Policy

Specify filtering for certificate issuers

This policy setting allows you to configure Office to only allow certificates from a specific issuer when creating a digital signature. If you enable this policy setting, Office only displays certificates that contain the string you set in the policy. This setting is case-sensitive. For example, a setting of "MyCA" would match an issuer of "MyCA 1"and "MyCA 2", but not "MYCA 3". If you disable or don’t configure this setting, then signing certificates from any issuer can be used.

Policy
Pack Microsoft Office
Category Microsoft Office 2016 / Security Settings / Digital Signatures
Policy ID 5a40e491071e
Internal name L_SpecifyIssuerFilter

Registry

Copy registry mappings

HKCU\software\policies\microsoft\office\16.0\common\signatures\filterissuer

Policy notes

This policy setting allows you to configure Office to only allow certificates from a specific issuer when creating a digital signature. If you enable this policy setting, Office only displays certificates that contain the string you set in the policy. This setting is case-sensitive. For example, a setting of "MyCA" would match an issuer of "MyCA 1"and "MyCA 2", but not "MYCA 3". If you disable or don’t configure this setting, then signing certificates from any issuer can be used.

Related policies

Check the XAdES portions of a digital signatureConfigure invalid DSA public key sizeConfigure invalid hashing algorithmConfigure invalid RSA public key sizeConfigure legacy DSA public key sizeConfigure legacy hashing algorithmConfigure legacy RSA public key size