Edit

Share via

CACertificateManagementAllowed

  • Article

Allow users to manage installed CA certificates.

Supported versions

  • On Windows and macOS since 133 or later

Description

This policy determines the level of access users have when managing CA certificates in Microsoft Edge.

Setting the policy to UserOnly (1) allows users to manage only user-imported certificates. Trust settings for built-in certificates cannot be changed.

Setting the policy to None (2) lets users view certificates but not manage them.

Note: The certificate management experience is available starting in Microsoft Edge version 136.

Policy options mapping:

  • All (0) = Allow users to manage all certificates

  • UserOnly (1) = Allow users to manage user certificates

  • None (2) = Disallow users from managing certificates

Use the preceding information when configuring this policy.

Policy options mapping:

Use this information when configuring this policy.

  • All (0) = Allow users to manage all certificates
  • UserOnly (1) = Allow users to manage user certificates
  • None (2) = Disallow users from managing certificates

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • Integer

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: CACertificateManagementAllowed
  • GP name: Allow users to manage installed CA certificates.
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Certificate management settings
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Allow users to manage user certificates

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: CACertificateManagementAllowed
  • Value type: REG_DWORD

Example registry value

0x00000001

Mac information and settings

  • Preference Key name: CACertificateManagementAllowed
  • Example value:
<integer>1</integer>

See also