Policy

Configure root certificate clean up

This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.

Policy
PackMicrosoft Windows
CategoryWindows Components / Smart Card
Policy ID54d3f7f746ed
Internal nameCertPropRootCleanupString

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp\RootCertificateCleanupOption

Policy notes

This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.

Related policies

Allow certificates with no extended key usage certificate attributeAllow ECC certificates to be used for logon and authenticationAllow Integrated Unblock screen to be displayed at the time of logonAllow signature keys valid for LogonAllow time invalid certificatesAllow user name hintDisplay string when smart card is blocked