COMMAND EVERYTHING.

Set-IISCentralCertProvider

Sets property values for the IIS central certificate store.

Windows Server · Risk: High · Documentation Verified

Last verified: 2026-10-26

Microsoft IISAdministration reference: Sets property values for the IIS central certificate store. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Set-IISCentralCertProvider [-CertStoreLocation <String>] [-UserName <String>] [-Password <SecureString>]
 [-PrivateKeyPassword <SecureString>] [<CommonParameters>]

Copied 0 times

Required permissions

Use an account with the target resource permissions documented for Set-IISCentralCertProvider. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / IISAdministration · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-CertStoreLocation: Specifies the physical path to the central certificate store; this can be either a local path (e.g., D:\CertStore) or a UNC path. For example: -CertStoreLocation "\\\\CertStoreServer\CertStore"
-Password: Specifies the password for the user account used to access the certificate store. For example: -Password "P@ssw0rd"
-PrivateKeyPassword: Specifies the private key password for your IIS certificates. For example: -PrivateKeyPassword "pa$$W0rd" This parameter should only be used if all your IIS certificates share the same password.
-UserName: Specifies the user account used to access the certificate store; this can be either an Active Directory SAM Account Name or a user principal name. For example: -UserName "IISCertificateAdmin" It is recommended that you create a user account reserved solely for certificate administration, and that you give this account only the privileges required to manage the certificate store (most notably, the account needs read access to the store location). The central store user account can be either a local account or a domain account.

Prerequisites

Windows with the IISAdministration module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.

Examples

Example 1: Modify the location of the central certificate store

Set-IISCentralCertProvider -CertStoreLocation "\\NewCertStoreServer\CertStore"

This command modifies the location of the IIS central certificate store. In this example, the store has been moved to the file share \\\\NewCertStoreServer\CertStore. Note that Set-IISCentralCertProvider does not move the certificate files to the new location. Instead, the cmdlet merely configures the certificate store to use this new location. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/IISAdministration/Set-IISCentralCertProvider.md

https://learn.microsoft.com/powershell/module/iisadministration/set-iiscentralcertprovider?view=windowsserver2025-ps

Personal collections

Explain or customize this command with AI

Related commands

Add-CauClusterRole

Add-ClusterCheckpoint

Get-FsrmAdrSetting

Clear-HgsServer