Websites or domains that don't need permission to use direct Security Key attestation

Policy ID: SecurityKeyPermitAttestation
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Edge version 77, Windows 7 or later
Source: Microsoft Edge Policy Templates (version 155.0.4283.45)
Category: Microsoft Edge

Description

Specifies the WebAuthn RP IDs that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use enterprise attestation. Without this policy, users are prompted each time a site requests attestation of security keys.

Example value:

contoso.com

Options

Websites or domains that don't need permission to use direct Security Key attestation

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Microsoft\Edge\SecurityKeyPermitAttestation View registry values

(list values)REG_SZ

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Microsoft\Edge\SecurityKeyPermitAttestation View registry values

(list values)REG_SZ

Other policies in the same category

View all policies in this category (438)