Showing questions tagged: Show all questions
  • Solved

Is there any way to set firefox config by active directory group policy?

Hello I'm Bae, and i'm sorry for my poor English. I want to make my users be able to use seamless single sign on to Microsoft Azure by setting Firefox config with Active … (read more)

Hello

I'm Bae, and i'm sorry for my poor English.

I want to make my users be able to use seamless single sign on to Microsoft Azure by setting Firefox config with Active Directory group policy.

First, I created the 'user.js' file and wrote 'user_pref("network.negotiate-auth.trusted-uris","https://autologon.microsoftazuread-sso.com");' and 'user_pref("network.negotiate-auth.delegation-uris","https://autologon.microsoftazuread-sso.com");' in it.

Second, I put this user.js file in the Firefox¥Profiles folder (such as xxx.default-release).

Third, I checked that the setting was changed on about:config.

Last, I also checked that I could use seamless single sign on to "www.office.com".

What I want to do is to distribute this user.js file to my domain users (exactly, to users' firefox profiles folder) by group policy. Please tell me how to do.

Or, if there is any way to set 'network.negotiate-auth.trusted-uris' and 'network.negotiate-auth.delegation-uris' without user.js file, such as Firefox group policy template, please tell me which one I should modify.

Thanks.

Asked by sherlocksh 1 month ago

Answered by Mike Kaply 1 month ago

  • Solved

Block websites and exceptions to blocked websites not working

Hello, I have a series of laptops that I need to block access to all URLs and only allow access to one. These laptops are not joined to an AD domain so I downloaded the … (read more)

Hello, I have a series of laptops that I need to block access to all URLs and only allow access to one. These laptops are not joined to an AD domain so I downloaded the ADMX templates and copied them to c:\windows\policydefinitions. I ran gpedit.msc and added <all_urls> to the Blocked Websites policy and then added the specific URL to the Exceptions to Blocked Websites policy. However I am unable to access the allowed URL as Firefox is blocking it, despite having the URL defined in the exceptions policy.

I have added various other URLs to the exceptions policy like https://www.msn.com, https://www.yahoo.com, and https://www.mozilla.org, and all are blocked. I have tried different match patterns in the blocked policy and none blocked any URL, which I didn't expect them to anyway. I tried these patterns:

*://*.*.*
https://*.*.*
http://*.*.*
*

Also in my testing I added https://www.yahoo.com to the block policy, did not enable the exceptions policy and found Firefox did not block that site, which makes zero sense. Am I missing something? I was able to do something similar to this in Chrome with its ADMX templates copied locally to a non-domain joined PC, and it worked flawlessly.

Asked by mgorski10 1 month ago

Answered by mgorski10 1 month ago

  • Solved

Migrating normal Firefox profiles to Firefox ESR ones

We have around 1000 Firefox installations on our government organization, all installed via the Firefox MSI installer. Unfortunately, we came late to realize that the Fir… (read more)

We have around 1000 Firefox installations on our government organization, all installed via the Firefox MSI installer. Unfortunately, we came late to realize that the Firefox ESR would be a much more suitable product, compared to the normal Firefox branch.

Now, some years ago we would simply mass uninstall the normal Firefox and mass install the (latest) ESR version and all would be well. Problem is that we have to keep existing profiles (including passwords/bookmarks etc), something that is not supported in the latest Firefox builds.

Can anyone offer some advice/"hacks" to accomplish this? Note that whatever we'll do, we'll have to do it automatically, we lack the man-power to do this manually on a system by system basis...

Thanks in advance for any information provided.

Asked by Michail Pappas 2 months ago

Answered by Mike Kaply 2 months ago

  • Solved

GPO Settings

Good Afternoon Im currently configuring OKTA for SSO, part of this setup is to configure a FireFox option, for people that use this particular browser. These are the inst… (read more)

Good Afternoon

Im currently configuring OKTA for SSO, part of this setup is to configure a FireFox option, for people that use this particular browser.

