SecurityInsight settings · Settings > Sign-in & Azure resources
Certificate store location
| Key | SI_SPN_CertStoreLocation |
|---|---|
| Where | Settings > Sign-in & Azure resources |
| Type | Text |
| Default | Detected: the store that holds the certificate with its key, else LocalMachine |
| Edition | Community |
What it does
Which Windows certificate store (LocalMachine or CurrentUser) holds the sign-in certificate of the service principal.
When set
Forces the store used for certificate sign-in. A wrong store makes certificate sign-in fail. Containers always use CurrentUser.
When blank or default
Left blank, the default applies: Detected: the store that holds the certificate with its key, else LocalMachine
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Rarely; only if automatic detection picks the wrong store on your host.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack