Add clarification to Certificates description

[policy-templates.git] / README.md

diff --git a/README.md b/README.md
index c4fb5e7ef657e30dba8ede9a08ac8c87ecb007eb..778f75994da61d0622ce16b586fd24094d2d0038 100644 (file)
--- a/README.md
+++ b/README.md
@@ -96,7 +96,13 @@ same folder name are grouped together.
 }
 ```
 ### Certificates
 }
 ```
 ### Certificates

-This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows. Certificates can be located in the following locations:
+This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows.
+
+The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store.
+
+The Install key by default will search for certificates in the locations listed below. Starting in Firefox 65, you can specify a fully qualified path (see cert3.der and cert4.pem in example). If Firefox does not find something at your fully qualified path, it will search the default directories.
+
+Certificates can be located in the following locations:

 - Windows
   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 - Windows
   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates


@@ -107,15 +113,14 @@ This policy can be used to install certificates or to read certificates from the
   - /usr/lib/mozilla/certificates
   - /usr/lib64/mozilla/certificates
   - ~/.mozilla/certificates
   - /usr/lib/mozilla/certificates
   - /usr/lib64/mozilla/certificates
   - ~/.mozilla/certificates

- 
-In Firefox 65, you can specify a fully qualified path.
+

 
 ```
 {
   "policies": {
     "Certificates": {
       "ImportEnterpriseRoots": true,
 
 ```
 {
   "policies": {
     "Certificates": {
       "ImportEnterpriseRoots": true,

-      "Install": ["cert1.der", "cert2.pem"]
+      "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"]

     }
   }
 }
     }
   }
 }


@@ -610,9 +615,9 @@ This policy allows you to add PKCS #11 Modules
 ```
 {
   "policies": {
 ```
 {
   "policies": {

-    "SecurityDevices": [
+    "SecurityDevices": {

       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"

-    ]
+    }

   }
 }
 ```
   }
 }
 ```