Policy
Websites or domains that don't need permission to use direct Security Key attestation
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Specifies the WebAuthn RP IDs that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use enterprise attestation. Without this policy, users are prompted each time a site requests attestation of security keys. Example value: contoso.com
Internal name
SecurityKeyPermitAttestation
Policy ID
8c9368aeb49b
Elements
1
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Websites or domains that don't need permission to use direct Security Key attestation ID SecurityKeyPermitAttestationDesc | list | Path Software\Policies\Microsoft\Edge\SecurityKeyPermitAttestation Value name 1, 2, … Type REG_SZ | List: standard |
Websites or domains that don't need permission to use direct Security Key attestation
Registry mapping
Path
Software\Policies\Microsoft\Edge\SecurityKeyPermitAttestation
Value name
1, 2, …
Type
REG_SZ
Details
List: standard