Microsoft Edge Security Technical Implementation Guide

The Microsoft Edge Security Technical Implementation Guide (V2 R5) has 61 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

61STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 01 2026

Extensions that are approved for use must be allowlisted if used.

Microsoft Edge Security Technical Implementation Guide

Assessment Title

Rule Text

Extensions that are approved for use must be allowlisted if used.

Description

Discussion Text

By default, all extensions are allowed. However, if all extensions are blocked by setting the "ExtensionInstallBlockList" policy to "*," users can only install extensions defined in this policy.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-235755

Rule

SV-235755r961479_rule

Severity

low

Rule Version

EDGE-00-000042

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

This requirement for "Allow specific extensions to be installed" is not required; this is optional.

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Allow specific extensions to be installed" must be set to "Enabled".

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

"ExtensionInstallAllowlist" must be set as follows:
HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\1 = "extension_id1"
HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist\2 = "extension_id2"

If configured, the list of extensions for which Microsoft Edge allows to be installed may be allowlisted.

Implementation Procedure

Fix Text

Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Allow specific extensions to be installed" to "Enabled".  A list of allowlisted extensions may then be specified.

STIG check 37 of 61 in the Microsoft Edge STIG checklist

← Previous · V-235754Extensions installation must be blocklisted by default.Next · V-235756 →The Password Manager must be disabled.