Allow Microsoft Defender Application Guard to use Root Certificate Authorities from the user’s device: registry value CertificateThumbprintsComputerHKLM\SOFTWARE\Policies\Microsoft\AppHVSI
- Policy ID
- AppHVSI_CertificateThumbprints
- Scope
- Computer Configuration
- Supported on
- Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Application Guard
Registry
CertificateThumbprints
REG_SZComputerHKLM\SOFTWARE\Policies\Microsoft\AppHVSI Current key
- Enabled value
- Depends on the option value
- Element
- Thumbprints of the certificates to share
- Value type
- REG_SZ
- Required
- true
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI] ; Value names and types follow the ADMX. Replace <enter value> below with your own data "CertificateThumbprints"="<enter value>"
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data reg add "HKLM\SOFTWARE\Policies\Microsoft\AppHVSI" /v "CertificateThumbprints" /t REG_SZ /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI' -Force | Out-Null New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI' -Name 'CertificateThumbprints' -PropertyType String -Value '<enter value>' -Force | Out-Null