Microsoft KB Archive/925884

= You can replace the built-in certificate propagation mechanism with a third-party certificate propagation mechanism in Windows XP =

Article ID: 925884

Article Last Modified on 11/7/2006

-

APPLIES TO


 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Professional

-



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



INTRODUCTION
You can replace the built-in certificate propagation mechanism with a third-party certificate propagation mechanism that has a superset of the built-in propagation functionality in Microsoft Windows XP. This replacement has no adverse effects on the computer.



MORE INFORMATION
The function of the built-in certificate propagation mechanism is to propagate all the certificates on the smart card to the local My certificate store. The computer is not dependent on the certificate propagation mechanism in any other way. Therefore, you can replace the built-in certificate propagation mechanism with the third-party certificate propagation mechanism. Or you can disable the built-in certificate propagation mechanism without creating a problem for the computer.

Disable the built-in certificate propagation mechanism
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Sometimes, when a third-party certificate propagation mechanism replaces the built-in certificate propagation mechanism, you experience unwanted results. In these cases, you can disable the built-in certificate propagation mechanism on the computer to avoid these unwanted results. To disable the built-in certificate propagation mechanism, follow these steps:  Click Start, click Run, type regedit, and then click OK Locate and then click the following subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp

 Right-click Enabled, click Modify, type 0 in the Value data box, and then click OK. Exit Registry Editor.

Keywords: kbhowto kbsecurity kb3rdpartysoftware kbinfo KB925884

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.