Allow users to manage installed CA certificates.

Supported on: Microsoft Windows 7 or later

Registry

HKLM Software\Policies\Google\Chrome
HKCU Software\Policies\Google\Chrome

Options

CACertificateManagementAllowed enum
  • Allow users to manage all certificates -> 0
  • Allow users to manage user certificates -> 1
  • Disallow users from managing certificates -> 2

Description

Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.