Root certificate downloads

[HugsNotDrugs]

Does anyone know where the root certs from McAfee KB91697 can be downloaded as individually as  .crt, .cer, .ca-bundle, .p7b, .p7c, .p7s, .pem ?

[aguevara]

Personally havent seen them on those formats as they the majority of those certs come from windows updates, on that article we provide them as an attachment but why you need them on those formats? 

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[cdinet]

You can search for each online, but we also provided the certs in the links in our KB.  They aren't in that format, but they install them on the system in the registry.  You can either run the bat file or deploy it via epo to your systems.

[HugsNotDrugs]

Thank you for the prompt feedback. I need the certs in a form convenient for the GPO deployment, that is why I am reluctant to use the attachments from the KB Article.

[cdinet]

Doesn't gpo support registry edits?  Otherwise you will need to search for each of those online, they don't come from us.

[HugsNotDrugs]

Actually the McAfee KB92948 has one of the certs attached in the .crt format together with the instruction about the GPO deployment, but not the other certs. It would be great if the KB could be updated to provide complete information.

[aguevara]

For GPO you can follow the Option 1 from the article itself

Option 1 - Install the certificates using Active Directory group policy:
We recommend that you install the certificates using the Active Directory group policy for wide deployment.

[SWISS]

@aguevar

No, Thats only the usertrust, customer asked for the Other Certs that are in the digicert.bat like the. He wanted to know how to simply deploy those others.

McAfee Code Signing CA 2 (2024)	17661DFBA03E6AAA09142E012D216864F01D1F5E
McAfee OV SSL CA 2 (2024)	9151B539751B891401C745A9DE301CBDBADF3FB6

Please read the question of the customer again please.

[cdinet]

We provide those as a courtesy in the bat file, if you want those certs as individual files/certificates, you will need to obtain them from the vendor that provides those certificates.

[SWISS]

You mean I contact current TRELIX or ex. INTEL employee for those? 😉

Yes that's what I said below. It's MS so we understand.

It's the company who writes Defender which blocks CHROME in Enterprise and want's all their enterprise customers in their cloud so their 270'000 Accenture employee have more customer and we as long term MS customers/resellers close...

;_)

We are on your side really....

McAfee Code Signing CA 2 (2024)	17661DFBA03E6AAA09142E012D216864F01D1F5E
McAfee OV SSL CA 2 (2024)	9151B539751B891401C745A9DE301CBDBADF3FB6