Automating a certificate install?

[Sharkman]

Hey everyone, I'm installing SSL certificates on all my user's machines as they've just expired, but I was wondering if there's a way of scripting this to run automatically? I install to local machine which means that it needs Admin elevation which is where I'm tripping up. Could I write a script that automatically fills in those fields with admin information? Has anyone tried this before?

[mavhc]

Are these certs you generated yourself? AD CS should auto add its root CA to all the AD Windows computers.

 

Otherwise use Group Policy: Computer>Windows>Security>public key>Trusted Root

[Sharkman]

It's Schools Broadband's certificate, we're moving away from the server and into Intune. I did try deploying there but it's still a work in progress

[RLR]

The best way to do this is via Group Policy but if that's not an option you can use a batch script to install a certificate:

 

Certutil -addstore -f "TrustedPublisher" "CertificateNameAndLocations.cer"

 

This will need to be ran as admin though to avoid the admin prompt.

[Sharkman]

Yeah, this is what I have been doing, just thought about seeing if I could automate the prompt too haha

[DaveTheTech]

Are you not able to use the ceritifcate connector in Intune?

[round2it]

i used this guide

https://partners.exa.net.uk/pdf/education/information/quantum-setup.pdf

 

not for your provider but the instrutions are the same