Add the Certificates Snap-in to an MMC
You can use the Certificates snap-in to manage certificates for a user, computer, or service account. To switch between managing certificates for your user account, a computer, or a service, you must add separate instances of the Certificates snap-in to the console.
Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
| ☞ | To add the Certificates snap-in to an MMC for a user account |
Click Start, type mmc in the Search programs and files box, and then press ENTER.
On the File menu, click Add/Remove Snap-in.
Under Available snap-ins, double-click Certificates, and then:
-
If you are logged on as an administrator, click My user account, and then click Finish.
-
If you are logged on as a user, the Certificates snap-in automatically opens.
-
If you are logged on as an administrator, click My user account, and then click Finish.
If you have no more snap-ins to add to the console, click OK.
To save this console, on the File menu, click Save.
Additional considerations
-
User certificates can be managed by the user or by an administrator.
Local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
| ☞ | To add the Certificates snap-in to an MMC for a computer account |
Click Start, type mmc in the Search programs and files box, and then press ENTER.
On the File menu, click Add/Remove Snap-in.
Under Available snap-ins, double-click Certificates.
Select Computer account, and then click Next.
Do one of the following:
-
To manage certificates for the local computer, click Local computer, and then click Finish.
-
To manage certificates for a remote computer, click Another computer, and then type the name of the computer, or click Browse to select the computer name, and then click Finish.
-
To manage certificates for the local computer, click Local computer, and then click Finish.
If you have no more snap-ins to add to the console, click OK.
To save this console, on the File menu, click Save.
Additional considerations
-
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
-
To manage certificates for another computer, you can either create another instance of the Certificates snap-in, or right-click Certificates (Computer Name), and then click Connect to Another Computer.
Local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
| ☞ | To add the Certificates snap-in to an MMC for a service |
Click Start, type mmc in the Search programs and files box, and then press ENTER.
On the File menu, click Add/Remove Snap-in.
Under Available snap-ins, double-click Certificates.
Select Service account, and then click Next.
Do one of the following:
-
To manage certificates for services on your local computer, click Local computer, and then click Next.
-
To manage certificates for service on a remote computer, click Another computer, and then type the name of the computer, or click Browse to select the computer name, and then click Next.
-
To manage certificates for services on your local computer, click Local computer, and then click Next.
Select the service for which you are managing certificates.
Click Finish, and then click Close.
If you have no more snap-ins to add to the console, click OK.
To save this console, on the File menu, click Save.
Additional considerations
-
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
-
To manage certificates for a service on another computer, you can either create another instance of the Certificates snap-in, or right-click Certificates - Service (Service Name) on Computer Name, and then click Connect to Another Computer.
✍: Microsoft
2018-02-08, 8067👍, 2💬
