Require online OCSP/CRL checks for local trust anchors

Policy ID: RequireOnlineRevocationChecksForLocalAnchors
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Windows 7 or later
Source: Google Chrome Policy Templates (version 156.0.8078.80)
Category: Google › Google Chrome

Description

Setting the policy to True means Google Chrome always performs revocation checking for successfully validated server certificates signed by locally installed CA certificates. If Google Chrome can't get revocation status information, Google Chrome treats these certificates as revoked (hard-fail).

Setting the policy to False or leaving it unset means Google Chrome uses existing online revocation-checking settings.

On macOS, this policy has no effect if the ChromeRootStoreEnabled policy is set to False.

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Google\Chrome View registry values

RequireOnlineRevocationChecksForLocalAnchorsREG_DWORD

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Google\Chrome View registry values

RequireOnlineRevocationChecksForLocalAnchorsREG_DWORD

Other policies in the same category

View all policies in this category (235)