Sometimes you need to add security certificates to Internet Explorer. Normally to add security certificates to Internet Explorer, you would click on:
- Internet Options
- The Content tab
- Then Import the security certificate using the wizard
If you want to add SSL certificates to numerous IE installations, the easiest way to do this is via group policy or script. Here’s a quick how-to with a handy script to add security certificates to Internet Explorer, for deployment via group policy:
- Put the security certificate in a location that all users can access (such as %LOGONSERVER%\Netlogon\Certificates\Security Certificate.pfx)
- Create a .BAT file in the same directory (or some other location that all users can access)
- Paste the following code into the batch file you have just created:
certutil -f -user -p “CertificatePassword” -importpfx “%LOGONSERVER%\Netlogon\Certificates\Security Certificate.pfx”
- Now add the batch file to the users login scripts in AD or via group policy
The next time the user logs on, the script will run and add the security certificate to Internet Explorer.
Addendum: I’ve since found a way to install personal store certificates with login script passwords hidden.