Is there a cmd/certutils to copy a certificate from one store to another?

Question

I would like to know if there is a cmd to copy an existing certificate from one store to another. I am trying to copy a certificate from the Users Intermediate Certification Authorities store (certutils -user -store ca fqdn-HOST-CA) to the machine's Trusted Root Certification Authorities store (certutils -store root fqdn-HOST-CA). I tried piping the cmds together with -addstore but no worky!!

certutil.exe -addstore root | certutil.exe -store -user ca fqdn-HOST-CA

Any ideas? Thanks

John R · Accepted Answer · 2013-04-21T06:26:27.083

14

I think using PowerShell might be the way to go.

$srcStoreScope = "CurrentUser"
$srcStoreName = "CA"

$srcStore = New-Object System.Security.Cryptography.X509Certificates.X509Store $srcStoreName, $srcStoreScope
$srcStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadOnly)

$cert = $srcStore.certificates -match "sometext"

$dstStoreScope = "LocalMachine"
$dstStoreName = "root"

$dstStore = New-Object System.Security.Cryptography.X509Certificates.X509Store $dstStoreName, $dstStoreScope
$dstStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadWrite)
$dstStore.Add($cert[0])

$srcStore.Close
$dstStore.Close

#Write-Output $cert

edited Apr 21 '13 at 06:26

answered Apr 21 '13 at 03:31

John R

383
4
13

Worked like a charm – Roberto Bonini Mar 17 '15 at 15:31
Worked like a charm – user2609980 Feb 08 '16 at 14:56
Charmed like a work – JOpuckman Oct 16 '18 at 12:43

Is there a cmd/certutils to copy a certificate from one store to another?

1 Answers1