SO - Certificate Import Wizard

You should be able to use group policies to push out the root as a trusted root. Perhaps this will help you. http://technet.microsoft....ibrary/cc754841.aspx

Or this: The certificate can be deployed through a group policy by exporting the certificate and importing it to the Trusted Root Certification Authorities list under Computer Configuration\Windows Settings\Security Settings\Public Key Policies.

As far as I know there is no script way to do it but you can use AD group policies.

I assume all client PCs are in the same domain.

I would recommend using an in-house certificate server and use that and store the certificate from the CA as a trusted root instead of the specific grid certificate. Then you have one trusted root for all internal web sites and secure communication.
http://technet.microsoft....ibrary/hh831740.aspx

It will be interesting to know what type of SSL certificate is the most used. Self signed is easiest to get started with but I always replace that grid certificate with an Infor CA when I install internal environments here at Infor. Our Certificate server has a web UI where I can paste the certificate request and download a certificate directly after authenticating myself with my domain credentials. That CA is a trusted root for all clients PCs.

Thanks Karin !!!

Our network admin had it installed on the server so we no longer have to worry about installing it on user's pc.