X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/a10cf5f4bc71db2897cdb7265c11d2136354630e..75c29d866880f8307ada801475286f68778afc17:/README.md diff --git a/README.md b/README.md index 21ef1ad..b160f70 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ **IMPORTANT**: This file is in active development along with the policies in Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases. -Policies can either be specified using the Group Policy templates or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution. +Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution. The content of the JSON file should look like this: ``` @@ -96,7 +96,20 @@ same folder name are grouped together. } ``` ### Certificates -This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows. Certificates can be located in the following locations: +This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows. + +The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store. + +The Install Certificates key by default will search for certificates in the locations listed below. +Starting in Firefox 65 you can specify a fully qualified path including UNC. (See cert3.der and cert4.pem, in example). + +**Be advised if you wish to load a certificate from a UNC path you must use double backslahes.** +Example: \\SERVER\\CERTS\CERT5.PEM + + +If Firefox does not find something at your fully qualified path, it will search the default directories. + +Certificates can be located in the following locations: - Windows - %USERPROFILE%\AppData\Local\Mozilla\Certificates - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates @@ -107,15 +120,14 @@ This policy can be used to install certificates or to read certificates from the - /usr/lib/mozilla/certificates - /usr/lib64/mozilla/certificates - ~/.mozilla/certificates - -In Firefox 65, you can specify a fully qualified path. + ``` { "policies": { "Certificates": { "ImportEnterpriseRoots": true, - "Install": ["cert1.der", "cert2.pem"] + "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem", "\\server\\certs\\cert.pem"] } } }