Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to know if there is a cmd to copy an existing certificate from one store to another. I am trying to copy a certificate from the Users Intermediate Certification Authorities store (certutils -user -store ca fqdn-HOST-CA) to the machine's Trusted Root Certification Authorities store (certutils -store root fqdn-HOST-CA). I tried piping the cmds together with -addstore but no worky!!

certutil.exe -addstore root | certutil.exe -store -user ca fqdn-HOST-CA

Any ideas? Thanks

share|improve this question
up vote 7 down vote accepted

I think using PowerShell might be the way to go.

$srcStoreScope = "CurrentUser"
$srcStoreName = "CA"

$srcStore = New-Object System.Security.Cryptography.X509Certificates.X509Store $srcStoreName, $srcStoreScope

$cert = $srcStore.certificates -match "sometext"

$dstStoreScope = "LocalMachine"
$dstStoreName = "root"

$dstStore = New-Object System.Security.Cryptography.X509Certificates.X509Store $dstStoreName, $dstStoreScope


#Write-Output $cert
share|improve this answer
Worked like a charm – Roberto Bonini Mar 17 '15 at 15:31
Worked like a charm – Erwin Rooijakkers Feb 8 at 14:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.