Certificate Propagation - Windows 11 Service
Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.
This service also exists in Windows 10, 7, 8 and Vista.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | Manual | Manual | Manual | Manual |
| 22H2 | Manual | Manual | Manual | Manual |
| 23H2 | Manual | Manual | Manual | Manual |
| 24H2 | Manual | Manual | Manual | Manual |
Default Properties
| Display name: | Certificate Propagation |
| Service name: | CertPropSvc |
| Type: | share |
| Path: | %WinDir%\system32\svchost.exe -k netsvcs |
| File: | %WinDir%\System32\certprop.dll |
| Error control: | normal |
| Object: | LocalSystem |
| Privileges: |
|
Default Behavior
The Certificate Propagation service is running as LocalSystem in a shared process of svchost.exe. Other services might run in the same process. If Certificate Propagation fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the CertPropSvc service has failed to start.
Dependencies
Certificate Propagation is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
Restore Default Startup Type for Certificate Propagation
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreCertificatePropagationWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the certprop.dll file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 11 installation media.