[fly]

I have a self-signed internet security certificate that I need to silently install. I can't find a **** thing about it on the internets. The file extension is .cer. Anyone know about this?

[ryath]

I had a similar goal, had a certificate that we install on all laptops. So my first solution was I made a vbscript that copies a folder of files to the local computer then runs a batch file. The vbscript ran on login via group policy. However you could run it manually or something like that.

Files in the folder included:

certmgr.exe
certificate file (my cert wasnt a .cer file though)
and some registry changes for ie
install.bat

install.bat looked like the following:

@echo off
regedit /s "myregfileforie.reg"
certmgr.exe -add -c "mycert.p7b" -s -r localMachine root
exit

for info sake the reg file contained the following:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mydomain.com]
"*"=dword:00000002

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
"1A00"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mydomain]
"*"=dword:00000002

This basically just added my local domain as a trusted site.

My 2nd solution that I made later on, was to bundle the above into a .msi installer file. That is much more complicated to explain. Hope this sets you on the right track!

[fly]

Ahhh! For the life of me I couldn't find the command line tool I'd need for this. Thank you very much!