PKI - Launching Windows Certificates Manager

This article has not been updated recently and may contain dated material.

This article is intended for Windows XP, Vista, 7, 2003 Server and 2008 Server.  There are small changes between the Windows versions, but the overall steps are the same.

Launching Certificates Manager:

1.  Run Microsoft Management Console(mmc.exe) as an admin user.  It is very important that mmc.exe runs as an admin user before continuing:

       a. On Windows Vista, 7, or 2008 Server, go to Start -> All Programs -> Accessories -> Right click on Command Prompt and choose Run as administrator:

Command Prompt | Run as administrator highlighted.

b. In the Administrator: Command Prompt type mmc and press Enter.  This launches MMC as an admin user.  Go to Step 2.

c. On Windows XP and 2003 Server, if you're not logged in as an administrator user, go to Start -> Run -> type cmd and press enter.  In the Command Prompt windows, type: runas /user:domain\admin-user cmd    Where admin-user is the username of a user with admin privilege on the system, and domain is the domain that the user account belongs to.  For example, there is a local admin account called administrator on the server, so the command would be: runas /user:its-r2d2\administrator cmd.  This will open another Command Prompt window with admin privilege.  In this window, type mmc and press Enter.  Go to Step 2.

2.  Go to File -> Add/Remove Snap-in...

File, Add/Remove Snap-in...

3.  Click on Certificates then click the Add > button.

Add or Remove Snap-ins; Certificates and Add>

4.  Select Computer account on the pop-up window, then click Next.

Certificates snap-in; Computer account

5.  On the next screen, click Finish, then click OK.

IMPORTANT NOTE: If you don’t see an option to select Computer account like in step 4, then you’re not running MMC as an admin user.  You must run MMC as an admin user in order to import SSL certificates.

2/1/2018 12:38:39 PM