Disable IE server certificate revocation check

Press the Win key + R or right click on the Start Menu and choose Run to launch a Run dialog. Then run inetcpl.cpl to open Internet Properties.

Go to the Advanced tab, uncheck the following three options under the Security category:

• Check for publisher's certificate revocation
• Check for server certificate revocation
• Check for signatures on downloaded programs

If you are unable to change the settings through the user interface, download and import the registry key from https://joji.blob.core.windows.net/recipe/disable-ie-server-cert-revocation-check.reg or set the following registry keys to disable IE server certificate revocation check:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="no"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]
"CertificateRevocation"=dword:00000000

If you want to re-enable the IE server certificate revocation check, please run inetcpl.cpl to open the Internet Properties again and enable following three options under the Security category:

• Check for publisher's certificate revocation
• Check for server certificate revocation
• Check for signatures on downloaded programs

If you disabled the IE server certificate check by importing registry keys, then please delete the following registry keys:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="no"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]
"CertificateRevocation"=dword:00000000