en-US

Specify if online OCSP/CRL checks are required for local trust anchors

Supported on: Microsoft Edge version 123, Windows 7 or later

Registry

HKLM Software\Policies\Microsoft\Edge
HKCU Software\Policies\Microsoft\Edge

Value name: RequireOnlineRevocationChecksForLocalAnchors

Enabled: RequireOnlineRevocationChecksForLocalAnchors = 1

Disabled: RequireOnlineRevocationChecksForLocalAnchors = 0

Description

Control whether online revocation checks (OCSP/CRL checks) are required. If Microsoft Edge can't get revocation status information, these certificates are treated as revoked ("hard-fail"). If you enable this policy, Microsoft Edge always performs revocation checking for server certificates that successfully validate and are signed by locally installed CA certificates. If you don't configure or disable this policy, then Microsoft Edge uses the existing online revocation checking settings. On macOS, this policy has no effect if the 'MicrosoftRootStoreEnabled' (Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates) policy is set to False.