Allow users to manage installed CA certificates.: registry value CACertificateManagementAllowed (Chrome)UserHKCU\Software\Policies\Google\Chrome
- Policy ID
- CACertificateManagementAllowed
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Windows 7 or later
- Source
- Google Chrome Policy Templates (version 156.0.8078.80)
- Category
- Google › Google Chrome › Certificate management settings
Registry
CACertificateManagementAllowed
REG_DWORDUserComputer…\Software\Policies\Google\ChromeHKCU\Software\Policies\Google\Chrome Current key
HKLM\Software\Policies\Google\Chrome
HKLM\Software\Policies\Google\Chrome
- Enabled value
- Depends on the option value
- Element
- Allow users to manage installed CA certificates.
| Item | Stored value |
|---|---|
| Allow users to manage all certificates | 0 |
| Allow users to manage user certificates | 1 |
| Disallow users from managing certificates | 2 |
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Google\Chrome] ; Options (use only one) ; Allow users to manage all certificates "CACertificateManagementAllowed"=dword:00000000 ; Allow users to manage user certificates "CACertificateManagementAllowed"=dword:00000001 ; Disallow users from managing certificates "CACertificateManagementAllowed"=dword:00000002
CMD
:: Options (use only one) :: Allow users to manage all certificates reg add "HKCU\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 0 /f :: Allow users to manage user certificates reg add "HKCU\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 1 /f :: Disallow users from managing certificates reg add "HKCU\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 2 /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Allow users to manage all certificates New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 0 -Force | Out-Null # Allow users to manage user certificates New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 1 -Force | Out-Null # Disallow users from managing certificates New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 2 -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome] ; Options (use only one) ; Allow users to manage all certificates "CACertificateManagementAllowed"=dword:00000000 ; Allow users to manage user certificates "CACertificateManagementAllowed"=dword:00000001 ; Disallow users from managing certificates "CACertificateManagementAllowed"=dword:00000002
CMD
:: Options (use only one) :: Allow users to manage all certificates reg add "HKLM\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 0 /f :: Allow users to manage user certificates reg add "HKLM\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 1 /f :: Disallow users from managing certificates reg add "HKLM\Software\Policies\Google\Chrome" /v "CACertificateManagementAllowed" /t REG_DWORD /d 2 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Allow users to manage all certificates New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 0 -Force | Out-Null # Allow users to manage user certificates New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 1 -Force | Out-Null # Disallow users from managing certificates New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'CACertificateManagementAllowed' -PropertyType DWord -Value 2 -Force | Out-Null