====== Internet Explorer ====== ===== Add your Certificate of Authority (registry based) ===== Root certificate in Microsoft Windows (and thus Internet Explorer (6 and 7 tested)) are in the registry at key ''HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\Certificates\''. In order to add your own certificate in it, I suggest to do the following. - Export the key to a ''.reg'' file. - Manually add your certificate (double-click on the certificate and follow steps (add in the Trusted Authority store)) - Export again the key to another ''.reg'' file. - With [[deb>diff]] create a diff of both file. The resulting just need to be merged into the registry and your certificate is valid. ===== Disable SSL2 and enable TLSv1.0 and SSL3 in IE (6 or 7) (registry based) ===== This is done with the key ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings''. Set the value ''SecureProtocols'' to a ''REG_DWORD'' with value 160. ===== Add a site web in a zone ===== To add a particular site into a zone it works like this. Under the key ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\'' you can add website. For example for ''https://*.tchetch.net/'' as a trusted site : - Add the key ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tchetch.net'' - For that key add the value ''https'' as ''REG_DWORD'' with value 2. If you want to add ''http://*.tchetch.net'' as Intranet website you'll do the first step as before and the second step is : * For that key add the value ''http'' as ''REG_DWORD'' with value 1. Now if you want to add a subdomain, say ''http://maps.google.com'' as Intranet website : - Add the key ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\google.com'' - Add the key ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\google.com\maps'' - Add the value ''http'' as ''REG_DWORD'' with value 1 to the previous key (but not to the first). ===== Configure options for a zone (registry based) ===== Options for zone are in ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\''. If you want to configure Intranet zone, it's under key 1, trusted site under key 2 and so on (look in the value of those key to know which zone is which value). As options are identified by value like 1604 for "Mixed content", I suggest you work with [[deb>diff]] to find out which options you need.