Set TLS/SSL security policy for IPP printers

Supported on: At least Windows 11 Version 24H2

Registry

HKLM Software\Policies\Microsoft\Windows NT\Printers\IPP

Options

SecurityFlagsBlockUnknownCA boolean

SecurityFlagsBlockCertWrongUsage boolean

SecurityFlagsBlockCertCNInvalid boolean

SecurityFlagsBlockCertDateInvalid boolean

Description

Determines the TLS/SSL security policy (WINHTTP_OPTION_SECURITY_FLAGS) for printers using the Microsoft IPP Class Driver. By default, security policy is set to ignore all certificate errors, allowing use of self-signed certificates for printers. If you enable this setting the system defaults to enabling all certificate checking, disallowing certificate errors. Specific certificate checking can be set with the given checkboxes. If you disable this setting or do not configure it, the default is to ignore all certificate errors (all checkboxes unchecked).