Turn off automatic configuration of Microsoft Windows EFS smart card certificate

Disables the automatic configuration of the Encrypting File System feature with a smart card certificate after Microsoft Windows PKI smart card logon. This feature automatically selects which certificate will be used for EFS.

If this setting is not configured or disabled, then the certificate that will be used for EFS is automatically selected.

Supported on: At least Windows Vista SP1

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\HID Global\ActivClient\CertificateRegistration
Value NameAutoConfigEFSOff
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

hidglobal.activclient.admx

Administrative Templates (Computers)