Edit

Share via


MicrosoftRootStoreEnabled

Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete)

OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge version 114.

Supported versions

  • On Windows and macOS since 109, until 114

Description

When this policy is set to enabled, Microsoft Edge will perform verification of server certificates using the built-in certificate verifier with the Microsoft Root Store as the source of public trust.

When this policy is set to disabled, Microsoft Edge will use the system certificate verifier and system root certificates.

When this policy is not set, the Microsoft Root Store or system provided roots may be used.

This policy is planned to be removed in Microsoft Edge version 121 for Android devices when support for using the platform supplied roots is planned to be removed.

This policy was removed in Microsoft Edge version 115 for Microsoft Windows and macOS, Microsoft Edge version 120 for Linux, and Microsoft Edge version 121 for Android when support for using the platform supplied certificate verifier and roots was removed.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • Boolean

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: MicrosoftRootStoreEnabled
  • GP name: Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete)
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Disabled

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: MicrosoftRootStoreEnabled
  • Value type: REG_DWORD

Example registry value

0x00000000

Mac information and settings

  • Preference Key name: MicrosoftRootStoreEnabled
  • Example value:
<false/>

See also