These are the instructions provided by OKTA:- Open the Firefox web browser, enter about:config in the Address bar. If the Proceed with Caution message appears, click Accept the Risk and Continue. In the Search preference name field, enter network.negotiate-auth.trusted-uris. Click Edit, enter <org>.kerberos.okta.com, and click Save.

This works fine when i manually edit the config for myself to test, but i need to deploy this across our org, i downloaded the Mozilla GPOS but i cannot find anywhere i can set this particular setting.

Is it possible to set this particular setting in the GPOs? so i can deploy across our org.


Thanks.

Asked by richard.rostron 3 months ago

Answered by jscher2000 3 months ago

  • Solved

policies.json WebsiteFilter does not block website properly

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation. And suppose "policies.json" file contains this: { "policies": { … (read more)

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation.

And suppose "policies.json" file contains this:

{

 "policies": {
     "WebsiteFilter": {
         "Block": [
           "youtube.com",
           "www.youtube.com",
           "http://www.youtube.com",
           "https://www.youtube.com",
         ]
     }
 }

}


Now if I type "youtube.com" in the address bar, it shows "Your organisation has blocked access to this page or web site." It means firefox blocks "youtube.com" correctly. Meanwhile the url in the address bar is "https://www.youtube.com/."

But if I remove "https://www." from "https://www.youtube.com/" in the address bar (Not retype), I can actually visit "youtube.com." It means somehow the webfilter is not working properly.

This issue exists in ubuntu and macos with version 92.0(64-bit).

Does anyone have the same problem? Any help would be appreciated.

Asked by purple_sheep 3 months ago

Answered by jscher2000 3 months ago

  • Solved

Kiosk Usage

I am currently creating new Images for our touch kiosks and would like to use Firefox. Sadly I am confronted with some problems / strange behaviour. I want to set up a wi… (read more)

I am currently creating new Images for our touch kiosks and would like to use Firefox.

Sadly I am confronted with some problems / strange behaviour.

I want to set up a windows Kiosk with Firefox as shell application. So far this worked but the Firefox window opens around 5 times at every restart, also it does not open again if it is closed. The reopening is a feature of the eshell which reacts to the exit code of the Application. Is there anything you know what causes these behaviours? Google chrome does nothing of these things and simply gets restarted if it is closed, as it should.

The second thing is, the built in Kiosk mode is great but our Application at least needs tabs. Is it possible without too much of a hassle to create such a locked down experience? I'd like to do it with a policy or settings file and not to create my own browser out of firefox, maybe there's a way I have overseeen.

I'd really like to do it with firefox as I personally always had a great experience and I trust the team behind it. Thank you for your support beforehand!

Asked by Ale 5 months ago

Answered by Mike Kaply 4 months ago

  • Solved

How to find the URL to use for ExtensionSettings?

I am using group policy, extension settings. I want to block all extensions, require 1, and allow a handful. I think I have the JSON figured out but finding the URL to … (read more)

I am using group policy, extension settings. I want to block all extensions, require 1, and allow a handful. I think I have the JSON figured out but finding the URL to use is escaping me.

I can find the site in the Mozilla addons, https://addons.mozilla.org/en-US/firefox/addon, but how do I find the exact filename to use? I see that many end in latest.xpi but I'm unsure what that means or how I should know which is correct. I know how to find it in Chrome but I'm now trying for FireFox. I've had a hard time and it's not as clear as the direct GPO implementation as Chrome uses.

My next thing to figure out is when extension settings are mentioned in multiple levels of the GPO hierarchy. That's a separate question and not needed for an answer to this question. I only mention it as someone who knows one part is likely to know the other as well.

Thanks, -g

Asked by GrumpyGreg 4 months ago

Answered by cor-el 4 months ago

  • Solved

Attempting ExtensionSettings via Extension Managmement GPO - Error 'No text was entered...'

Hi, I'm trying to create a Windows GPO to control Addons/Extensions in our FireFox installations. From the doc I've read, the place is Policies|Administrative Templates|M… (read more)

Hi, I'm trying to create a Windows GPO to control Addons/Extensions in our FireFox installations.

