Enable online OCSP/CRL checks

Policy ID: EnableOnlineRevocationChecks
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 77, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge

Description

Online revocation checks don't provide a significant security benefit and are disabled by default.

If you enable this policy, Microsoft Edge performs soft-fail, online OCSP/CRL checks. "Soft fail" means that if the revocation server can't be reached, the certificate is considered valid.

If you disable the policy or don't configure it, Microsoft Edge can't perform online revocation checks.

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Microsoft\Edge View registry values

EnableOnlineRevocationChecksREG_DWORD

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Microsoft\Edge View registry values

EnableOnlineRevocationChecksREG_DWORD

Other policies in the same category

View all policies in this category (438)