Answered by:
Certificate Deployment from SCCM 2012 - .cer file

Question
-
Hi,
I have a .cer file that I need to install on the remote machines, which are running on Windows 7. I need to install the .cer file into the Trusted Publishers.
Please assist..
Sree
Sree
Wednesday, November 4, 2015 5:29 AM
Answers
-
Have you tried creating a GPO and adding your certificate file there? There's plenty of guides online for this:
https://technet.microsoft.com/en-us/library/cc770315(v=ws.10).aspx
Here's even a video for it:
https://www.youtube.com/watch?v=5W96z46mKr0
Nickolaj Andersen | www.scconfigmgr.com | @NickolajA
- Proposed as answer by Paul Winstanley [MVP]MVP Wednesday, November 4, 2015 4:49 PM
- Marked as answer by Jason Sandys [MSFT]MVP Wednesday, November 4, 2015 6:51 PM
Wednesday, November 4, 2015 2:06 PM -
Hi,
I wrote a blog post that uses certutil, "certutil.exe –addstore -f TrustedPublisher wsusself.cer" should do the trick..
http://ccmexec.com/2011/06/system-center-updates-publisher-and-osd/
/Jörgen
-- My System Center blog ccmexec.com -- Twitter @ccmexec
- Proposed as answer by Paul Winstanley [MVP]MVP Wednesday, November 4, 2015 4:49 PM
- Marked as answer by Jason Sandys [MSFT]MVP Wednesday, November 4, 2015 6:51 PM
Wednesday, November 4, 2015 4:20 PM
All replies
-
I have a .cer file that I need to install on the remote machines, which are running on Windows 7. I need to install the .cer file into the Trusted Publishers.
This is not a CM12 issue. Instead search on how you would script this task and once you have that worked out. You can use CM12 to deploy the script.Garth Jones | My blogs: Enhansoft and Old Blog site | Twitter: @GarthMJ
Wednesday, November 4, 2015 1:55 PM -
Have you tried creating a GPO and adding your certificate file there? There's plenty of guides online for this:
https://technet.microsoft.com/en-us/library/cc770315(v=ws.10).aspx
Here's even a video for it:
https://www.youtube.com/watch?v=5W96z46mKr0
Nickolaj Andersen | www.scconfigmgr.com | @NickolajA
- Proposed as answer by Paul Winstanley [MVP]MVP Wednesday, November 4, 2015 4:49 PM
- Marked as answer by Jason Sandys [MSFT]MVP Wednesday, November 4, 2015 6:51 PM
Wednesday, November 4, 2015 2:06 PM -
certutil.exe can do that.
Torsten Meringer | http://www.mssccmfaq.de
Wednesday, November 4, 2015 4:10 PM -
Hi,
I wrote a blog post that uses certutil, "certutil.exe –addstore -f TrustedPublisher wsusself.cer" should do the trick..
http://ccmexec.com/2011/06/system-center-updates-publisher-and-osd/
/Jörgen
-- My System Center blog ccmexec.com -- Twitter @ccmexec
- Proposed as answer by Paul Winstanley [MVP]MVP Wednesday, November 4, 2015 4:49 PM
- Marked as answer by Jason Sandys [MSFT]MVP Wednesday, November 4, 2015 6:51 PM
Wednesday, November 4, 2015 4:20 PM -
I have a PowerShell based CI that I will be blogging soon also.
Jason | http://blog.configmgrftw.com | @jasonsandys
Wednesday, November 4, 2015 6:52 PM -
Thank you Jason, Can you please direct me where I get your scriptMonday, April 16, 2018 3:46 PM
-
It's linked in the other thread that you opened on this subject that I replied to: https://social.technet.microsoft.com/Forums/en-US/246572fd-6c1f-4ebf-a431-fd2b6769c2a3/push-certificates-on-remote-machines-with-sccm?forum=configmanagerapps#4973d5e3-db05-4a08-a7dd-452b72dcaeef
Jason | https://home.configmgrftw.com | @jasonsandys
Monday, April 16, 2018 3:48 PM -
.crt type is security certificateMonday, April 16, 2018 4:07 PM
-
Finally I found the fix.Here is the fix
certutil.exe -addstore -User "Intermediate Certification Authorities" "%~dp0wsa.crt"
- Proposed as answer by Yuvan14 Tuesday, April 17, 2018 7:56 PM
Tuesday, April 17, 2018 7:56 PM