ADMX Viewer
Microsoft.Policies.SmartCard• Machine

Configure root certificate clean up

This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.

Policy Details

Policy Name
CertPropRootCleanupString
Registry Key
SOFTWARE\Policies\Microsoft\Windows\CertProp
Supported On
At least Windows Vista
OMA-URI (CSP)
ADMX_Smartcard/CertPropRootCleanupString
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Root certificate clean up options

Type: enum

Allowed Values
  • 0 No cleanup
  • 1 Clean up certificates on smart card removal
  • 2 Clean up certificates on log off