From the doc I've read, the place is Policies|Administrative Templates|Mozilla|Firefox|Extensions Policy is "Extension Management"

I set it to enabled and include this text: {

 "*": {
   "blocked_install_message": "My Custom Test Message",
   "installation_mode": "blocked"
 }

}

When I hit apply, I get this error message: "No text was entered for this field. Make sure that you enter text."

If I put nothing (but still enabled) or "A" or A, then it accepts that. It's when I plop in the JSON that it fails.

What am I doing wrong?

I have ESR 91.0.1 and policy 3.0 installed. I do not have Firefox installed on the machine doing the GPO work, that's currently only on the test machine. I do have the policy definitions installed.

-g

Asked by GrumpyGreg 4 months ago

Answered by Mike Kaply 4 months ago

  • Solved
  • Archived

Silently Import Bookmarks from IE to Firefox

I am in an enterprise environment with over 500 machines, and we are looking for a way to import users Bookmarks from IE to Firefox silently and behind the scenes without… (read more)

I am in an enterprise environment with over 500 machines, and we are looking for a way to import users Bookmarks from IE to Firefox silently and behind the scenes without requiring user interaction.

Due to security restrictions 3rd party software is not a possibility. Most users have already been using Firefox. We do not want to delete their existing bookmarks in Firefox

Asked by Reod_Dai97 7 months ago

Answered by Mike Kaply 6 months ago

  • Solved
  • Archived

Mozilla Maintenance Service

Has anything changed in Mozilla Maintenance Service in regards to security required for the logged on user in order for Mozilla updates to be installed? We do not allow o… (read more)

Has anything changed in Mozilla Maintenance Service in regards to security required for the logged on user in order for Mozilla updates to be installed? We do not allow our users local admin rights, but instead they have an application where they can request admin rights when needed, and with the release of Firefox 89, we are seeing peoples Mozilla products disappear. In the logs it looks like an update is being made, and once the old version has been deleted, the new version fails to install.

Asked by Steven 7 months ago

Answered by Steven 7 months ago

  • Solved
  • Archived

deploy the about: config configuration on the company's computers

Hello, Please excuse my poor level in English. In my company I deploy FirefoxESR-68.12.0-fr.msi by GPO. I would like to know how to deploy a config file to modify its con… (read more)

Hello, Please excuse my poor level in English. In my company I deploy FirefoxESR-68.12.0-fr.msi by GPO. I would like to know how to deploy a config file to modify its configuration. More precisely the settings network negotiate-auth delegation-uris and network automatic-ntlm-auth trusted-uris

Thanks for your help

Asked by pierre.terme 10 months ago

Answered by cor-el 10 months ago

  • Solved
  • Archived

Unable to make Firefox the default browser via GPO on Windows 10

I'm using these instructions for making the FireFox browser the default browser via GPO: https://support.mozilla.org/en-US/kb/make-firefox-enterprise-default-browser#fire… (read more)

I'm using these instructions for making the FireFox browser the default browser via GPO: https://support.mozilla.org/en-US/kb/make-firefox-enterprise-default-browser#firefox-enterprise:win10: and I'm unable to do so successfully.

When I perform the steps what happens is that no browser becomes the default. Trying to open an html document causes Windows 10 to ask the user to pick which browser they would like to be the default web browser. I can choose Firefox at that point but if I reboot or do a gpupdate /force, the default app for browser goes back to not having one selected.

I can use the same steps to a file at the same network location to make Google Chrome the default browser without issue, but when I switch back to trying to make Firefox the default the same problem returns. I've tried the rapid release version and the ESR version. I have also uninstalled and reinstalled Firefox.

I feel like the issue is related to the default associations xml file from the instructions which states ProgId="FirefoxHTML . If you look in the windows registry, "FirefoxHTML" is not listed as an option for either of these keys: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.html\OpenWithProgIds Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithProgIds

If you go here: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations

Instead of "FirefoxHTML" it lists "FirefoxURL-308046B0AF4A39CB" for the http and https url associations.

Does anyone have a solution to this problem or another way to make Firefox the default browser for multiple machines remotely?

Asked by adidasnmotion 8 months ago

Answered by Mike Kaply 8 months ago

  • Solved
  • Archived

Is there a way to disable "Open File" and "Save Page As" operation from the menu?

