Where system certificate stores are located on my Windows system?

The way Microsoft keeps system certificate stores on Windows 10, 8, or 7 is complicated:

• Certificates are first saved in multiple physical store files hidden on the hard disk.
• Physical store files are then grouped into logical system stores.
• Finally, multiple copies of logical system stores are maintained in the system registry.

Here is a list of registry locations of different copies of logical system stores:

1. Logical system stores for the current user:

HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates
   AuthRoot
   CA
   Disallowed
   MY
   Root
   Trust
   TrustedPeople
   TrustedPublisher
   UserDS

2. Logical system stores for the entire computer:

HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates
   AuthRoot
   CA
   Disallowed
   MY
   Root
   Trust
   TrustedDevices
   TrustedPeople
   TrustedPublisher
   UserDS

3. Logical system stores for each user on the computer:

HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates
HKEY_USERS-1-5-18\Software\Microsoft\SystemCertificates
HKEY_USERS-1-5-19\Software\Microsoft\SystemCertificates
...
   CA
   Disallowed
   My
   Root
   Trust
   TrustedPeople
   TrustedPublisher

⇒ Root CA Certificates Provided on Windows in 2019

⇐ General Information about Certificates on Windows

⇑ General Information about Certificates on Windows

⇑⇑ Windows Certificates Tutorials