Policy
Configure root certificate clean up
This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.
PackMicrosoft Windows
CategoryWindows Components / Smart Card
Policy ID
54d3f7f746edInternal name
CertPropRootCleanupStringRegistry
Copy registry mappings
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp\RootCertificateCleanupOptionPolicy notes
This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.
Related policies
Allow certificates with no extended key usage certificate attributeAllow ECC certificates to be used for logon and authenticationAllow Integrated Unblock screen to be displayed at the time of logonAllow signature keys valid for LogonAllow time invalid certificatesAllow user name hintDisplay string when smart card is blockedFilter duplicate logon certificatesForce the reading of all certificates from the smart cardNotify user of successful smart card driver installationPrevent plaintext PINs from being returned by Credential ManagerReverse the subject name stored in a certificate when displayingTurn on certificate propagation from smart cardTurn on root certificate propagation from smart cardTurn on Smart Card Plug and Play service