Share via

DisableCapiOverrideForRSA registry removal date on windows 10

Gambo Cheung 0 Reputation points
2026-04-29T01:33:39.4866667+00:00

According to KB5073121, support for this registry key will be removed in the February 2027 updates. I applied the KB5078752 recently. I found out the DisableCapiOverrideForRSA is set to 0, which has not been working recently. It affects my old sign ActiveX, which is not working UNABLE_TO_ACQUIRE_KEY after a few hours.

Windows for home | Windows 10 | Install and upgrade
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Carl-L 13,530 Reputation points Microsoft External Staff Moderator
    2026-04-29T08:06:21.71+00:00

    Hello Gambo Cheung,

    Welcome to Microsoft Q&A forum.

    While the key will only be fully removed in Feb 2027 updates, the deprecation has already started. While the key apparently still exists, it is no longer functioning reliably. The retirement of the key will be gradually rolls out over the course until Feb 2027, when the key is fully removed.

    Due to that, the behavior of the apps you see is actually expected. Initially, the certificate availability will still allow CSP-style. But when it's refreshed, the certificate might be registering KSP only. If your apps still only ask for CSP, that when it fails.

    In this case, the only reliable way to go forward is that ActiveX will need to be updated to align with the changes. As set DisableCapiOverrideForRSA value to 0 will be eventually ignored when the deprecation is being enforced.

    Thank you for your understanding.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.