Prevent plaintext PINs from being returned by Credential Manager

This policy setting prevents plaintext PINs from being returned by Credential Manager.

If you enable this policy setting, Credential Manager does not return a plaintext PIN.

If you disable or do not configure this policy setting, plaintext PINs can be returned by Credential Manager.

Note: Enabling this policy setting could prevent certain smart cards from working on Windows. Please consult your smart card manufacturer to find out whether you will be affected by this policy setting.

Supported on: At least Windows Vista Service Pack 1

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider
Value NameDisallowPlaintextPin
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

smartcard.admx

Administrative Templates (Computers)

Administrative Templates (Users)