Validate smart card certificate usage rule compliance: registry value CertificateOIDComputerHKLM\Software\Policies\Microsoft\FVE
- Policy ID
- UserCertificateOID_Name
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2008 R2 or Windows 7
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › BitLocker Drive Encryption
Registry
CertificateOID
REG_SZComputerHKLM\Software\Policies\Microsoft\FVE Current key
- Enabled value
- Depends on the option value
- Element
- Object identifier:
- Value type
- REG_SZ
- Required
- true
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE] ; Value names and types follow the ADMX. Replace <enter value> below with your own data "CertificateOID"="<enter value>"
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data reg add "HKLM\Software\Policies\Microsoft\FVE" /v "CertificateOID" /t REG_SZ /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data New-Item -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Force | Out-Null New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Name 'CertificateOID' -PropertyType String -Value '<enter value>' -Force | Out-Null