Bug 2066822 - Enables enterprise storage encryption by default

- Flips security.storage.encryption.enabled to true
- Removes the policy EnterpriseStorageEncryption

Author: 1rneh

browser/components/enterprisepolicies/Policies.sys.mjs

@@ -1899,15 +1899,6 @@ export var Policies = {
     },
   },
 
-  EnterpriseStorageEncryption: {
-    onBeforeUIStartup(manager, param) {
-      lazy.PoliciesUtils.setAndLockPref(
-        "security.storage.encryption.enabled",
-        param
-      );
-    },
-  },
-
   ExemptDomainFileTypePairsFromFileTypeDownloadWarnings: {
     // This policy is handled directly in EnterprisePoliciesParent.sys.mjs
     // and requires no validation (It's done by the schema).
@@ -3055,7 +3046,6 @@ export var Policies = {
         "security.pki.certificate_transparency.disable_for_hosts",
         "security.pki.certificate_transparency.disable_for_spki_hashes",
         "security.pki.certificate_transparency.mode",
-        "security.storage.encryption.enabled",
         "security.ssl.enable_ocsp_stapling",
         "security.ssl.errorReporting.enabled",
         "security.ssl.require_safe_negotiation",

browser/components/enterprisepolicies/helpers/sample_enterprise_storage_encryption.json

@@ -2118,19 +2118,6 @@
       }
     },
 
-    "EnterpriseStorageEncryption": {
-      "type": "boolean",
-      "x-category": "Miscellaneous",
-      "x-compatibility": {
-        "firefox": { "version_added": false },
-        "firefox_esr": { "version_added": false },
-        "firefox_enterprise": { "version_added": "149" }
-      },
-      "x-restart-required": true,
-      "description": "Enable an enterprise-managed primary password so that stored credentials and other sensitive profile data are kept encrypted at rest.",
-      "examples": [true]
-    },
-
     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": {
       "type": "array",
       "x-category": "Network security",

browser/components/enterprisepolicies/helpers/sample_storage_encryption.json

@@ -888,13 +888,6 @@ const POLICIES_TESTS = [
     },
   },
 
-  // POLICY: EnterpriseStorageEncryption
-
-  {
-    policies: { EnterpriseStorageEncryption: true },
-    lockedPrefs: { "security.storage.encryption.enabled": true },
-  },
-
   // POLICY: PDFjs
 
   {

browser/components/enterprisepolicies/schemas/policies-schema.json

@@ -9,7 +9,6 @@ policy-ContentAnalysisTelemetry = Enable and configure security logging/telemetr
 policy-DataLossPrevention = Enable and configure built-in data loss prevention (DLP) engine.
 policy-DisableLocalPolicies = Disable all local policy sources (policies.json, Windows GPO and macOS plist).
 policy-DownloadTelemetry = Enable and configure security logging/telemetry when a download is triggered.
-policy-EnterpriseStorageEncryption = Enable enterprise-managed primary password for encrypted storage.
 policy-PrintPageTelemetry = Enable and configure security logging/telemetry when a page is printed.
 policy-Sync = Enable or disable sync and define which data to include.
 policy-CrashReportsSubmit = Configure crash report submission settings.

browser/components/enterprisepolicies/tests/xpcshell/test_simple_pref_policies.js

@@ -19246,11 +19246,13 @@
   value: true
   mirror: always
 
+#if defined(MOZ_ENTERPRISE) && !defined(MOZ_THUNDERBIRD)
 # Enable storage encryption functionality.
 - name: security.storage.encryption.enabled
   type: bool
-  value: false
+  value: true
   mirror: always
+#endif
 
 # INTERNAL -- DO NOT ENABLE. Master switch for SQLite database encryption
 # via obfsvfs; enabling without the rest of the key-management stack will

browser/locales/en-US/browser/enterprise/enterprise-policies-descriptions.ftl

@@ -13,10 +13,6 @@
 do_get_profile();
 
 add_task(async function test_enterprise_logout_keeps_token_unlocked() {
-  Services.prefs.setBoolPref("security.storage.encryption.enabled", true);
-  registerCleanupFunction(() =>
-    Services.prefs.clearUserPref("security.storage.encryption.enabled")
-  );
 
   const secret = "primary-secret";
   let token = Cc["@mozilla.org/security/internalkeytoken;1"].createInstance(