LogoLogo
OSDeploy.comTwitterPowerShell GalleryGitHub
  • Overview
  • OSDeploy Home
  • Module
    • Release Information
      • 2019-01
      • 2018-12
      • 2018-11
      • 2018-10
      • 2018-09
      • 2018-08
      • 2018-07
    • Functions
      • Main
        • Get-OSBuilder
          • Set Path
      • Maintenance
        • Repair-OSBuildTask
      • OSBMedia
        • New-OSBMediaISO
        • New-OSBMediaUSB
        • Show-OSBMediaINFO
      • OSBUpdate
        • Get-OSBUpdate
        • New-OSBUpdate
      • OSMedia
        • Get-OSMedia
        • Import-OSMedia
          • Batch Import-OSMedia
        • Update-OSMedia
          • Execute
      • OSBuild
        • New-OSBuildTask
          • Remove Appx Provisioned Package
          • Remove Windows Package
          • Remove Windows Capability
          • Disable Windows Optional Feature
          • Enable Windows Optional Feature
        • New-OSBuildTask (External Content)
          • Features On Demand
          • Language Packs
          • IsoExtract Content
          • Language Interface Packs
          • Language Features On Demand
          • Local Experience Packs
          • PowerShell Scripts
            • Update-OneDriveSetup
        • New-OSBuildTask (WinPE)
          • WinPE DaRT
          • WinPE Drivers
          • WinPE PowerShell Scripts
          • WinPE Extra Files
          • WinPE ADK Packages
        • New-OSBuild
      • PEBuild
        • New-PEBuildTask
          • Recovery
          • WinPE
          • MDT
        • New-PEBuild
    • PowerShell Gallery
    • GitHub
  • Docs
    • Reviews
    • Fan Requests
    • Quick Start
    • Tips
      • Task Naming
      • Verbose Logging
      • OSMedia Archive
      • OSMedia Updating
      • OSMedia Failed UBR Change
      • Windows Setup Wallpaper
    • Articles
      • Latest Latest Cumulative Update (Latest LCU)
      • Update Catalogs
      • Windows Setup with DaRT Remote Connection
      • Offline Servicing
      • Servicing Stacks
      • Work with Languages
      • DISM Cleanup Image Pending Operations
      • Win10 1607 Appx Issues
      • Updating an Updated WIM
      • OSBuilder OS Information
      • What Should I Update?
      • Windows 10 Setup and the ei.cfg
      • Automating Windows Update Downloads
      • Solutions
    • Recycle Bin
      • Instructions
        • Detailed
          • pebuild
            • scripts
              • Set-TimeZone
            • WinPE Types
              • Recovery
              • Recovery DaRT
              • Windows PE
              • MDT
            • Auto ExtraFiles
            • Drivers
              • RegAdd ActivePowerScheme
              • RegAdd AeroLite Theme
              • RegAdd Browse
              • RegAdd PowerShell ExecutionPolicy
            • ExtraFiles
              • Wallpaper
          • Update
      • OSBuilder New-OSBTemplate
      • OSBuild Templates
    • Guides
      • OSBuild Arcade
        • Frogger
      • OSBuild Templates
      • OSBuild Registry
      • Windows 7 SP1
        • Import OSMedia
        • Download Updates
        • NVMe Hotfix
        • Update OSMedia
        • ISO Testing
      • Windows 10 1809 RSAT Capability
      • registry
        • OSBuild Registry REG
          • Certificates
        • OSBuild Registry XML
    • The Basics
      • Requirements
      • Installation
      • Support
      • Get Started
      • Update OSBuilder
      • Import an OS
      • OS Information
      • Update an OS
      • Update an OS (Process)
      • Create External Media
        • Create an ISO
        • Create a USB
      • Create an OSBuild
Powered by GitBook
On this page
  • Fan Request
  • Traditional Certificate Installation
  • Certificate Stores
  • Determining Origin
  • Thumbprints
  • The Registry
  • The OSDeploy Way

Was this helpful?

  1. Docs
  2. Guides
  3. registry
  4. OSBuild Registry REG

Certificates

PreviousOSBuild Registry REGNextOSBuild Registry XML

Last updated 5 years ago

Was this helpful?

Fan Request

This Guide is the result of this Tweet from when he first asked me ...

And the additional bugging ...

While I don't have a need for this myself, I am not one to turn down an Offline Servicing challenge, so ...

Traditional Certificate Installation

There are four methods for getting Certifications installed on an Enterprise Workstation

  1. Active Directory

  2. Group Policy

  3. Certificate File using CertUtil

  4. OSBuilder

But since we are talking about OSBuilder, I assume you are looking for a way to install Certificates through Offline Servicing. Unfortunately the first two methods don't work until the computer is on the Domain, and CertUtil doesn't allow installation to a mounted Windows Image (neither does DISM), so we are going to have to work with OSBuilder

Certificate Stores

Take a quick read about Certificate Stores so I don't have to repeat things too much

If you don't want to read everything, here is the important stuff

Determining Origin

You need to know the method the Certificate was installed, so you can associate it with the proper Registry location.

In Certificates (certlm), change the View Options to show Physical certificate stores

Now you can know where you should look in the Registry for the Certificate

Thumbprints

Every Certificate has a Thumbprint. You need to know the Certificate Thumbprint to find it in the Registry

Another method to get the Thumbprint is with PowerShell

Get-ChildItem -Path Cert:\LocalMachine\Root -Recurse

The Registry

Once you have found the Thumbprint for your Certificate, search the Registry for the Key. You may find more than one. These are the Registry Keys that need to be exported

The OSDeploy Way

Ok, that was alot of work, which is not cool, so just copy the following code into PowerShell

This script will display all the Certificates in the Registry, allowing you to select the ones you need. Duplicate entries are in multiple Registry locations, so you need all the ones that match the Thumbprint

After you press OK, the Registry Keys will be exported into your %Temp% directory

Which can then be easily copied into OSBuilder Registry Templates where it will be installed automatically

During New-OSBuild, these will be applied automatically. Here's an example of what you will see

@Marctwain_C