6

In support of a remote end user, I need to walk them through adding a trusted root certificate to their computer's "Computer Account".

This is no big deal, except this user is running Windows 7 Home Premium; I believe this version of Windows 7 does not allow access to MMC.

How can I add/manage certificates without MMC access?

Gareth
  • 19,080
Erick
  • 161

2 Answers2

7

Go to Control Panel (icon view) > Internet Options > Content Tab > Certificates button > Trusted Root Certificate tab

Then use the import button.

. enter image description here

.

Depending on the format of the certificate the user may need to select the proper certificate type from the drop down box before it can be seen.

. enter image description here

.

Moab
  • 58,769
3

Instead of doing it for only the computer account, you can install the CA system-wide:

  1. Double-click the .crt file and click "Install..." (or use Moab's method of opening the Certificate Manager and click "Import")

  2. In the wizard, when prompted to choose the install location, enable "Show physical stores" and select Trusted Root Certificate Authorities → Local Machine.

"Select certificate store"

(Actually I'm not sure if computer account vs "Local Machine" makes any difference for trusted CAs. It's different for "personal" certificates, though.)

grawity
  • 501,077