Microsoft Root Certificate Update

Posted By admin On 25.01.20
Active3 years, 5 months ago

At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. A core component of our strategy to inform Windows users about the safety of the websites, apps and software they’re accessing online is built into the Microsoft Trusted Root Certificate Program. The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.

I need to disable the following group policy in Windows 7 programatically, for example by modifying a registry key using Powershell:

'Turn Off Automatic Root Certificates Update'

Does anybody know which registry key needs to be set or unset in order to make this work?

ErikErik
9318 gold badges22 silver badges46 bronze badges

3 Answers

I had a similar issue when i was creating an application that communicated with a server over HTTPS using two-way SSL.

This was causing a delay of a full minute when the initial request was made

It ran in WinPE where hand clicking through the local group policy editor was not an option.There also is no way I am aware of to register a root authority in this environment and it is running in an incredibly restricted environment so it can not access windows update (not that it would find our corporate CA there anyway).

The registry value you are looking for is

HKLMSoftwarePoliciesMicrosoftSystemCertificatesAuthRoot

DWORD DisableRootAutoUpdate = 1

Source: http://www.group-policy.com/ref/policy/452/Turn_off_Automatic_Root_Certificates_Update

JoshHetlandJoshHetland

To turn off Automatic Root Certificates Update via Local Group Policy Editor:

  1. Click Start, and then click Run.
  2. Type gpedit.msc, and then click OK.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. Under computer configuration, Double-click Administrative Templates, double-click System, double-click Internet Communication Management, and then click Internet Communication settings.
  5. Double-click Turn off Automatic Root Certificates Update, click Enabled, and then click OK.
  6. Close the Local Group Policy Editor.
Microsoft Root Certificate Update
Passing ByPassing By

Domain policies override local settings. That's how they're supposed to work (they'd be rather useless otherwise). If you want the policy disabled, disable or remove the policy in Group Policy Management or remove the computer from the domain.

Counter strike 1.9 download free. One of the missions is to deploy a bomb at a certain location.

Ansgar Wiechers

Microsoft Root Certificate Update Url

Ansgar Wiechers
154k15 gold badges144 silver badges205 bronze badges

Microsoft Root Certificate Update For Xp

Not the answer you're looking for? Browse other questions tagged powershellwindows-7registrygroup-policy or ask your own question.