Policy
Set TLS/SSL security policy for IPP printers
Determines the TLS/SSL security policy (WINHTTP_OPTION_SECURITY_FLAGS) for printers using the Microsoft IPP Class Driver. By default, security policy is set to ignore all certificate errors, allowing use of self-signed certificates for printers. If you enable this setting the system defaults to enabling all certificate checking, disallowing certificate errors. Specific certificate checking can be set with the given checkboxes. If you disable this setting or do not configure it, the default is to ignore all certificate errors (all checkboxes unchecked).
f82c6e32bcd0 ConfigureIppTlsCertificatePolicy Registry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows NT\Printers\IPP\SecurityFlagsBlockUnknownCAHKLM\Software\Policies\Microsoft\Windows NT\Printers\IPP\SecurityFlagsBlockCertWrongUsageHKLM\Software\Policies\Microsoft\Windows NT\Printers\IPP\SecurityFlagsBlockCertCNInvalidHKLM\Software\Policies\Microsoft\Windows NT\Printers\IPP\SecurityFlagsBlockCertDateInvalidPolicy notes
Determines the TLS/SSL security policy (WINHTTP_OPTION_SECURITY_FLAGS) for printers using the Microsoft IPP Class Driver. By default, security policy is set to ignore all certificate errors, allowing use of self-signed certificates for printers. If you enable this setting the system defaults to enabling all certificate checking, disallowing certificate errors. Specific certificate checking can be set with the given checkboxes. If you disable this setting or do not configure it, the default is to ignore all certificate errors (all checkboxes unchecked).