Any update on when EnableCertPaddingCheck will be updated to be REG_SZ instead of DWORD?
<policy name="Pol_SecGuide_Certificate_Padding"
class="Machine"
displayName="$(string.Pol_SecGuide_CertPadding)"
explainText="$(string.Pol_SecGuide_CertPadding_Help)"
key="Software\Microsoft\Cryptography\Wintrust\Config" >
>
<parentCategory ref="Cat_SecGuide" />
<supportedOn ref="windows:SUPPORTED_Windows7" />
<enabledList>
<item key="Software\Microsoft\Cryptography\Wintrust\Config" valueName="EnableCertPaddingCheck">
<value>
<string>1</string>
</value>
</item>
<item key="Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" valueName="EnableCertPaddingCheck">
<value>
<string>1</string>
</value>
</item>
</enabledList>
<disabledList>
<item key="Software\Microsoft\Cryptography\Wintrust\Config" valueName="EnableCertPaddingCheck">
<value>
<delete />
</value>
</item>
<item key="Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" valueName="EnableCertPaddingCheck">
<value>
<delete />
</value>
</item>
</disabledList>
</policy>