This policy setting configures whether or not users can provision certificates on Enhanced Storage certificate silo devices. If you enable this policy setting, users can provision certificates on Enhanced Storage certificate silo devices. If you disable or do not configure this policy setting, users cannot provision certificates on Enhanced Storage certificate silo devices. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\Enhanced Storage Access!Allow Enhanced Storage certificate provisioning (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices!AllowCertSiloProvisioning