On the about:policies page, only the ones on the Active panel are actually in effect. The most common is "ImportEnterpriseRoots". Is that the one you see?

ImportEnterpriseRoots instructs Firefox to trust not only its own set of SSL certificates, but the ones installed in the Windows Certificate Store. Can you trust that? I believe malware attacks the system certificate store way more often than Firefox's cert9.db file, but if you have malware on your system, that is a bigger issue than Firefox trusting a questionable website.

In a perfect world, though, you would control whether this setting is on or off.

Policies can be applied through the Windows Registry -- this is more typical in a business where an IT department manages your computer. On a home computer, a file named policies.json in the program folder is the most common scenario. Here's how you can track it down:

Typically, on 64-bit Windows, Firefox installs in:

C:\Program Files\Mozilla Firefox

A policies.json file would be here if you have one:

C:\Program Files\Mozilla Firefox\distribution

You may need admin privileges to edit/delete the policies.json file. What you might want to try is editing it by removing its contents, then marking it Read Only to try to prevent whatever process is inserting it from restoring the original policy.

Hello, Thank you for the info. However, policies.json does not exist on this computer... at all.

This is a brand new computer. There better not be any malware.

What policies do you see on the Active panel?

I added a screen shot

Hmm, I haven't heard of these two extensions before. They seem to be associated with HP security software:

• https://www.google.com/search?q="firefoxhpsureclicksecurebrowsing@bromium.com"
• https://www.google.com/search?q="firefoxhpwolfsecurityextension@bromium.com"

The policy prevents those from being installed on Firefox, and removes them if Firefox detects them at startup. (Ref: https://mozilla.github.io/policy-templates/#extensionsettings)

Can you think of any reason for that policy to exist on your computer?

That is the security program built into the os on the new computer. I uninstalled it, but I still reference to it on boot. I will follow-up on the uninstall, and report back.

Thank you! I didn’t see that.