Install Certificate
Installs a certificate file into a Windows certificate store, either for the whole computer or in the store belonging to the system account that runs the installation. Supports .cer, .crt, .p7b and password protected .pfx files. Add the Download Content brick when the certificate file is delivered with the package.
Parameters
Section titled “Parameters”Certificate File
Section titled “Certificate File”Required — Default: $PackageRoot\[filename].cer
The full path to the certificate file that should be installed. Supported file types are .cer, .crt, .p7b and .pfx.\n\nExample:\n$PackageRoot\MyCertificate.cer\nC:\Temp\MyCertificate.pfx\n\nAdd the Download Content brick when using $PackageRoot. The installation fails if the file does not exist or has another file type.
Store Location
Section titled “Store Location”Required — Default: Local Machine (all users)
Select who the certificate should be installed for.\n\nLocal Machine installs the certificate for all users on the computer and is the normal choice for company certificates.\n\nSystem Account installs the certificate into the private store of the built-in system account, because that is the account the installation always runs as. Nobody who signs in to the computer can see or use a certificate placed there. Choose this only when the certificate is read by something that also runs as the system account, such as a Windows service or a scheduled task. To give the certificate to the people using the computer, choose Local Machine. Allowed values: Local Machine (all users), System Account (no signed-in user).
Certificate Store
Section titled “Certificate Store”Required — Default: Trusted Root Certification Authorities (Root)
Select the certificate store the certificate should be placed in.\n\nTrusted Root Certification Authorities is used for root certificates that the computer must trust.\n\nIntermediate Certification Authorities is used for certificates that are issued by a root certificate.\n\nPersonal is used for certificates that belong to the computer or user, typically together with a .pfx file that contains a private key.\n\nTrusted Publishers is used to trust software publishers, and Trusted People is used to trust certificates from specific people. Allowed values: Trusted Root Certification Authorities (Root), Intermediate Certification Authorities (CA), Personal (My), Trusted Publishers (TrustedPublisher), Trusted People (TrustedPeople).
Password
Section titled “Password”Optional
The password that protects the private key in a .pfx file.\n\nLeave this empty for .cer, .crt and .p7b files. The installation fails if a password is specified for those file types, or if a .pfx file is installed without a password.
Allow Private Key Export
Section titled “Allow Private Key Export”Optional — Default: False
Enable to allow the private key of a .pfx file to be exported again from the computer afterwards. Disable to lock the private key to this computer, which is the recommended and most secure setting.\n\nThis setting only applies to .pfx files and is ignored for other file types.
Replace Existing Certificate
Section titled “Replace Existing Certificate”Optional — Default: False
Enable to install the certificate again when the exact same certificate is already in the store, which refreshes it and reattaches the private key of a .pfx file. Disable to leave the certificate that is already installed untouched and continue without changes.\n\nIn both cases the installation is reported as successful. The certificate that is already installed is only replaced once the new one has been installed successfully, so a failed installation never leaves the store without the certificate.
Details
Section titled “Details”- Category: System
- Brick ID:
Certificate-Install
{ "category": "system", "description": "Installs a certificate file into a Windows certificate store, either for the whole computer or in the store belonging to the system account that runs the installation. Supports .cer, .crt, .p7b and password protected .pfx files. Add the Download Content brick when the certificate file is delivered with the package.", "developerVendor": "CapaSystems A/S", "displayName": null, "id": "Certificate-Install", "name": "Install Certificate", "parameters": [ { "allowManualInput": false, "defaultValue": "$PackageRoot\\[filename].cer", "defaultValueObject": null, "description": "The full path to the certificate file that should be installed. Supported file types are .cer, .crt, .p7b and .pfx.\\n\\nExample:\\n$PackageRoot\\MyCertificate.cer\\nC:\\Temp\\MyCertificate.pfx\\n\\nAdd the Download Content brick when using $PackageRoot. The installation fails if the file does not exist or has another file type.", "id": "CertificateFilePath", "name": "Certificate File", "regExValidation": "", "required": true, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "LocalMachine", "name": "Local Machine (all users)" }, "description": "Select who the certificate should be installed for.\\n\\nLocal Machine installs the certificate for all users on the computer and is the normal choice for company certificates.\\n\\nSystem Account installs the certificate into the private store of the built-in system account, because that is the account the installation always runs as. Nobody who signs in to the computer can see or use a certificate placed there. Choose this only when the certificate is read by something that also runs as the system account, such as a Windows service or a scheduled task. To give the certificate to the people using the computer, choose Local Machine.", "id": "StoreLocation", "name": "Store Location", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "LocalMachine", "name": "Local Machine (all users)" }, { "id": "CurrentUser", "name": "System Account (no signed-in user)" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Root", "name": "Trusted Root Certification Authorities (Root)" }, "description": "Select the certificate store the certificate should be placed in.\\n\\nTrusted Root Certification Authorities is used for root certificates that the computer must trust.\\n\\nIntermediate Certification Authorities is used for certificates that are issued by a root certificate.\\n\\nPersonal is used for certificates that belong to the computer or user, typically together with a .pfx file that contains a private key.\\n\\nTrusted Publishers is used to trust software publishers, and Trusted People is used to trust certificates from specific people.", "id": "StoreName", "name": "Certificate Store", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Root", "name": "Trusted Root Certification Authorities (Root)" }, { "id": "CA", "name": "Intermediate Certification Authorities (CA)" }, { "id": "My", "name": "Personal (My)" }, { "id": "TrustedPublisher", "name": "Trusted Publishers (TrustedPublisher)" }, { "id": "TrustedPeople", "name": "Trusted People (TrustedPeople)" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The password that protects the private key in a .pfx file.\\n\\nLeave this empty for .cer, .crt and .p7b files. The installation fails if a password is specified for those file types, or if a .pfx file is installed without a password.", "id": "Base64Password", "name": "Password", "regExValidation": "", "required": false, "type": "TextBoxWithPassword", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "False", "defaultValueObject": null, "description": "Enable to allow the private key of a .pfx file to be exported again from the computer afterwards. Disable to lock the private key to this computer, which is the recommended and most secure setting.\\n\\nThis setting only applies to .pfx files and is ignored for other file types.", "id": "Exportable", "name": "Allow Private Key Export", "regExValidation": "", "required": false, "type": "Boolean", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "False", "defaultValueObject": null, "description": "Enable to install the certificate again when the exact same certificate is already in the store, which refreshes it and reattaches the private key of a .pfx file. Disable to leave the certificate that is already installed untouched and continue without changes.\\n\\nIn both cases the installation is reported as successful. The certificate that is already installed is only replaced once the new one has been installed successfully, so a failed installation never leaves the store without the certificate.", "id": "OverwriteIfExists", "name": "Replace Existing Certificate", "regExValidation": "", "required": false, "type": "Boolean", "value": null, "values": [], "valuesObject": null } ], "powershell": { "base64Encoded": true, "function": "ZnVuY3Rpb2..." }, "type": "powerbrick", "version": "2026.10.8.1"}