You can enable the use of personal certificates in a mandatory profile. In addition to enabling this support, you also must create a Flex configuration file with the Personal Certificates Windows Common Setting.


Do not enable this setting when you are using roaming or local profiles.


In the Group Policy Management Editor, double-click Certificate Support for Mandatory Profiles.


Select Enabled.