Our company is using Firefox. We recently have found that you can launch Command Prompt or PowerShell by typing "cmd" or "powershell" into address bar of "Open File" or "… (read more)

Our company is using Firefox. We recently have found that you can launch Command Prompt or PowerShell by typing "cmd" or "powershell" into address bar of "Open File" or "Save Page As" menu.

Since we can not accept this behavior for security reasons, we are considering disabling "Open File" and "Save Page As" feature themselves. Is there a way to realize this?

We sought options to disable these features, but could not find any so far. Or If there is alternative solution for this, that would be highly appreciated if you share your knowledge.

moved from Firefox -> Firefox for Enterprise

Asked by Flagab 8 months ago

Answered by Mike Kaply 8 months ago

  • Solved
  • Archived

In Windows 10 20h2 version the config setting for firefox is not working

In Windows 10 20h2 version the config setting for firefox is not working while in Windows 7 and lower versions of Windows 10 it is working fine. The settings in js file a… (read more)

In Windows 10 20h2 version the config setting for firefox is not working while in Windows 7 and lower versions of Windows 10 it is working fine. The settings in js file and cfg file is correct but still it is not working in Windows 10 20h2 version. It is observed that everytime the firefox is launched it is generating new ffm.js and ffm.cfg file. If we try to edit this ffm.js file still it is not taking the updated values. it again regenerated the file. Can you please help in resolving this issue?

Asked by rasshuniverse 10 months ago

Answered by Mike Kaply 9 months ago

  • Solved
  • Archived

Enforcing blank page (against group policy)

Hi, I work for a large corporation. My employer enforces an annoying policy that when loading Firefox it defaults to the corporate intranet. This is really slow and hampe… (read more)

Hi, I work for a large corporation. My employer enforces an annoying policy that when loading Firefox it defaults to the corporate intranet. This is really slow and hampers my productivity big time as I very often (re)load Firefox. Especially when in video sharing calls with customers this is extremely annoying as I'm working 99.9 % from home on a lousy VPN bandwidth.

Can I enforce somehow that Firefox loads a blank page by default, essentially overriding the group policy ? e.g. by using the command line when clicking on the Firefox icon in Windows 10 ?

      or via a batch file or some other way which can improve this situation ?

The installed version of FF is 78.8.0esr (64-bits), should be latest.

Your support is most welcome ! Cordially Yours, Jean.

Asked by jean_R 10 months ago

Answered by Mike Kaply 10 months ago

  • Solved
  • Archived

How to disable "Show password"

I am a manager of a company, and I need to let some of our employees access to our online accounts. However, they can see our username/passwords when they simply look at … (read more)

I am a manager of a company, and I need to let some of our employees access to our online accounts. However, they can see our username/passwords when they simply look at firefox settings. Master password is obviously not useful. I want to basically disable "show password" tab.

I looked up online all day, including other web browsers, and firefox extensions. I can't seem to find it out.

Can anyone help me with this?

Asked by shippingeasy2 10 months ago

Answered by cor-el 10 months ago

  • Solved
  • Archived

Mozilla.cfg not forcing all lockPref / not changing default value for some preferences

Hello Everyone, Im implementing DOD compliant settings to Mozilla for our enviroment. I am currently in the testing phase - making sure its all set before deployment, Her… (read more)

Hello Everyone,

Im implementing DOD compliant settings to Mozilla for our enviroment. I am currently in the testing phase - making sure its all set before deployment, Heres where the fun begins.

