Distribute Certificates via Group Policy

To add certificates to the Trusted Root Certification Authorities store for a domain and group Policy to distribute the certificate to every Windows computer on your network. Follow the below mentioned procedure to deploy a certificate to multiple computers by using Active Directory Domain Services and a Group Policy object (GPO).

Steps:

1. Click Start, point to Administrative Tools, and then click Group Policy Management.
2. In the console tree, double-click Group Policy Objects in the forest and domain containing the Default Domain Policy Group Policy object (GPO) that you want to edit.
3. Right-click the Default Domain Policy GPO, and then click Edit.
4. In the Group Policy Management Console (GPMC), go to Computer Configuration, Windows Settings, Security Settings, and then click Public Key Policies.
5. Right-click the Trusted Root Certification Authorities store.
6. Click Import and follow the steps in the Certificate Import Wizard to import the certificates.
7. Click next on Certificate import wizard
8. Click Browse and select the downloaded certificate from the saved location -> click next -> make sure Place all certificates in the following store option button is enabled and 'Trusted Root Certification authorities' are selected, click next -> click Finish.
9. After few seconds we can see a message that Import is success.
10. Close the window
11. Perform a Gpupdate /force from the command prompt.

Additional references

• Using Policy to Manage Active Directory Certificate Services