>SanitizeOnShutdown</key>
2335   <true/> | <false/>
2336 </dict>
2337 ```
2338 #### JSON
2339 ```
2340 {
2341   "policies": {
2342     "SanitizeOnShutdown": true | false
2343   }
2344 }
2345 ```
2346 ### SearchBar
2347 Set whether or not search bar is displayed.
2348
2349 **Compatibility:** Firefox 60, Firefox ESR 60\
2350 **CCK2 Equivalent:** `showSearchBar`\
2351 **Preferences Affected:** N/A
2352
2353 #### Windows
2354 ```
2355 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2356 ```
2357 #### macOS
2358 ```
2359 <dict>
2360   <key>SearchBar</key>
2361   <string>unified | separate</string>
2362 </dict>
2363 ```
2364
2365 #### JSON
2366 ```
2367 {
2368   "policies": {
2369     "SearchBar": "unified" | "separate"
2370   }
2371 }
2372 ```
2373
2374
2375
2376
2377
2378 ### SearchEngines (This policy is only available on the ESR.)
2379
2380 ### SearchEngines | Default
2381
2382 Set the default search engine. This policy is only available on the ESR.
2383
2384 **Compatibility:** Firefox ESR 60\
2385 **CCK2 Equivalent:** `defaultSearchEngine`\
2386 **Preferences Affected:** N/A
2387
2388 ### Windows
2389 ```
2390 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2391 ```
2392 #### macOS
2393 ```
2394 <dict>
2395   <key>SearchEngines</key>
2396   <dict>
2397     <key>Default</key>
2398     <string>NAME_OF_SEARCH_ENGINE</string>
2399   </dict>
2400 </dict>
2401 ```
2402 ### JSON
2403 ```
2404 {
2405   "policies": {
2406     "SearchEngines": {
2407       "Default": "NAME_OF_SEARCH_ENGINE"
2408     }
2409   }
2410 }
2411 ```
2412 ### SearchEngines | PreventInstalls
2413
2414 Prevent installing search engines from webpages.
2415
2416 **Compatibility:** Firefox ESR 60\
2417 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2418 **Preferences Affected:** N/A
2419
2420 ### Windows
2421 ```
2422 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2423 ```
2424 #### macOS
2425 ```
2426 <dict>
2427   <key>SearchEngines</key>
2428   <dict>
2429     <key>PreventInstalls</key>
2430     <true/> | <false/>
2431   </dict>
2432 </dict>
2433 ```
2434 ### JSON
2435 ```
2436 {
2437   "policies": {
2438     "SearchEngines": {
2439       "PreventInstalls": true | false
2440     }
2441   }
2442 }
2443 ```
2444 ### SearchEngines | Remove
2445
2446 Hide built-in search engines. This policy is only available on the ESR.
2447
2448 **Compatibility:** Firefox ESR 60.2\
2449 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2450 **Preferences Affected:** N/A
2451
2452 ### Windows
2453 ```
2454 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2455 ```
2456 #### macOS
2457 ```
2458 <dict>
2459   <key>SearchEngines</key>
2460   <dict>
2461     <key>Remove</key>
2462     <array>
2463       <string>NAME_OF_SEARCH_ENGINE</string>
2464     </array>
2465   </dict>
2466 </dict>
2467 ```
2468 ### JSON
2469 ```
2470 {
2471   "policies": {
2472     "SearchEngines": {
2473       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2474     }
2475   }
2476 }
2477 ```
2478 ### SearchEngines | Add
2479
2480 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2481
2482 `Name` is the name of the search engine.
2483
2484 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2485
2486 `Method` is either GET or POST
2487
2488 `IconURL` is a URL for the icon to use.
2489
2490 `Alias` is a keyword to use for the engine.
2491
2492 `Description` is a description of the search engine.
2493
2494 `PostData` is the POST data as name value pairs separated by &.
