Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I need to install/import a CA cert (.cer) into the Trusted Root Cert Authorities store of a Win XP Home using command line. Anyone has any idea which command i can use?

share|improve this question
I don't mind installing other packages... –  Jonas Stawski Mar 29 '10 at 19:54
Why the command line particularly? Why can't you import using certmgr.msc? –  Helvick Mar 29 '10 at 20:21
because i'm creating a script that doesn't require user interaction –  Jonas Stawski Mar 29 '10 at 20:45

4 Answers 4

up vote 2 down vote accepted

Certutil.exe should do the trick, more details here in this Microsoft KB article. I've only used certutil on Server 2003 and XP Pro but according to this Microsoft KB XP Home is not listed so you may have issues.

If Certutil doesn't work for you you may be able to use a third party tool. Here's an example of a project that appears to do this but if there are issues with Certutil working I suspect there may be issues with this too, although you might be lucky.

share|improve this answer
I ended up installing Admin pack on a Win XP pro box and copying the following files to the Win XP home box: certadm.dll, certcli.dll, certreq.exe, certutil.exe –  Jonas Stawski Mar 30 '10 at 13:51

You need to use the version of certutil.exe from the Windows Server 2003 Administration Tools Pack. Also QFE Q329357 is required.

share|improve this answer

Be careful using -f (force) or you may end up creating duplicate certificate stores.

share|improve this answer

Using Certutil you can run the following syntax:

certutil -f -addstore -enterprise root Certificate_Name.cer
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.