AutoSelectCertificateForUrls does not work on Windows 10 with chrome v59

2,629 views
Skip to first unread message

Ronen Shurer

unread,
Jun 25, 2017, 2:57:24 AM6/25/17
to Chromium-discuss
Trying to set AutoSelectCertificateForUrls in the registry under
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\AutoSelectCertificateForUrls
Using the simplest pattern {"pattern":"[*.]","filter":{}}
However, when browsing to chrome://policy the policy is not listed.
This works on a Windows 7 machine, but doesn't work on Windows 10 (Ent or Home), both under latest chrome v59.

The question is: how can i make it work on a Windows 10 machine?
Side note: the windows 10 machines are non-domain members.

Julian Pastarmov

unread,
Jun 26, 2017, 4:44:27 AM6/26/17
to Chromium-discuss
How do you set the policy on your non-domain joined machine? If you are using the GPO editor locally on the machine it should work. If you are directly setting the policy in the registry it will not work (which is true for Win 7 as well).

-Julian

posix99

unread,
Jun 28, 2017, 4:48:18 AM6/28/17
to Chromium-discuss
Thanks. 
Do you have documented reference for that? 
It used to work prior to v59.

by the way, the 'registry way' does work on win7, even with v59.

posix99

unread,
Jul 3, 2017, 9:06:10 AM7/3/17
to Chromium-discuss
Appreciate any further input on the matter.

Marc Rasmussen

unread,
Jul 11, 2017, 1:04:17 PM7/11/17
to Chromium-discuss
I have the same problem.
Using Windows 8.1, Chrome is showing the policies, but on Windows 10 Chrome doesn't show any.
On my Windows 10 machine, the registry way never worked (no matter which version of Chrome I was using).

Marc

Julian Pastarmov

unread,
Jul 12, 2017, 3:32:05 AM7/12/17
to Chromium-discuss
Hi,

As I mentioned the difference is not in the windows version but the domain joined part. Policies on a domain joined machine can be set directly in the registry in contrast to policies on non-domain joined machines that need to come through GPO explicitly (even-though they show up as a registry keys too). In some rare cases policies set through the registry might be picked up by Chrome on non-domain joined machines but this is not something to rely upon in production.

-Julian

posix99

unread,
Sep 27, 2017, 8:30:23 AM9/27/17
to Chromium-discuss
To emphasize what Julian wrote, i have found an official technical document https://support.google.com/chrome/a/answer/187202?hl=en

ZHEBIN QIU

unread,
Nov 26, 2017, 6:00:15 AM11/26/17
to Chromium-discuss


在 2017年6月25日星期日 UTC+8下午2:57:24,posix99写道:
Facing the same problem
I am using Windows 10 v1709
Chrome v62
For developer Identify purpose, paste my exported reg file as:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\AutoSelectCertificateForUrls]
"1"="{\"pattern\":\"xxx.xxxx.com\",\"filter\":{\"ISSUER\":{\"CN\":\"strongSwan CA\"}}}"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Google\Chrome\AutoSelectCertificateForUrls]
"1"="{\"pattern\":\"xxx.xxxx.com\",\"filter\":{\"ISSUER\":{\"CN\":\"strongSwan CA\"}}}"

(for privacy, xxxx is not the real site.)

But while I am visiting, pop up as selection dialogue

By visiting chrome://policy/, empty

Anything further should I do?
 
As I have a windows 7 laptop, works properly. But under windows 10, doesn't work
Reply all
Reply to author
Forward
0 new messages