Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I can start individual Management Console snap-ins by starting them directly without going through starting mmc.exe and selecting the snap-ins I want.

However, for certmgr.msc selecting in MMC gives me the option to load certmgr for the computer account, which is usually what I need. How can I load certmgr for the computer account from the command line?

share|improve this question

4 Answers 4

up vote 4 down vote accepted

Save the .msc file to a file share and just call the UNC.

What I did was create the .msc file (as answered above) but I saved it to a network resource. When I go to the next server, I can call the UNC via the RUN and done the local computer's cert manager opens up as the Computer Account too. I tested it across a couple different IIS boxes and found it was indeed unique and the computer's account.

\fileserver\share\certmgr_computeraccount.msc

share|improve this answer
    
Ultimately the best solution. –  Andrew J. Brehm Sep 13 '12 at 23:30

The previous answer confused me until I found that a couple steps were not explicitly stated. Whenever I opened certmgr.msc it only showed me the Current User certs, rather than the ones for the Local Computer store. I found more details in this blog entry.

In case that link dissolves, you need to do these steps to access the different stores:

  1. Start → Run: mmc.exe
  2. Menu: FileAdd/Remove Snap-in
  3. Under Available snap-ins, select Certificates and press Add.
  4. Select Computer Account for the certificates to manage. Press Next.
  5. Select Local Computer and press Finish.
  6. Press OK to return to the management console.

Once you have the MMC set up, then you can save the msc with a new name per the above answer.

share|improve this answer

that's an easy one: you have to use 'certlm.msc' instead of 'certmgr.msc'. That will open the computer certificate store.

Yours FGC

share|improve this answer
2  
This is only available starting in Windows 8/2012 –  bmaupin Apr 11 '13 at 20:15
    
Thanks for this tip - copying certlm.msc from a Win8 machine is easier than creating a new msc file for my colleagues. –  Scott Rhee Apr 24 at 1:45
    
@ScottRhee, Are you sure that's going to work reliably? –  Pacerier Nov 16 at 22:15
    
@Pacerier, a few colleagues of mine tried that and I've got no problem so far. –  Scott Rhee Nov 17 at 3:44

Run mmc, select the snap-in, and save (File → Save) the console to your preferred location. Call it something like syscertmgr.msc. Run the saved console whenever you want the computer account's certificates.

share|improve this answer
    
That involves starting MMC. I need to open certmgr without starting MMC, i.e. whenever I connect to a server and install my cert, I want to be able just to start certmgr without going through MMC and selecting the snap-in and that ritual. I am looking for a shorter ritual. You are giving me a longer ritual. –  Andrew J. Brehm Feb 23 '11 at 23:25
    
@Andrew: However, you only need to do it once. The next time, your "ritual" would consist of 1) opening syscertmgr.msc that you created. You cannot force the built-in certmgr.msc do what it's not intended to do. –  grawity Feb 24 '11 at 10:28
    
I only need to load the certificate once. On each server. We have four or five test environments for each production environments. I guess in the prod envs they actually update certs every year. But the test envs don't survive long enough so I'd never do that twice. –  Andrew J. Brehm Feb 24 '11 at 15:26
    
@Andrew: Fine, create a console once and start it from a network share. :) (To quote the Help file of certmgr, "To switch between managing certificates for your user account, a computer, or a service, you must have separate instances of Certificates added into the console." This means that certmgr really cannot switch to Computer mode.) –  grawity Feb 24 '11 at 18:00
    
@Andrew: certutil -ImportPFX –  grawity Feb 24 '11 at 18:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.