Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to find a way to script installing a certificate.

Going "right-click->install certificate" works, and shows the certificate under 'subordinate certification authorities' in IE's certificate view

If found the certutil.exe command,

certutil.exe -addstore -enterprise <storename>

My question is how do you list/find out the valid storenames?

share|improve this question

2 Answers 2

up vote 5 down vote accepted

Found a site with the valid store names which are:

ca -> Specifies certificates in the Intermediate Certification Authorities store
my -> Specifies certificates issued to the current user
root -> Specifies certificates in the Trusted Root Certification Authorities store
spc -> Specifies software publisher certificates
user_created_store -> Specifies the name of a user-created certificate store
share|improve this answer


  • AddressBook -> specifies "Other People" store
  • Trust -> specifies "Enterprise Trust" store
  • TrustedPublisher -> specifies "Trusted Publishers" store

by the way, "spc" is not working for me

I think the list is here:

or here

"root" and "trust" are not valid in the user context (when using -user switch)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.