Allow signature keys valid for Logon

Policy ID
AllowSignatureOnlyKeys
Scope
Computer Configuration
Supported on
At least Windows Vista
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Smart Card

Description

This policy setting lets you allow signature key-based certificates to be enumerated and available for logon.

If you enable this policy setting then any certificates available on the smart card with a signature only key will be listed on the logon screen.

If you disable or do not configure this policy setting, any available smart card signature key-based certificates will not be listed on the logon screen.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowSignatureOnlyKeysREG_DWORD

Other policies in the same category

View all policies in this category (16)