2495
2496 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2497
2498 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2499 **CCK2 Equivalent:** `searchplugins`\
2500 **Preferences Affected:** N/A
2501
2502 #### Windows
2503 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2504 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2505 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2506 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2507 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2508 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2509 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2510 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2511
2512 #### macOS
2513 ```
2514 <dict>
2515   <key>SearchEngines</key>
2516   <dict>
2517     <key>Add</key>
2518     <array>
2519       <dict>
2520         <key>Name</key>
2521         <string>Example1</string>
2522         <key>URLTemplate</key>
2523         <string>https://www.example.org/q={searchTerms}</string>
2524         <key>Method</key>
2525         <string>GET | POST </string>
2526         <key>IconURL</key>
2527         <string>https://www.example.org/favicon.ico</string>
2528         <key>Alias</key>
2529         <string>example</string>
2530         <key>Description</key>
2531         <string>Example Description</string>
2532         <key>SuggestURLTemplate</key>
2533         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2534         <key>PostData</key>
2535         <string>name=value&q={searchTerms}</string>
2536       </dict>
2537     <array>
2538   </dict>
2539 </dict>
2540 ```
2541 ### JSON
2542 ```
2543 {
2544   "policies": {
2545     "SearchEngines": {
2546       "Add": [
2547         {
2548           "Name": "Example1",
2549           "URLTemplate": "https://www.example.org/q={searchTerms}",
2550           "Method": "GET" | "POST",
2551           "IconURL": "https://www.example.org/favicon.ico",
2552           "Alias": "example",
2553           "Description": "Description",
2554           "PostData": "name=value&q={searchTerms}",
2555           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2556         }
2557       ]
2558     }
2559   }
2560 }
2561 ```
2562 ### SearchSuggestEnabled
2563
2564 Enable search suggestions.
2565
2566 **Compatibility:** Firefox 68, Firefox ESR 68\
2567 **CCK2 Equivalent:** N/A\
2568 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2569
2570 ### Windows
2571 ```
2572 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2573 ```
2574 #### macOS
2575 ```
2576 <dict>
2577   <key>SearchSuggestEnabled</key>
2578   <true/> | <false/>
2579 </dict>
2580 ```
2581 ### JSON
2582 ```
2583 {
2584   "policies": {
2585     "SearchSuggestEnabled": true | false
2586   }
2587 }
2588 ```
2589 ### SecurityDevices
2590
2591 Install PKCS #11 modules.
2592
2593 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2594 **CCK2 Equivalent:** `certs.devices`\
2595 **Preferences Affected:** N/A
2596
2597 #### Windows
2598 ```
2599 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2600 ```
2601 #### macOS
2602 ```
2603 <dict>
2604   <key>SecurityDevices</key>
2605   <dict>
2606     <key>NAME_OF_DEVICE</key>
2607     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2608   </dict>
2609 </dict>
2610 ```
2611
2612 #### JSON
2613 ```
2614 {
2615   "policies": {
2616     "SecurityDevices": {
2617       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2618     }
2619   }
2620 }
2621 ```
2622 ### SSLVersionMax
2623
2624 Set and lock the maximum version of TLS.
2625
2626 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2627 **CCK2 Equivalent:** N/A\
2628 **Preferences Affected:** `security.tls.version.max`
2629
2630 #### Windows
2631 ```
2632 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2633 ```
2634 #### macOS
2635 ```
2636 <dict>
2637   <key>SSLVersionMax</key>
2638   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2639 </dict>
2640 ```
2641
2642 #### JSON
2643 ```
2644 {
2645   "policies": {
2646     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2647   }
2648 }
2649 ```
2650 ### SSLVersionMin
2651
2652 Set and lock the minimum version of TLS.
2653
2654 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2655 **CCK2 Equivalent:** N/A\
2656 **Preferences Affected:** `security.tls.version.min`
2657
2658 #### Windows
2659 ```
2660 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2661 ```
2662 #### macOS
2663 ```
2664 <dict>
2665   <key>SSLVersionMin</key>
2666   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2667 </dict>
2668 ```
2669
2670 #### JSON
2671 ```
2672 {
2673   "policies": {
2674     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2675   }
2676 }
2677 ```
2678 ### WebsiteFilter
2679 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2680
2681 **Compatibility:** Firefox 60, Firefox ESR 60\
2682 **CCK2 Equivalent:** N/A\
2683 **Preferences Affected:** N/A
2684
2685 #### Windows
2686 ```
2687 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2688 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2689 ```
2690 #### macOS
2691 ```
2692 <dict>
2693   <key>WebsiteFilter</key>
2694   <dict>
2695     <key>Block</key>
2696     <array>
2697       <string><all_urls></string>
2698     </array>
2699     <key>Exceptions</key>
2700     <array>
2701       <string>http://example.org/*</string>
2702     </array>
2703   </dict>
2704
2705 </dict>
2706 ```
2707 ### JSON
2708 ```
2709 {
2710   "policies": {
2711     "WebsiteFilter": {
2712       "Block": ["<all_urls>"],
2713       "Exceptions": ["http://example.org/*"]
2714     }
2715   }
2716 }
2717 ```