How to Disable Certificate Filtering in the Offline Address Book Files

  • Article

 

To disable certificate filtering in the offline address book files, perform the following procedure.

Before You Begin

This topic contains information about editing the registry.

Warning

Incorrectly editing the registry can cause serious problems that may require you to reinstall your operating system. Problems resulting from editing the registry incorrectly may not be able to be resolved. Before editing the registry, back up any valuable data.

Procedure

To disable certificate filtering

  1. Start Registry Editor on the Exchange server.

  2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSExchangeSA\Parameters\

  3. If OAL Invalid Cert Behavior does not exist, add a new string value:

    Value: OAL Invalid Cert Behavior

    Type: DWORD _

    Data: 2

    Where the data values represent the following:

    0 = filter out expired and invalid certificates

    1 = filter out only expired certificates

    2 = do not filter the UserCertificate attribute.