Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to find a way to script installing a certificate.

Going "right-click->install certificate" works, and shows the certificate under 'subordinate certification authorities' in IE's certificate view

If found the certutil.exe command,

certutil.exe -addstore -enterprise <storename>

My question is how do you list/find out the valid storenames?

share|improve this question
up vote 8 down vote accepted

Found a site with the valid store names which are:

ca -> Specifies certificates in the Intermediate Certification Authorities store
my -> Specifies certificates issued to the current user
root -> Specifies certificates in the Trusted Root Certification Authorities store
spc -> Specifies software publisher certificates
user_created_store -> Specifies the name of a user-created certificate store
share|improve this answer
certutil -addstore “Root” “c:\cacert.cer” for Trusted Root Certification Authorities – Kiquenet Apr 21 at 14:36
Question: command certutil -addstore “CA” “c:\cacert.cer” for Intermediate Certification Authorities in LocalMachine ? – Kiquenet Apr 21 at 14:37


  • AddressBook -> specifies "Other People" store
  • Trust -> specifies "Enterprise Trust" store
  • TrustedPublisher -> specifies "Trusted Publishers" store

by the way, "spc" is not working for me

I think the list is here:

or here

"root" and "trust" are not valid in the user context (when using -user switch)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.