This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.
Policy path:
Windows Components\Smart Card
Scope:
Machine
Supported on:
At least Windows Vista
Registry settings:
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!RootCertificateCleanupOption
Filename:
SmartCard.admx