TLS certificates that should be distrusted by Microsoft Edge for server authentication

Policy ID: CADistrustedCertificates
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 133, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge › Certificate management settings

Description

This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server
authentication.

The policy value is a list of base64-encoded X.509 certificates. Any
certificate with a matching SPKI (SubjectPublicKeyInfo) is distrusted.

Example value:

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

Options

TLS certificates that should be distrusted by Microsoft Edge for server authentication

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Microsoft\Edge\CADistrustedCertificates View registry values

(list values)REG_SZ

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Microsoft\Edge\CADistrustedCertificates View registry values

(list values)REG_SZ

Other policies in the same category

View all policies in this category (6)