• Main Navigation. Knowledge Alerts, Articles, Documentation, Downloads (SIMs, Service Packs, Firmware, etc.), Videos; Community User Collaboration Forums; Ideas.
• For number of Trusted Root Certificates, we don’t need to care about it, different computers have different numbers of Trusted Root Certificates, this number depends on installed updates and software, we just need to make sure system connects the Windows Update server, and Windows will get the latest CTL automatically.

• Manually Update Root Certificates

How the heck do you update root certificates on Windows 10? I've recently started deploying Windows 10 and I can't figure out how to update the list of trusted root certificates. I'm also not finding much information online when I google it. In this article, we’ll see the steps to manually add a trusted root certificate to your Windows 10 machine. How To Install Trusted Root Certificate In Windows 10 FYI: You must be the administrator of your system to follow these steps.

I work for a company that uses Windows 7 for end user computing. The Windows 7 computers are updated via a WSUS installation, and access to Microsoft Update is blocked.

We have a problem with a number of websites, who's certificates appears to be invalid, though they are perfectly ok. The problem is, that Windows 7 apparently does an on-demand update of root certificates through Windows Update, rather than rolling out a monthly update, as with Windows XP.

Now that Windows Update is blocked, how should root certificates be updated? It appears that WSUS is not handling this feature.

Thanks in advance.

1 Answer

Try to manually update the root certificates.

Not the answer you're looking for? Browse other questions tagged windows-7certificatessl-certificatewsus or ask your own question.

I've recently started deploying Windows 10 and I can't figure out how to update the list of trusted root certificates. I'm also not finding much information online when I google it. From what I've read it should be happening automatically through windows update. I've updated my systems 100% both through wsus and directly online. I get countless certificate warnings in I.E. and chrome and it's driving me crazy. Any suggestions?

I do know how to manually import certificates into the certificate store but I am hoping for it to be automatic.

Manually Update Root Certificates