Policy
Check for server certificate revocation
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have been compromised or are no longer valid, and this option protects users from submitting confidential data to a site that may be fraudulent or not secure. If you enable this policy setting, Internet Explorer will check to see if server certificates have been revoked. If you disable this policy setting, Internet Explorer will not check server certificates to see if they have been revoked. If you do not configure this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CertificateRevocation | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- UserAllow active content from CDs to run on user machinesAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- ComputerAllow active content from CDs to run on user machinesAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- UserAllow Install On Demand (except Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Install On Demand (except Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Install On Demand (Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- UserAllow Install On Demand (Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Internet Explorer to use the HTTP2 network protocolAt least Internet Explorer 11.0 on Windows 10
- UserAllow Internet Explorer to use the HTTP2 network protocolAt least Internet Explorer 11.0 on Windows 10
- ComputerAllow Internet Explorer to use the SPDY/3 network protocolOnly Internet Explorer 11.0 on Windows 8.1
- UserAllow Internet Explorer to use the SPDY/3 network protocolOnly Internet Explorer 11.0 on Windows 8.1
- ComputerAllow software to run or install even if the signature is invalidAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- UserAllow software to run or install even if the signature is invalidAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1