How can I start certmgr.msc for computer account?

If you have 2012R1/Win8 or later: You can use certlm.msc (Certificates Local Machine) instead of certmgr.msc. That will open the computer certificate store.


The previous answer confused me until I found that a couple of steps were not explicitly stated. Whenever I opened certmgr.msc it only showed me the Current User certs, rather than the ones for the Local Computer store. I found more details in this blog entry.

In case that link dissolves, you need to do these steps to access the different stores:

  1. Start → Run: mmc.exe
  2. Menu: FileAdd/Remove Snap-in
  3. Under Available snap-ins, select Certificates and press Add.
  4. Select Computer Account for the certificates to manage. Press Next.
  5. Select Local Computer and press Finish.
  6. Press OK to return to the management console.

Once you have the MMC set up, then you can save the msc with a new name per the above answer.


Save the .msc file to a file share and just call the UNC.

What I did was create the .msc file (as answered above) but I saved it to a network resource. When I go to the next server, I can call the UNC via the RUN and done the local computer's certificate manager opens up as the Computer Account too. I tested it across a couple different IIS boxes and found it was indeed unique and the computer's account.

\\fileserver\share\certmgr_computeraccount.msc

Tags:

Windows

Mmc