How to Check if the Correct Certificates Are

Installed on Windows

Jack Wallace

 8 months ago

 Updated

Follow
Table of Contents

1. Overview
2. Checking Certificates (MMC)
3. Certificate Serial Number & Fingerprint
4. Importing Missing Certificates

Overview

The correct certificates should automatically be installed and managed by Microsoft during
regular Windows updates; however it is possible to manually check the correct certificates are
installed utilising the Microsoft Management Console (MMC).

Please note, the certificate installation displayed below is used as an example. Please review this
article for information on our current live root certificate.

Checking Certificates (MMC)

Below are the steps required to check installed certificates using Microsoft's Management
Console (MMC).

1. Search for MMC in your start menu and run the executable
2. Click 'File' –> 'Add/Remove Snap-in...'
3. Select the Snap-in 'Certificates' then click 'Add' as seen below

4. Select 'Computer account' then click 'Next'

5. Select 'Local computer' then click 'Finish'

6. Close the Snap-in screen by clicking 'OK' at the bottom right of the screen
7. Expand the 'Trusted Root Certification Authorities' followed by 'Certificates' as seen below:

8. Confirm the current NMI Live Services Root Certificate is within the list of installed Root
Certificates.
Certificate Serial Number & Fingerprint

Please check the serial number and fingerprint of each certificate before installation. You can do
this by opening the certificate file and checking the relevant information in the details panel:

Importing/Installing Missing Certificates

1. Right click on the intended certification store as shown below –> 'All Tasks' –> 'Import...'

2. Click 'Next' –> (select your certificate) -> 'Next' -> 'Finish'