Turn on root certificate propagation from smart card
- Policy ID
- CertPropRootEnabledString
- Scope
- Computer Configuration
- Supported on
- At least Windows Vista
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Smart Card
Description
This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted.
If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card.
If you disable this policy setting then root certificates will not be propagated from the smart card.
Registry
ComputerHKEY_LOCAL_MACHINE
- EnableRootCertificatePropagationREG_DWORD