Merge pull request #377 from MS-PC/patch-1

[policy-templates.git] / README.md

diff --git a/README.md b/README.md
index c95af1dc0242faaf7b7efe9ebdddc9a3b1c35141..742404b6630870bef38604536f39bb8bcb5d5937 100644 (file)
--- a/README.md
+++ b/README.md
@@ -95,16 +95,25 @@ same folder name are grouped together.
   }
 }
 ```
+### CaptivePortal
+This policy enables or disables captive portal support by setting and locking the preference `network.captive-portal-service.enabled`.
+```
+{
+  "policies": {
+    "CaptivePortal": [true|false]
+}
+```
 ### Certificates
 This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows.
 
-The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store.
+The ImportEnterpriseRoots key will cause Firefox to import 3rd party certificates that have been added by a user administrator from the system certificate store.
+It does not import all certificates. These certificates will not display in the Firefox certificates manager.
 
 The Install Certificates key by default will search for certificates in the locations listed below. 
+Starting in Firefox 65 you can specify a fully qualified path including UNC. (See cert3.der and cert4.pem, in example).
 
-
-Starting in Firefox 65, you can specify a fully qualified path including UNC. (see cert3.der and cert4.pem, cer5.pem in example)
-Be advised if you wish to load a certificate from a UNC path you must use double backslahes. Example: \\SERVER\\CERTS\CERT5.PEM
+**Be advised if you wish to load a certificate from a UNC path you must use double backslahes.**
+Example: \\SERVER\\CERTS\CERT5.PEM
 
 
 If Firefox does not find something at your fully qualified path, it will search the default directories.
@@ -127,7 +136,7 @@ Certificates can be located in the following locations:
   "policies": {
     "Certificates": {
       "ImportEnterpriseRoots": true,
-      "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"]
+      "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\\Company\\cert3.der", "/Library/Company/cert4.pem", "\\\\server\\certs\\cert.pem"]
     }
   }
 }
@@ -396,6 +405,15 @@ For Uninstall and Locked, you specify extension IDs.
       "Uninstall": ["addon_id@mozilla.org"],
       "Locked":  ["addon_id@mozilla.org"]
     }
+  }
+}
+```
+### ExtensionUpdate
+This policy enables or disables extension updates by setting and locking the preference `extensions.update.enabled`.
+```
+{
+  "policies": {
+    "ExtensionUpdate": [true|false]
 }
 ```
 ### HardwareAcceleration
@@ -481,6 +499,14 @@ This policy sets the behavior of Flash on the specified domains, as well as the
   }
 }
 ```
+### NetworkPrediction
+This policy enables or disables network prediction (DNS prefetching) by setting and locking the preferences `network.dns.disablePrefetch` and `network.dns.disablePrefetchFromHTTPS`.
+```
+{
+  "policies": {
+    "NetworkPrediction": [true|false]
+}
+```
 ### OverrideFirstRunPage
 This policy allows you to override the first run page. If you leave the URL blank, the first run page will not be displayed.
 ```
@@ -630,3 +656,22 @@ This policy allows you to add PKCS #11 Modules
   }
 }
 ```
+### SSLVersionMin
+This policy allows you to set the minimum TLS version.
+```
+{
+  "policies": {
+    "SSSLVersionMin": ["tls1", "tls1.1", "tls1.2",. "tls1.3"]
+  }
+}
+
+```
+### SSLVersionMax
+This policy allows you to set the maximum TLS version.
+```
+{
+  "policies": {
+    "SSSLVersionMax": ["tls1", "tls1.1", "tls1.2",. "tls1.3"]
+  }
+}
+```