Table of contents
TOC
Collapse the table of content
Expand the table of content

Local Machine and Current User Certificate Stores

Last Updated: 7/30/2016

Each of the system certificate stores has the following types:

Local machine certificate store
This type of certificate store is local to the computer and is global to all users on the computer. This certificate store is located in the registry under the HKEY_LOCAL_MACHINE root.

Current user certificate store
This type of certificate store is local to a user account on the computer. This certificate store is located in the registry under the HKEY_CURRENT_USER root.

Be aware that all current user certificate stores inherit the contents of the local machine certificate stores. For example, if a certificate is added to the local machine Trusted Root Certification Authorities certificate store, all current user Trusted Root Certification Authorities certificate stores also contain the certificate.

Note The driver signing verification during Plug and Play (PnP) installation requires that root and Authenticode certificates, including test certificates, are located in a local machine certificate store.

For more information about how to add or delete certificates from the system certificate stores, see CertMgr.

© 2016 Microsoft