Configure root certificate clean up
- Policy ID
- CertPropRootCleanupString
- Scope
- Computer Configuration
- Supported on
- At least Windows Vista
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Smart Card
Description
This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.
Options
Registry
ComputerHKEY_LOCAL_MACHINE
- RootCertificateCleanupOptionREG_DWORD