Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I need to install/import a CA cert (.cer) into the Trusted Root Cert Authorities store of a Win XP Home using command line. Anyone has any idea which command i can use?


locked by womble Sep 27 at 7:08

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by womble Sep 27 at 7:08

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions should demonstrate reasonable business information technology management practices. Questions that relate to unsupported hardware or software platforms or unmaintained environments may not be suitable for Server Fault - see the help center." – womble
If this question can be reworded to fit the rules in the help center, please edit the question.

I don't mind installing other packages... – Jonas Stawski Mar 29 '10 at 19:54
Why the command line particularly? Why can't you import using certmgr.msc? – Helvick Mar 29 '10 at 20:21
because i'm creating a script that doesn't require user interaction – Jonas Stawski Mar 29 '10 at 20:45

4 Answers 4

up vote 2 down vote accepted

Certutil.exe should do the trick, more details here in this Microsoft KB article. I've only used certutil on Server 2003 and XP Pro but according to this Microsoft KB XP Home is not listed so you may have issues.

If Certutil doesn't work for you you may be able to use a third party tool. Here's an example of a project that appears to do this but if there are issues with Certutil working I suspect there may be issues with this too, although you might be lucky.

I ended up installing Admin pack on a Win XP pro box and copying the following files to the Win XP home box: certadm.dll, certcli.dll, certreq.exe, certutil.exe – Jonas Stawski Mar 30 '10 at 13:51

You need to use the version of certutil.exe from the Windows Server 2003 Administration Tools Pack. Also QFE Q329357 is required.


Be careful using -f (force) or you may end up creating duplicate certificate stores.


Using Certutil you can run the following syntax:

certutil -f -addstore -enterprise root Certificate_Name.cer

Not the answer you're looking for? Browse other questions tagged or ask your own question.