Click here to Login
Skip Navigation Links
GalleryExpand Gallery
CarsExpand Cars
MotorcyclesExpand Motorcycles
ProjectsExpand Projects
Manuals and Documents
News, Links, and More!Expand News, Links, and More!
HelpExpand Help

How to manually install the Microsoft Root certificates for Windows Server 2008 R2


If you are getting any of the following errors:

·         A certificate chain could not be built to a trusted root

·         Any references to Microsoft knowledgebase articles KB2746268 and KB931125

·         Errors when installing dotfustcatorce.msi or PreEmptive.Analytics.VisualStudio.msi

·         When you run Visual Studio 2013 setup you get a certificate error

·         Any certificate errors related to windows 7 and/or Windows Server 2008 R2


It is possible to install the certificates manually but you might notice that none of the articles mention specifically which certs to export from another machine. 

You can export them from a Windows 7 machine that does not have a GPO policy blocking their installation via Windows Update and install them to a Windows Server 2008 R2 machine and vice versa.

The certificates you need can be found in the Trusted Root Certification Authorities store and are as follows:

·         Microsoft Root Authority – 12/31/2020

·         Microsoft Root Certificate Authority – 5/9/2021

·         Microsoft Root Certificate Authority 2010 – 6/23/2035

·         Microsoft Root Certificate Authority 2011 – 3/22/2036


On a candidate machine do the following:

  1. To open the Microsoft Management Console, click Start, and then in the Start Search box, type mmc, and then press ENTER.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. Click File, and then click Add/Remove Snap-in.
  4. In the Available snap-ins list, click Certificates, and then click Add.
  5. Click Computer Account, and then click Next.
  6. Click Local computer, and then click Finish.
  7. If the certificate you want to install is on a different computer, rather than another certificate store on this computer, repeat steps 4 and 5, click Another computer, and then enter its name or browse to it.

(if you can’t connect to the remote computer use the All Tasks à export option and then copy the files to the other computer an import them)

  1. Click OK to close the Add or Remove Snap-ins dialog box.
  2. In the navigation pane, open the Trusted Root Certification Authorities store.
  3. In the details pane, right-click your certificate, and then click Copy. (or All Tasks à export if you are moving them to a remote computer)
  4. In the navigation pane, under Certificates (Local Computer), right-click Trusted Root Certification Authorities, and then click Paste. (or import if you are moving them to a remote computer)


This solution is untested, and may also be blocked by your system GPO policy, but if it works might be quicker.

·         Direct Link to repair tool:

Back To Top

Change Your Password