Configure use of smart cards on removable data drives

Policy ID
RDVConfigureSmartCard
Scope
Computer Configuration
Supported on
At least Windows Server 2008 R2 or Windows 7
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › BitLocker Drive Encryption › Removable Data Drives

Description

This policy setting allows you to specify whether smart cards can be used to authenticate user access to BitLocker-protected removable data drives on a computer.

If you enable this policy setting smart cards can be used to authenticate user access to the drive. You can require a smart card authentication by selecting the "Require use of smart cards on removable data drives" check box.

Note: These settings are enforced when turning on BitLocker, not when unlocking a drive. BitLocker will allow unlocking a drive with any of the protectors available on the drive.

If you disable this policy setting, users are not allowed to use smart cards to authenticate their access to BitLocker-protected removable data drives.

If you do not configure this policy setting, smart cards are available to authenticate user access to a BitLocker-protected removable data drive.

Options

The empty box and the checked box tell the checkbox items of the Group Policy editor apart (a checked box is an item that is selected by default).

  • Require use of smart cards on removable data drives

Registry

ComputerHKEY_LOCAL_MACHINE
  • RDVAllowUserCertREG_DWORD
  • RDVEnforceUserCertREG_DWORD

Other policies in the same category

View all policies in this category (8)