HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Yubico\YubiKey PIV Manager (on 64-bit systems)
HKEY_LOCAL_MACHINE\SOFTWARE\Yubico\YubiKey PIV Manager (on 32-bit systems)
Proposed location:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Yubico\YubiKey PIV Manager (on both 32-bit and 64-bit systems)
Issues with the current location that would be resolved by the proposed change:
The location is platform-specific. To create platform-independent settings, the values must be specified twice. This also complicates ADMX template authoring.
The location is unmanaged, which results in registry tattooing. This means that when a Group Policy object (GPO) goes out of scope, the settings are not removed from the registry and the configuration still applies.
These arguments are also partially valid for user-specific location.
Current location:
HKEY_CURRENT_USER\SOFTWARE\Yubico\YubiKey PIV Manager (on both 32-bit and 64-bit systems)
Proposed location:
HKEY_CURRENT_USER\SOFTWARE\Policies\Yubico\YubiKey PIV Manager (on both 32-bit and 64-bit systems)
YubiKey PIV Manager on Windows uses improper registry keys for its group policy settings.
Current locations for computer-wide settings:
Proposed location:
Issues with the current location that would be resolved by the proposed change:
These arguments are also partially valid for user-specific location.
Current location:
Proposed location: