How to Enable or Disable SSL Certificate Error Overrides in Microsoft Edge in Windows 10


Microsoft Edge is a new web browser that is available across the Windows 10 device family. It is designed for Windows 10 to be faster, safer, and compatible with the modern Web.

Web security certificates are used to ensure a site that users go to is legitimate, and in some circumstances, encrypts the data.

By default, Microsoft Edge allows overriding of the security warnings to sites that have SSL errors, bypassing or ignoring certificate errors.

Starting with Windows 10 build 17713 (announced in Windows 10 build 17723), you can use a new Prevent certificate error overrides group policy to enable or disable users from bypassing the security warning to sites that have SSL errors.

This tutorial will show you how to enable or disable web security SSL certificate error overrides in Microsoft Edge for all users in Windows 10.

You must be signed in as an administrator to enable or disable certificate error overrides in Microsoft Edge.


 CONTENTS:

  • Option One: Enable or Disable Certificate Error Overrides in Microsoft Edge in Local Group Policy Editor
  • Option Two: Enable or Disable Certificate Error Overrides in Microsoft Edge using a REG file


EXAMPLE: Certificate error overrides enabled and disabled in Microsoft Edge
Disable Certificate Error Overrides in Microsoft Edge in Windows 10-microsoft_edge_certificate_error_overrides_enabled.png Disable Certificate Error Overrides in Microsoft Edge in Windows 10-microsoft_edge_certificate_error_overrides_disabled.png






OPTION ONE

Enable or Disable Certificate Error Overrides in Microsoft Edge in Local Group Policy Editor



The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option TWO below.


1. Open the Local Group Policy Editor.

2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge

Disable Certificate Error Overrides in Microsoft Edge in Windows 10-microsoft_edge_certificate_error_overrides_gpedit-1.jpg

3. In the right pane of Microsoft Edge in Local Group Policy Editor, double click/tap on the Prevent certificate error overrides policy to edit it. (see screenshot above)

4. Do step 5 (enable) or step 6 (disable) below for what you want.


 5. To Enable Certificate Error Overrides in Microsoft Edge

A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Not Configured is the default setting.


 6. To Disable Certificate Error Overrides in Microsoft Edge

A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Disable Certificate Error Overrides in Microsoft Edge in Windows 10-microsoft_edge_certificate_error_overrides_gpedit-2.png

7. You can close the Local Group Policy Editor if you like.

8. If Microsoft Edge is currently open, then close and reopen the browser to apply.






OPTION TWO

Enable or Disable Certificate Error Overrides in Microsoft Edge using a REG file



The downloadable .reg files below will add and modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings

PreventCertErrorOverrides DWORD

delete = Enable
1 = Disable


1. Do step 2 (enable) or step 3 (disable) below for what you want.


 2. To Enable Certificate Error Overrides in Microsoft Edge

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_certificate_error_overrides_in_Microsoft_Edge.reg

Download


 3. To Disable Certificate Error Overrides in Microsoft Edge

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_certificate_error_overrides_in_Microsoft_Edge.reg

Download


4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. If Microsoft Edge is currently open, then close and reopen the browser to apply.

8. If you like, you can now delete the downloaded .reg file.



That's it,
Shawn