Certificate Store Migration
During a computer upgrade or a computer-to-computer migration, the certificates in certain certificate stores will be migrated. The following table lists the certificate stores that are migrated by default. For the system Automatic Certificate Request Settings (ACRS) store, only the certificate trust lists (CTLs) are migrated. For all other stores listed below, only the certificates are migrated.
| System/user | Store | Storage location |
|---|---|---|
| ${ROWSPAN8}$System${REMOVE}$ |
ROOT | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates |
| MY | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\My\Certificates |
|
| REQUEST | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Request\Certificates |
|
| TrustedPublisher | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates |
|
| TrustedPeople | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates |
|
| Disallowed | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates |
|
| CA | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates |
|
| ACRS | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ACRS\CTLs |
|
| User${REMOVE}$ |
ROOT | HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates |
| MY | file:\\%APPDATA%\Microsoft\SystemCertificates\My\Certificates | |
| REQUEST | file:\\%APPDATA%\Microsoft\SystemCertificates\Request\Certificates | |
| TrustedPublisher | HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates |
|
| TrustedPeople | HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates |
|
| Disallowed | HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates |
|
| CA | HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates |
Other certificate stores created by applications are not migrated by default. Applications that create their own stores are responsible for migration of the stores that they create. To create stores, we recommend that you define a registry key in the application settings and create a store within the registry settings by using the CERT_STORE_PROV_REG store provider. For more information about migrating application settings, see the USMT guide at User State Migration Tool (USMT). (This resource may not be available in some languages and countries or regions.)