Certutil Question

[WadeBart]

How would I use the certutil.exe command line to import a root certificate
chain into the Local Computer (NOT USER) "Trusted Root Certification
Authorities" area.

Using the following command

certutil -addstore root Certificatename.cer

puts it in the Users "Trusted Root Certification Authorities" and need to
get it into the Local Computer's.

I can do this using the Certficates Snap-In however, I need to do it through
a command line.

[Brian Komar (MVP)]

It need to be executed as a member of the local Administrators. Only a local
administrator can install certificates into the trusted root store of the
computer.
Your command is correct:
certutil -addstore root <rootcert.crt>
Are the computers in a domain? If so, an enterprise Admin can run
"certutil -dspublish <rootcert.crt> RootCA
This will then be added to all domain members running win2k or later as a
trusted root certificate.
Brian

"WadeBart" <Wade...@discussions.microsoft.com> wrote in message
news:562E3688-CF27-423E...@microsoft.com...