Ive done the usual - Place the mozilla.cfg in C:\Program Files\Mozilla Firefox Place the autoconfig.js in C:\Program Files\Mozilla Firefox\defaults\pref

and have set the lockPref accordingly for each finding. The issue is that some are being set correctly while others arent being changed at all and most changes arent locked. I have edited the config file to not include the comments (except the top one of course) and changed the \n\r and \r\n to be only \n for the entire file so formatting should not be the issue. I have also changed all commas to match the ones settings that work (no luck) - “” rather than ""

These are working - but doesnt have the lock image

lockPref(“security.default_personal_cert”, “Ask Every Time”; lockPref(“signon.rememberSignons”, false); lockPref(“toolkit.telemetry.archive.enabled”, false); lockPref(“browser.search.update”, false); lockPref(“browser.contentblocking.category”, strict); lockPref(“privacy.trackingprotection.cryptomining.enabled”, true); lockPref(“security.tls.version.max”, 4); lockPref(“dom.disable_window_flip”, true); lockPref(“network.protocol-handler.external.shell”, false);


These have Lock image and cannot be changed -working as it should

lockPref(“toolkit.telemetry.enabled”, false);



These are not working:

lockPref(“extensions.update.enabled”, false); lockPref(“dom.event.contextmenu.enabled”, false); lockPref(“extensions.htmlaboutaddons.recommendations.enabled”, false); lockPref(“datareporting.policy.dataSubmissionEnabled”, false); lockPref(“security.ssl3.rsa_des_ede3_sha”, false); lockPref(“security.enterprise_roots.enabled”, true); lockPref(“security.tls.version.min”, 2); lockPref(“browser.formfill.enable”, false) lockPref(“signon.autofillForms”, false); lockPref(“dom.disable_window_move_resize”, true); lockPref(“devtools.policy.disabled”, true);

These dont even show up in firefox:

lockPref(“xpinstall.enabled”, false); lockPref(“plugin.disable_full_page_plugin_for_types”, PDF, FDF, XFDF, LSL, LSO, LSS, IQY, RQY, XLK, XLS, XLT, POT, PPS, PPT, DOS, DOT, WKS, BAT, PS, EPS, WCH, WCM, WB1, WB3, RTF, DOC, MDB, MDE, WBK, WB1, WCH, WCM, AD, ADP); lockPref(“dom.disable_window_open_feature.status”, true); lockPref(“browser.newtabpage.activity-stream.enabled”, false)

below is the config file


// IMPORTANT: The settings applied within this directory are for STIGS compliance.


// Installed version of Firefox unsupported. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-17988

//NEED MANAGED BY OTHER MEANS


// FireFox is configured to ask which certificate to present to a web site when a certificate is required. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15768

lockPref(“security.default_personal_cert”, “Ask Every Time”;


// FireFox is configured to use a password store with or without a master password. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15776

lockPref(“signon.rememberSignons”, false);


// Fingerprinting protection must be enabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102879

lockPref(“privacy.trackingprotection.fingerprinting.enabled”, true);


// Telemetry must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102875

lockPref(“toolkit.telemetry.enabled”, false);


// Telemetry archive must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102877

lockPref(“toolkit.telemetry.archive.enabled”, false);


// Firefox is configured to allow JavaScript to disable or replace context menus. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15986

lockPref(“dom.event.contextmenu.enabled”, false);


// Firefox automatically updates installed add-ons and plugins. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-19742

lockPref(“extensions.update.enabled”, false);


// Firefox automatically checks for updated version of installed Search plugins. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-19744

lockPref(“browser.search.update”, false);


// Enhanced Tracking Protection must be enabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102883

lockPref(“browser.contentblocking.category”, strict);


// Cryptomining protection must be enabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102881

lockPref(“privacy.trackingprotection.cryptomining.enabled”, true);


// Extension recommendations must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102885

lockPref(“extensions.htmlaboutaddons.recommendations.enabled”, false);


// Background submission of information to Mozilla must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-79053

lockPref(“datareporting.policy.dataSubmissionEnabled”, false);


// Deprecated ciphers must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102889

lockPref(“security.ssl3.rsa_des_ede3_sha”, false);


// The DOD Root Certificate is not installed. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-6318 // --Note: In a Windows environment, use of policy setting "security.enterprise_roots.enabled=true" will point Firefox to the Windows Trusted Root Certification Authority Store, this is not a finding.

lockPref(“security.enterprise_roots.enabled”, true);


// Firefox must be configured to allow only TLS. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15983

lockPref(“security.tls.version.min”, 2); lockPref(“security.tls.version.max”, 4);


