en-US

Enable online OCSP/CRL checks

Supported on: Microsoft Edge version 77, Windows 7 or later

Registry

HKLM Software\Policies\Microsoft\Edge
HKCU Software\Policies\Microsoft\Edge

Value name: EnableOnlineRevocationChecks

Enabled: EnableOnlineRevocationChecks = 1

Disabled: EnableOnlineRevocationChecks = 0

Description

Online revocation checks don't provide a significant security benefit and are disabled by default. If you enable this policy, Microsoft Edge performs soft-fail, online OCSP/CRL checks. "Soft fail" means that if the revocation server can't be reached, the certificate is considered valid. If you disable the policy or don't configure it, Microsoft Edge can't perform online revocation checks.