{{tag>sysadmin windows sécurité certificat}}


====== Windows : Gérer les certificats ======


La commande **certutil** permet de gérer les certificats via la ligne de commande et d'automatiser les installations de certificats via des scripts.

<code batch>
rem list Current User > Trusted Root Certification Authorities store
certutil.exe -store -user root

rem list Local Machine > Intermediate Certification Authorities store
certutil.exe -store -enterprise CA

rem GUI version of -store command
certutil.exe -viewstore -user CA

rem add certificate to Current User > Trusted Root Certification Authorities store
certutil.exe -addstore -user root path\to\file.crt

rem delete certificate from Current User > Trusted Root Certification Authorities store by serial number
certutil.exe -delstore -user root 03259fa1

rem GUI version of -delstore command
certutil.exe -viewdelstore -user CA
</code>


===== Références =====


  * https://stackoverflow.com/questions/49553138/how-to-make-browser-trust-localhost-ssl-certificate