6

In support of a remote end user, I need to walk them through adding a trusted root certificate to their computer's "Computer Account".

This is no big deal, except this user is running Windows 7 Home Premium; I believe this version of Windows 7 does not allow access to MMC.

How can I add/manage certificates without MMC access?

3
  • 1
    Does it allow you to start premade consoles? (If the built-in certmgr.msc works, you can make a systemcertmgr.msc on your own machine, then upload it somewhere.) Sep 12, 2011 at 23:19
  • MMC is available in all editions of Windows. All those MSC files aren't executing by themselves.
    – surfasb
    Sep 13, 2011 at 4:40
  • is there a .msc for managing the "Computer Account" certificates? Is there a way to run an .msc as another user, the "computer account" user in this case?
    – Erick
    Sep 13, 2011 at 19:53

2 Answers 2

7

Go to Control Panel (icon view) > Internet Options > Content Tab > Certificates button > Trusted Root Certificate tab

Then use the import button.

. enter image description here

.

Depending on the format of the certificate the user may need to select the proper certificate type from the drop down box before it can be seen.

. enter image description here

.

2
  • This only manages the user's certificates, not the "computer" account. While it allows installing root CAs to the "Local Machine" store, and would probably work for this particular question, it doesn't do exactly the same thing. Sep 12, 2011 at 23:26
  • You are right, I just checked a PC I imported, I had to do it while logged into each account, thanks.
    – Moab
    Sep 13, 2011 at 1:09
3

Instead of doing it for only the computer account, you can install the CA system-wide:

  1. Double-click the .crt file and click "Install..." (or use Moab's method of opening the Certificate Manager and click "Import")

  2. In the wizard, when prompted to choose the install location, enable "Show physical stores" and select Trusted Root Certificate Authorities → Local Machine.

"Select certificate store"

(Actually I'm not sure if computer account vs "Local Machine" makes any difference for trusted CAs. It's different for "personal" certificates, though.)

1
  • Can you do it programmatically using certutil command for add certificates *.cer into Trusted Root Certification Authorities and Intermediate Certification Authorities ?
    – Kiquenet
    Apr 21, 2016 at 9:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .