Silently install internet security certificate?

3 posts in this topic

I have a self-signed internet security certificate that I need to silently install. I can't find a **** thing about it on the internets. The file extension is .cer. Anyone know about this?


Share this post

Link to post
Share on other sites

I had a similar goal, had a certificate that we install on all laptops. So my first solution was I made a vbscript that copies a folder of files to the local computer then runs a batch file. The vbscript ran on login via group policy. However you could run it manually or something like that.

Files in the folder included:


certificate file (my cert wasnt a .cer file though)

and some registry changes for ie


install.bat looked like the following:

@echo off
regedit /s "myregfileforie.reg"
certmgr.exe -add -c "mycert.p7b" -s -r localMachine root

for info sake the reg file contained the following:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mydomain]

This basically just added my local domain as a trusted site.

My 2nd solution that I made later on, was to bundle the above into a .msi installer file. That is much more complicated to explain. :) Hope this sets you on the right track!


Share this post

Link to post
Share on other sites

Ahhh! For the life of me I couldn't find the command line tool I'd need for this. Thank you very much!


Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.