Microsoft Root Certificate: Authority 2011.cer : It has historically been used to sign Windows Boot Manager and third-party bootloaders to ensure they haven't been tampered with during the startup process. Get-ChildItem -Path Cert:\LocalMachine\Root | Where-Object $_.Subject -like "*Microsoft Root Certificate Authority 2011*" microsoft root certificate authority 2011.cer CertUtil -addstore AuthRoot MicrosoftRootCertificateAuthority2011.cer Use code with caution. Copied to clipboard Alternatively, using certmgr.exe for specific store targeting: powershell : It has historically been used to sign