Local Machine and Current User Certificate Stores

Each of the system certificate stores has the following types:

Local machine certificate store

This type of certificate store is local to the computer and is global to all users on the computer. This certificate store is located in the registry under the HKEY_LOCAL_MACHINE root.

Current user certificate store

This type of certificate store is local to a user account on the computer. This certificate store is located in the registry under the HKEY_CURRENT_USER root.

Be aware that all current user certificate stores inherit the contents of the local machine certificate stores. For example, if a certificate is added to the local machine Trusted Root Certification Authorities certificate store, all current user Trusted Root Certification Authorities certificate stores also contain the certificate.

Note  The driver signing verification during Plug and Play (PnP) installation requires that root and Authenticode certificates, including test certificates, are located in a local machine certificate store.

For more information about how to add or delete certificates from the system certificate stores, see CertMgr.

 

 

Send comments about this topic to Microsoft

Show:
© 2014 Microsoft