Share this article

This article is translated in

Improve this guide

How to add Certificate to Trusted Root on Windows 10

Learn to manage the certificates on your device

4 min. read

Updated onOctober 4, 2023

updated onOctober 4, 2023

Share this article

This article is translated in

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Key notes

Root certificates are public key certificates that help your browser determine whether communication with a website is genuine and is based upon whether the issuing authority is trusted and if the digital certificate remains valid.

Suppose a digital certificate is not from a trusted authority. In that case, you’ll get an error message likeThere is a problem with this website’s security certificate,and the browser might block communication with the website.

Windows 10 has built-in certificates and automatically updates them. However, you can manually add more root certificates to Windows 10 from certificate authorities (CAs).

Where is the Trusted Root Certificate Store in Windows 10?

The Trusted Root Certificate store in Windows 10 is a collection of root certificates for Certificate Authorities (CAs) considered trustworthy by the operating system.

This store is used to validate digital certificates and establish secure connections over the internet.

You must access the Microsoft Management Console to access the Trusted Root Certificate store in Windows 10.

The trusted Root Certificate store is, however, located in the root of the Registry path below:

Computer\HKEY_LOCAL_MACHINE

How do I add a certificate to the trusted root on Windows 10?

1. Install certificates from trusted CAs

Most Windows 10 users have no ideahow to edit the Group Policy. Learn how you can do it by reading oursimple article.

If you don’t have the Group Policy Editor on your Windows PC, get it right now in just a couple of easy steps with our guide oninstalling the Group Policy Editor on Windows 10.

2. Install Trusted Root Certificates with the Microsoft Management Console

Press theWinkey +Rhotkeyto open the Run dialog.
Inputmmcin Run and pressEnterto open the window below.

3.ClickFileand then selectAdd/Remove Snap-insto open the window in the snapshot below.

Next, you should selectCertificatesand press theAddbutton.
A Certificates Snap-in window opens from which you can selectComputer account>Local Account, and press theFinishbutton to close the window.
Then press theOKbutton in the Add or Remove Snap-in window.

7.Now you can selectCertificatesand right-clickTrusted Root Certification Authoritieson the MMC console window as below.

Then you can clickAll Tasks>Importto open the Certificate Import Wizard window.
From the Certificate Import Wizard window, you can add the digital certificate to Windows.

You can also install root certificates on Windows 10/11 with the Microsoft Management Console. The process is easy and simple, and the console can be accessed via the Run dialog.

IfMicrosoft Management Console can’t create a new document, follow our guide’s easy steps to solve the issue.

Can’t load the Microsoft Management Console? Our step-by-step guide will help you sort things out.

How to add the certificate to Trusted Root Certification Authorities store using the command line?

Now you’ve installed a new trusted root certificate in Windows 10. Similarly, you can add many more digital certificates to that OS and other Windows platforms.

Ensure that the third-party digital certificates come from trusted CAs, such as GoDaddy, DigiCert, Comodo, GlobalSign, Entrust, and Symantec.

If you have any more suggestions or questions, leave them in the comments section below, and we’ll certainly check them out.

How to add Certificate to Trusted Root on Windows 10#

Where is the Trusted Root Certificate Store in Windows 10?#

How do I add a certificate to the trusted root on Windows 10?#

1. Install certificates from trusted CAs#

2. Install Trusted Root Certificates with the Microsoft Management Console#

How to add the certificate to Trusted Root Certification Authorities store using the command line?#