Deploy a Certificate Manually by Using the Certificates Snap-in

  • Article

Applies To: Windows Server 2008

You can use this procedure to install a certificate to the certificate store on your computer.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To install your certificate from another store on the same computer

  1. To open the Microsoft Management Console, click Start, and then in the Start Search box, type mmc, and then press ENTER.

  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

  3. Click File, and then click Add/Remove Snap-in.

  4. In the Available snap-ins list, click Certificates, and then click Add.

  5. Click Computer Account, and then click Next.

  6. Click Local computer, and then click Finish.

  7. If the certificate you want to install is on a different computer, rather than another certificate store on this computer, repeat steps 4 and 5, click Another computer, and then enter its name or browse to it.

  8. Click OK to close the Add or Remove Snap-ins dialog box.

  9. In the navigation pane, open the certificate store that contains the certificate you want to place in the Trusted Publishers certificate store.

  10. In the details pane, right-click your certificate, and then click Copy.

  11. In the navigation pane, under Certificates (Local Computer), right-click Trusted Publishers, and then click Paste.

  12. If the certificate you are installing is a self-signed certificate that cannot be traced back to a publisher in the Trusted Root Certification Authorities certificate store, then you must also copy the certificate to that store. In the navigation pane, under Certificates (Local Computer), right-click Trusted Root Certification Authorities, and then click Paste.

For deploying your certificate to the client computers in your organization, see Deploy Certificates by Using Group Policy.

Additional considerations

  • For certificates to be recognized by the device driver software installation process, they must reside in the Computer Account version of the certificate store and not the My User Account version of the store.