Policy
Disable Certificate Transparency enforcement for specific URLs
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Disables enforcing Certificate Transparency requirements for the listed URLs. This policy lets you not disclose certificates for the hostnames in the specified URLs via Certificate Transparency. This lets you use certificates that would otherwise be untrusted, because they weren't properly publicly disclosed, but it makes it harder to detect mis-issued certificates for those hosts. Form your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322. Because certificates are valid for a given hostname, independent of the scheme, port, or path, only the hostname part of the URL is considered. Wildcard hosts aren't supported. If you don't configure this policy, any certificate that should be disclosed via Certificate Transparency is treated as untrusted if it's not disclosed. This policy doesn't work as expected with file://* wildcards. Example value: contoso.com .contoso.com
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Disable Certificate Transparency enforcement for specific URLs ID CertificateTransparencyEnforcementDisabledForUrlsDesc | list | Path Software\Policies\Microsoft\Edge\CertificateTransparencyEnforcementDisabledForUrls Value name 1, 2, … Type REG_SZ | List: standard |