Check CRL for Microsoft Outlook security profile creation and Publish to GAL

Defines if a CRL check is required in order to automatically configure email certificates in Microsoft Outlook and to automatically publish certificates to the GAL. If "enabled and enforced", the operation is not performed if the CRL is unavailable or if the certificate status is revoked or on hold. If "enabled and not enforced", the operation is performed and a Microsoft Windows event warning is created if the CRL is unavailable or if the certificate status is revoked or on hold. If disabled, the operation is performed regardless of the CRL check status.

If the setting is not configured, it is set to "Enabled and enforced".


Supported on: At least Windows Vista SP1
Check CRL policy


  1. Disabled
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\HID Global\ActivClient\CertificateRegistration\Outlook
    Value NameCRLCheck
    Value TypeREG_DWORD
    Value0
  2. Enabled and enforced
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\HID Global\ActivClient\CertificateRegistration\Outlook
    Value NameCRLCheck
    Value TypeREG_DWORD
    Value1
  3. Enabled and not enforced
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\HID Global\ActivClient\CertificateRegistration\Outlook
    Value NameCRLCheck
    Value TypeREG_DWORD
    Value2


hidglobal.activclient.admx

Administrative Templates (Computers)