diff --git a/transport/internet/tls/config_windows.go b/transport/internet/tls/config_windows.go
index 2396bcd00..f02f6d26d 100644
--- a/transport/internet/tls/config_windows.go
+++ b/transport/internet/tls/config_windows.go
@@ -6,5 +6,9 @@ package tls
 import "crypto/x509"
 
 func (c *Config) getCertPool() (*x509.CertPool, error) {
-	return c.loadSelfCertPool()
+	if c.DisableSystemRoot {
+		return c.loadSelfCertPool()
+	}
+
+	return nil, nil
 }