HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork

Use Windows Hello for Business certificates as smart card certificates
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\UseHelloCertificatesAsSmartCardCertificates
Allow enumeration of emulated smart card for all users
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\AllowAllUserAccessToSmartCardNode
Turn off smart card emulation
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\DisableSmartCardNode
Use cloud trust for on-premises authentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\UseCloudTrustForOnPremAuth
Use certificate for on-premises authentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\UseCertificateForOnPremAuth
Use PIN Recovery
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\EnablePinRecovery
Use a hardware security device
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\RequireSecurityDevice
Use Windows Hello for Business
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\DisablePostLogonProvisioning