Policy

Turn on root certificate propagation from smart card

This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card. If you disable this policy setting then root certificates will not be propagated from the smart card.

Policy
PackMicrosoft Windows
CategoryWindows Components / Smart Card
Policy ID7b6b104f408a
Internal nameCertPropRootEnabledString

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp\EnableRootCertificatePropagation (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp\EnableRootCertificatePropagation (disabled) = 0

Policy notes

This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card. If you disable this policy setting then root certificates will not be propagated from the smart card.

Related policies

Allow certificates with no extended key usage certificate attributeAllow ECC certificates to be used for logon and authenticationAllow Integrated Unblock screen to be displayed at the time of logonAllow signature keys valid for LogonAllow time invalid certificatesAllow user name hintConfigure root certificate clean up