The CertMgr tool (Certmgr.exe) is a command-line CryptoAPI tool that manages certificates, certificate trust lists (CTLs), and certificate revocation lists (CRLs). CertMgr supports a large number of options but this section describes only those that are relevant to adding a test certificate to a certificate store.

CertMgr /add certfilename.cer /s /r localmachine DestinationStoreName

Partial list of options and parameters

/add certfilename.cer

Configures CertMgr to add the certificate in the file Certfilename.cer to the certificate store that is specified by DestinationStoreName.

/s

Configures CertMgr to add the certificate to the system store that is specified by DestinationStoreName.

/r localmachine

Configures CertMgr to add the certificate to the system store for the local computer that is specified by DestinationStoreName.

DestinationStoreName

The name of the destination store for the local computer, either root to specify the Trusted Root Certification Authorities certificate store or trustedpublisher to specify the Trusted Publishers certificate store.

Comments

To use CertMgr, the user must be a member of the Administrators group on the system and run the command from an elevated command prompt.

For a complete list of CertMgr options and examples of CertMgr commands, see the Certificate Manager Tool Web site.

The CertMgr tool is located in the ..\bin\SelfSign folder of the WDK.

Example

The following two CertMgr commands add the certificate in the file OutputFile.cer to the Trusted Root Certification Authorities certificate store and the Trusted Publishers certificate store.

CertMgr /add OutputFile.cer /s /r localMachine root 
CertMgr /add OutputFile.cer /s /r localMachine trustedpublisher