Enable App Installer Microsoft Store Source Certificate Validation Bypass

Policy ID
EnableBypassCertificatePinningForMicrosoftStore
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10 Version 1809
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Desktop App Installer

Description

This policy controls whether the Windows Package Manager will validate the Microsoft Store certificate hash matches to a known Microsoft Store certificate when initiating a connection to the Microsoft Store Source.

If you enable this policy, the Windows Package Manager will bypass the Microsoft Store certificate validation.

If you disable this policy, the Windows Package Manager will validate the Microsoft Store certificate used is valid and belongs to the Microsoft Store before communicating with the Microsoft Store source.

If you do not configure this policy, the Windows Package Manager administrator settings will be adhered to.

Registry

ComputerHKEY_LOCAL_MACHINE
  • EnableBypassCertificatePinningForMicrosoftStoreREG_DWORD

Other policies in the same category

View all policies in this category (15)