Certificate Revocation Verification Policy for Edge IE Mode Servers After IE Support Termination

Question

Hello

The system you are currently managing is on a closed-network server and you are communicating with SSL (HTTPS, certificate)

However, there is a delay in accessing the Internet because it is a closed network, so uncheck the revocation of the certificate of the server in the Internet Explorer security policy
Users are using it.

When IE service is terminated, the service must be provided using IE mode of Edge (components such as WiseGrid cannot be used)

If I use IE mode on Edge, should I continue to disable the policy within IE?

If IE service is terminated, is it possible to handle the policy?

If it is not possible, I would like to ask you if you can control the revocation of the server's certificate by changing the registry or changing the policy.

As a result of inquiring about Korea Electronic Authentication, I received a response that the firewall in the certificate domain should be registered on the closed network to make it accessible

For security reasons, access to external URLs is not allowed.

I'd appreciate it if you could answer that question

Answer 1

Hi @KJChanE ,

If I use IE mode on Edge, should I continue to disable the policy within IE?

If IE service is terminated, is it possible to handle the policy?

As far as I know, Edge IE mode tabs are actually running Internet Explorer, Edge IE mode supports Internet Explorer settings and group policies that affect security zone settings and Protected Mode. For more details, you can find relevant descriptions in this document.

So in this case, I think you need to keep this setting in IE. And Edge IE mode will be supported until at least 2029. Additionally, Microsoft will give one year of notice before retiring the IE mode experience when the time comes, so you don't have to worry about that. For some FAQs about Edge IE mode, you can refer to this blog: Internet Explorer 11 desktop app retirement FAQ.
Regards,
Xudong Peng

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.