X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/0f363aafa2642f56ad3b376e8971b4f04bcb94e1..a1a83c2320c1d435fe38a3c8632f7e46b80607eb:/README.md?ds=sidebyside diff --git a/README.md b/README.md index 69ccf0b..6e7ef5c 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ **IMPORTANT**: This file is in active development along with the policies in Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases. -Policies can either be specified using the Group Policy templates or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution. +Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution. The content of the JSON file should look like this: ``` @@ -100,7 +100,14 @@ This policy can be used to install certificates or to read certificates from the The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store. -The Install key by default will search for certificates in the locations listed below. Starting in Firefox 65, you can specify a fully qualified path (see cert3.der and cert4.pem in example). If Firefox does not find something at your fully qualified path, it will search the default directories. +The Install Certificates key by default will search for certificates in the locations listed below. +Starting in Firefox 65 you can specify a fully qualified path including UNC. (See cert3.der and cert4.pem, in example). + +**Be advised if you wish to load a certificate from a UNC path you must use double backslahes.** +Example: \\SERVER\\CERTS\CERT5.PEM + + +If Firefox does not find something at your fully qualified path, it will search the default directories. Certificates can be located in the following locations: - Windows @@ -120,7 +127,7 @@ Certificates can be located in the following locations: "policies": { "Certificates": { "ImportEnterpriseRoots": true, - "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"] + "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem", "\\server\\certs\\cert.pem"] } } } @@ -389,6 +396,7 @@ For Uninstall and Locked, you specify extension IDs. "Uninstall": ["addon_id@mozilla.org"], "Locked": ["addon_id@mozilla.org"] } + } } ``` ### HardwareAcceleration @@ -623,3 +631,22 @@ This policy allows you to add PKCS #11 Modules } } ``` +### SSLVersionMin +This policy allows you to set the minimum TLS version. +``` +{ + "policies": { + "SSSLVersionMin": ["tls1", "tls1.1", "tls1.2",. "tls1.3"] + } +} + +``` +### SSLVersionMax +This policy allows you to set the maximum TLS version. +``` +{ + "policies": { + "SSSLVersionMax": ["tls1", "tls1.1", "tls1.2",. "tls1.3"] + } +} +```