Article ID: 946323 - Last Review: December 18, 2007 - Revision: 1.1

Internet Explorer 7 does not send you any notification if it cannot obtain the Certificate Revocation List

INTRODUCTION

By default, the Check for server certificate revocation option in Windows Internet Explorer 7 is enabled. However, Internet Explorer 7 may be unable to obtain the Certificate Revocation List (CRL). For example, the server that hosts the CRL may be down. If Internet Explorer 7 cannot obtain the CRL, Internet Explorer 7 does not send you any notification.

This behavior is by design. However, you can use the method that is described in the "More information" section to receive a notification when Internet Explorer 7 cannot obtain the CRL.

MORE INFORMATION

To receive a notification when Internet Explorer 7 cannot obtain the CRL, follow these steps.

Note The nature of the notification is that the address bar of Internet Explorer changes to yellow when Internet Explorer 7 cannot obtain the CRL.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756  (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows
  1. Click Start, click Run, type regedit, and then press ENTER.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
  3. On the Edit menu, point to New, and then click Key.
  4. Type the following key name, and then press ENTER:
    FEATURE_WARN_ON_SEC_CERT_REV_FAILED
  5. On the Edit menu, point to New, and then click DWORD Value.
  6. Type iexplore.exe, and then press ENTER.
  7. On the Edit menu, click Modify.
  8. Type 1, and then click OK.
  9. Exit Registry Editor.
To disable the Check for server certificate revocation option, follow these steps:
  1. Start Internet Explorer 7.
  2. On the Tools menu, click Internet Options.
  3. Click the Advanced tab.
  4. Under Security, click to clear the Check for server certificate revocation check box.

Keywords: 
kbexpertisebeginner kbexpertiseadvanced kbprb KB946323

Note: This article is from Microsoft Knowledage Base


How we have helped PC users like you

In the News: Read More In ...

Related problems posted by other users

more...