Contents
How do I add a trusted certificate?
Expand the Computer Configuration section and open Windows Settings\Security Settings\Public Key. Right-click Trusted Root Certification Authorities and select Import. Follow the prompts in the wizard to import the root certificate (for example, rootCA. cer) and click OK.
How do I create a trusted certificate in Windows?
Expand Policies > Windows Settings > Security Settings > Public Key Policies. Right-click Trusted Root Certification Authorities and select Import. Click Next and Browse to select the CA certificate you copied to the device. Click Finish and then OK.
How to import CA certificate to trusted root?
Look at the documentation of certutil.exe and -addstore option. and it worked well (meaning The certificate landed in Trusted Root of LocalMachine store). If there are multiple certificates in a pfx file (key + corresponding certificate and a CA certificate) then this command worked well for me:
What happens if a root certificate is not trusted?
Result A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. Untrusted root CA certificate problems might occur if the root CA certificate is distributed using the following Group Policy (GP):
How do I install a root certificate on my computer?
Installing a trusted root certificate On the machine that requires a certificate, in your web browser, navigate to your local certification server. Choose Download a CA certificate, certificate chain, or CRL link, as needed. Select the appropriate certificate of authority from the list and choose the Base 64 Encoding method.
Select the Trusted Root Certification Authorities store. Complete the remaining steps of the wizard and click Finish. Upon completing the wizard, you next want to add the certificate snap-ins using the Microsoft Management Console (MMC). Launch MMC (mmc.exe). Choose File > Add/Remove Snap-ins. Choose Certificates, then choose Add.