The Turn on root certificate propagation from smart card machine setting should be configured correctly. This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. Note: For this policy setting to work the following policy setting must also be enabled: Turn on certificate propagation from smart card. If you disable this policy setting then root certificates will not be propagated from the smart card. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Smart Card\Turn on root certificate propagation from smart card (2) KEY: HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp\CertPropEnabled