Turn on root certificate propagation from smart card

Policy ID
CertPropRootEnabledString
Scope
Computer Configuration
Supported on
At least Windows Vista
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Smart Card

Description

This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted.

If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card.

If you disable this policy setting then root certificates will not be propagated from the smart card.

Registry

ComputerHKEY_LOCAL_MACHINE
  • EnableRootCertificatePropagationREG_DWORD

Other policies in the same category

View all policies in this category (16)