Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 



fly

Silently install internet security certificate?

Recommended Posts

I have a self-signed internet security certificate that I need to silently install. I can't find a **** thing about it on the internets. The file extension is .cer. Anyone know about this?

Share this post


Link to post
Share on other sites

I had a similar goal, had a certificate that we install on all laptops. So my first solution was I made a vbscript that copies a folder of files to the local computer then runs a batch file. The vbscript ran on login via group policy. However you could run it manually or something like that.

Files in the folder included:

certmgr.exe

certificate file (my cert wasnt a .cer file though)

and some registry changes for ie

install.bat

install.bat looked like the following:

@echo off
regedit /s "myregfileforie.reg"
certmgr.exe -add -c "mycert.p7b" -s -r localMachine root
exit

for info sake the reg file contained the following:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mydomain.com]
"*"=dword:00000002

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
"1A00"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mydomain]
"*"=dword:00000002

This basically just added my local domain as a trusted site.

My 2nd solution that I made later on, was to bundle the above into a .msi installer file. That is much more complicated to explain. :) Hope this sets you on the right track!

Share this post


Link to post
Share on other sites

Ahhh! For the life of me I couldn't find the command line tool I'd need for this. Thank you very much!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Recently Browsing   0 members

    No registered users viewing this page.

×