Microsoft.Policies.Printing• Machine

Set TLS/SSL security policy for IPP printers

Determines the TLS/SSL security policy (WINHTTP_OPTION_SECURITY_FLAGS) for printers using the Microsoft IPP Class Driver. By default, security policy is set to ignore all certificate errors, allowing use of self-signed certificates for printers. If you enable this setting the system defaults to enabling all certificate checking, disallowing certificate errors. Specific certificate checking can be set with the given checkboxes. If you disable this setting or do not configure it, the default is to ignore all certificate errors (all checkboxes unchecked).

Policy Details

Policy Name: ConfigureIppTlsCertificatePolicy
Registry Key: Software\Policies\Microsoft\Windows NT\Printers\IPP
Supported On: At least Windows 11 Version 24H2
OMA-URI (CSP): Printers/ConfigureIppTlsCertificatePolicy

OS Build Version:99.9.99999
CSP Version:9.9
Conflict Resolution:LastWrite

Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages: en-us

Configuration Elements

Disallow invalid certificate authority

Type: boolean

True:1

False:0

Disallow non-server certificates

Type: boolean

True:1

False:0

Disallow invalid certificate common name

Type: boolean

True:1

False:0

Disallow invalid certificate date

Type: boolean

True:1

False:0