Microsoft KB Archive/946323

= Internet Explorer 7 does not send you any notification if it cannot obtain the Certificate Revocation List =

Article ID: 946323

Article Last Modified on 12/18/2007

-

APPLIES TO


 * Windows Internet Explorer 7

-



INTRODUCTION
By default, the Check for server certificate revocation option in Windows Internet Explorer 7 is enabled. However, Internet Explorer 7 may be unable to obtain the Certificate Revocation List (CRL). For example, the server that hosts the CRL may be down. If Internet Explorer 7 cannot obtain the CRL, Internet Explorer 7 does not send you any notification.

This behavior is by design. However, you can use the method that is described in the &quot;More information&quot; section to receive a notification when Internet Explorer 7 cannot obtain the CRL.



MORE INFORMATION
To receive a notification when Internet Explorer 7 cannot obtain the CRL, follow these steps.

Note The nature of the notification is that the address bar of Internet Explorer changes to yellow when Internet Explorer 7 cannot obtain the CRL.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows XP and Windows Vista

 Click Start, click Run, type regedit, and then press ENTER . Locate and then click the following registry subkey:

 On the Edit menu, point to New, and then click Key. Type the following key name, and then press ENTER:

FEATURE_WARN_ON_SEC_CERT_REV_FAILED

 On the Edit menu, point to New, and then click DWORD Value. Type iexplore.exe, and then press ENTER. On the Edit menu, click Modify.</li> Type 1, and then click OK.</li> Exit Registry Editor.</li></ol>

To disable the Check for server certificate revocation option, follow these steps:
 * 1) Start Internet Explorer 7.
 * 2) On the Tools menu, click Internet Options.
 * 3) Click the Advanced tab.
 * 4) Under Security, click to clear the Check for server certificate revocation check box.

Keywords: kbexpertisebeginner kbexpertiseadvanced kbprb KB946323

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.