Certificate Stores Locations on Windows

Q

Where system certificate stores are located on my Windows system?

✍: FYIcenter.com

A

The way Microsoft keeps system certificate stores on Windows 10, 8, or 7 is complicated:

  • Certificates are first saved in multiple physical store files hidden on the hard disk.
  • Physical store files are then grouped into logical system stores.
  • Finally, multiple copies of logical system stores are maintained in the system registry.

Here is a list of registry locations of different copies of logical system stores:

1. Logical system stores for the current user:

HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates
   AuthRoot
   CA
   Disallowed
   MY
   Root
   Trust
   TrustedPeople
   TrustedPublisher
   UserDS

2. Logical system stores for the entire computer:

HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates
   AuthRoot
   CA
   Disallowed
   MY
   Root
   Trust
   TrustedDevices
   TrustedPeople
   TrustedPublisher
   UserDS

3. Logical system stores for each user on the computer:

HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates
HKEY_USERS-1-5-18\Software\Microsoft\SystemCertificates
HKEY_USERS-1-5-19\Software\Microsoft\SystemCertificates
...
   CA
   Disallowed
   My
   Root
   Trust
   TrustedPeople
   TrustedPublisher

 

Root CA Certificates Provided on Windows in 2019

General Information about Certificates on Windows

General Information about Certificates on Windows

⇑⇑ Windows Certificates Tutorials

2020-10-17, 42702👍, 1💬