"Prevent ignoring certificate errors" for Microsoft Edge on 2012 R2

Question

I am trying to disable the option to "Continue to hostname (unsafe)" when Microsoft Edge (Chromium) checks the cert and it returns as not secure.

I can set this for IE (Internet Options) and there seems to be policy settings for Win10 (Prevent ignoring certificate errors) but I cannot find any way to disable the "Continue" option on 2012 R2.

Does anyone know if this is possible and who it can be done?

Thanks in advance.

Answer 1

That works!!

How did I miss that other policy setting??

Thanks for taking the time to help with this.

For the sake of anyone following or finding this the policy to use to prevent users ignoring and proceeding from SSL certificate errors in Edge browser is this one:

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#sslerroroverrideallowed

Thanks again! :)

Answer 2

Hi,

As you mentioned above, we can use the group policy: Prevent ignoring certificate errors to disable the option to "Continue to hostname (unsafe)" for IE.
And we can use the policy: Disable Certificate Error Overrides in Microsoft Edge. But it only available on Windows 10 Pro, Enterprise, and Education editions.

On other editions, you can use the registry to do this:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings
PreventCertErrorOverrides DWORD
delete = Enable
1 = Disable

For more details, you can refer to the following link:
https://www.tenforums.com/tutorials/114865-disable-certificate-error-overrides-microsoft-edge-windows-10-a.html

This response contains a third-party link. We provide this link for easy reference. Microsoft cannot guarantee the validity of any information and content in this link.

Best Regards,

Answer 3

Thanks but this is only for other Win10 editions. I am looking for a way to prevent cert override on 2012 R2.

Setting this in the registry of a 2012 R2 machine does not have any effect and the option to "Continue to hostname (unsafe)" still appears.

Answer 4

Thanks anyway for your help so far.

Really hope someone can help with this one.

Answer 5

Can anyone confirm if they have this setting set and working - even on a Win10 computer?

I thought it was just 2012R2 these did not work in but I have tried setting in Group Policy, Local Policy, and Registry and it still allows "Continue to hostname (unsafe)" even on Edge on a Win10 computer.

Has anyone tested (or can they test and confirm) the settings in the first response above actually work?