// Extensions install must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-64891

lockPref(“xpinstall.enabled”, false);


// Firefox is configured to allow JavaScript to raise or lower windows. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15985

lockPref(“dom.disable_window_flip”, true);


// Firefox formfill assistance option is disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15774

lockPref(“browser.formfill.enable”, false)


// Firefox is configured to autofill passwords. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15775

lockPref(“signon.autofillForms”, false);


// Firefox is not configured to prompt a user before downloading and opening required file types. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15772

lockPref(“plugin.disable_full_page_plugin_for_types”, PDF, FDF, XFDF, LSL, LSO, LSS, IQY, RQY, XLK, XLS, XLT, POT, PPS, PPT, DOS, DOT, WKS, BAT, PS, EPS, WCH, WCM, WB1, WB3, RTF, DOC, MDB, MDE, WBK, WB1, WCH, WCM, AD, ADP);


// FireFox plug-in for ActiveX controls is installed. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15773

//NEED MANAGED BY OTHER MEANS


//Firefox automatically executes or downloads MIME types which are not authorized for auto-download. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15770

//NEED MANAGED BY OTHER MEANS


// Network shell protocol is enabled in FireFox. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15771

lockPref(“network.protocol-handler.external.shell”, false);


// FireFox is not configured to block pop-up windows. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15778

lockPref(“dom.disable_window_open_feature.status”, true);


// FireFox is configured to allow JavaScript to move or resize windows. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-15779

lockPref(“dom.disable_window_move_resize”, true);


// Firefox Development Tools Must Be Disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-97529

lockPref(“devtools.policy.disabled”, true);


// Activity Stream must be disabled. // -https://www.stigviewer.com/stig/mozilla_firefox/2020-06-19/finding/V-102887

lockPref(“browser.newtabpage.activity-stream.enabled”, false)


// Created by: Kaige Royal // Date: 2/7/2021

Asked by royal.kaige 11 months ago

Answered by cor-el 11 months ago

  • Solved
  • Archived

Firefox ESR 78.7.0 error - "Failed to read the configuration file"

We currently have a setup where we're installing Firefox ESR 68.10.0 using a .CFG and .JS file for custom configurations. Everything has been working great, but now we h… (read more)

We currently have a setup where we're installing Firefox ESR 68.10.0 using a .CFG and .JS file for custom configurations. Everything has been working great, but now we have a need to update to the latest version of Firefox ESR due to recently-announced security vulnerabilities. I am testing the upgrade to 78.7.0 using the same .CFG and .JS files, and I get the error "Failed to read the configuration file. Please contact your system administrator." at startup. I tried doing a complete uninstall of the old version and install of the new one, keeping the same config files, but the same error comes up. The support documentation for ESR 78.7.0 makes no indication that these configuration files are to be used, instead mentioning that Group Policies should be used for configuration in a Windows environment. But we have various user groups that require specialized configurations, and using the configuration files has worked best for us. Is there any way to keep using the configuration files? If so, what changes would I need to make to the formatting of the files to get them working? Any help is greatly appreciated!

Asked by drepollet 11 months ago

Answered by Mike Kaply 11 months ago

  • Solved
  • Archived

Firefox ESR master password prompt twice

With recent updates of Firefox ESR I'm seeing two master password prompts in FIPS mode when starting up Firefox. This article: https://support.mozilla.org/bm/questions/12… (read more)

With recent updates of Firefox ESR I'm seeing two master password prompts in FIPS mode when starting up Firefox. This article: https://support.mozilla.org/bm/questions/1262314 does not solve my particular problem. The problem I'm seeing behaves exactly how this user describes, except for me it only happens in FIPS mode.

My OS is SUSE Linux Enterprise Server in FIPS mode. My Firefox version is 78.6 ESR with no addons installed.

Disabling FIPS mode fixes the problem but I cannot do that as it goes against company policy.

I have attached two screen shots showing the double master password prompt and after entering the password, the remaining prompt still showing.

Any help is greatly appreciated.

Thanks!

Charles Robertson

Asked by cgrobertson 11 months ago

Answered by Mike Kaply 11 months ago