Enable online OCSP/CRL checks
Jump to overview

Policy overview

Key metadata and intent for this policy.

Category
Microsoft Edge
Supported on
Microsoft Edge version 77, Windows 7 or later

Supported OS tags: Windows7

Online revocation checks don't provide a significant security benefit and are disabled by default. If you enable this policy, Microsoft Edge performs soft-fail, online OCSP/CRL checks. "Soft fail" means that if the revocation server can't be reached, the certificate is considered valid. If you disable the policy or don't configure it, Microsoft Edge can't perform online revocation checks.

Internal name
EnableOnlineRevocationChecks
Policy ID
7cb288022bd9
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Path
Software\Policies\Microsoft\Edge
Value name
EnableOnlineRevocationChecks
REG_DWORD
HKLM
1
HKCU
1
HKLM
0
HKCU
0
Registry location
Type REG_DWORD · Both
Path
Software\Policies\Microsoft\Edge
Value name
EnableOnlineRevocationChecks
Hive
HKLM
Enabled value
1
Disabled value
0
Hive
HKCU
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.