COMMAND EVERYTHING.

Enable-IISCentralCertProvider

Enables the IIS central certificate store.

Last verified: 2026-10-26

Microsoft IISAdministration reference: Enables the IIS central certificate store. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Enable-IISCentralCertProvider -CertStoreLocation <String> -UserName <String> -Password <SecureString>
 -PrivateKeyPassword <SecureString> [<CommonParameters>]

Required permissions

Use an account with the target resource permissions documented for Enable-IISCentralCertProvider. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / IISAdministration · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-CertStoreLocation (required)

Specifies the physical path to the central certificate store; this can be either a local path (e.g., D:\CertStore) or a UNC path. For example: -CertStoreLocation "\\\\CertStoreServer\CertStore"

-Password (required)

Specifies the password for the user account used to access the certificate store. For example: -Password "P@ssw0rd"

-PrivateKeyPassword (required)

Specifies the private key password for your IIS certificates. For example: -PrivateKeyPassword "pa$$W0rd" This parameter should only be used if all your IIS certificates share the same password.

-UserName (required)

Specifies the user account used to access the certificate store; this can be either an Active Directory SAM Account Name or a user principal name. For example: -UserName "IISCertificateAdmin" It is recommended that you create a user account reserved solely for certificate administration, and that you give this account only the privileges required to manage the certificate store (most notably, the account needs read access to the store location). The certificate store user account can be either a local account or a domain account.

Prerequisites

Windows with the IISAdministration module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.

Examples

Enable-IISCentralCertProvider -CertStoreLocation "\\CertStoreServer\CertStore" -UserName "IISCertificateAdmin" -Password "P@ssw0rd"

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/IISAdministration/Enable-IISCentralCertProvider.md

https://learn.microsoft.com/powershell/module/iisadministration/enable-iiscentralcertprovider?view=windowsserver2025-ps

Explain or customize this command with AI

Related commands

Add-CauClusterRole

Add-ClusterCheckpoint

Get-FsrmAdrSetting

Clear-HgsServer