Edit

SetReg

  • Article

The SetReg tool sets the value of the registry keys that control the behavior of the Authenticode certificate verification process. These keys are called the Software Publishing State Keys. After completing the requested action, the tool displays the current state of the Software Publishing State Keys.

SetReg [Options] [Choice # {TRUE|FALSE}]

The Set Registry tool only ships with the .NET Framework SDK version 1.0 and .1.1, which you can download from here.

Options

The options can be one of the following values. Options given in the following table can be used only with Internet Explorer 4.0 or later.

Option Description
-q Suppress the display of the Software Publishing State Key values after SetReg has completed the requested action. The values are displayed by default.
-? List command syntax and options.

 

Choice #

Choice # must be one of the following values.

Choice Description Result
1 Trust the Test Root This value is ignored.Windows XP/2000: If TRUE, trusts a test root. This is equivalent to running "regedit wvtston.reg" in Internet Explorer 3.x.
The default is FALSE. Any file signed with a test root will not verify unless this flag is set to TRUE. Note that this behavior has changed with Windows XP with Service Pack 1 (SP1) because Windows XP with SP1 ignores this value.
2 Use expiration date on certificates If TRUE, checks the certificate expiration date. To ignore expiration dates, set this flag to FALSE. The default is TRUE.
3 Check the revocation list If TRUE, performs the revocation check. To bypass revocation check, set this flag to FALSE. The default is TRUE.Internet Explorer 3.x: The default is FALSE.
4 Offline Revocation server OK (Individual)
 If TRUE, allows offline approval for individual certificates. The default is FALSE.
5 Offline Revocation server OK (Commercial)
 If TRUE, allows offline approval for commercial certificates. The default is TRUE.
6 Java offline Revocation server OK (Individual)
 If TRUE, allows offline approval for individual certificates and does not display the user interface for bad certificates. The default is FALSE.
7 Java offline Revocation server OK (Commercial)
 If TRUE, allows offline approval for commercial certificates and does not display the user interface for bad certificates. The default is TRUE.
8 Make version 1 signed objects no longer valid If TRUE, makes version 1 signed objects no longer valid. The default is FALSE.
9 Check the revocation list of the time stamp server If TRUE, performs the revocation check on the time stamp server's certificate. The default is FALSE.Internet Explorer 3.x: This value is not supported.
10 Only trust items found in the Trust database If TRUE, allows downloads from publishers that are contained in the Personal Trust Database. The default is FALSE. Internet Explorer 3.x: This value is not supported.