Cisco Jabber client v11 update - User Enterprise Trust Certificates rollout via GPO

Hi Guys,

We are just in the middle of testing a deployment of Cisco Jabber client v11. If I install the application manually, firstly I need to select Cisco IM & Presence under advanced options (automatic setting wont detect the correct services). Secondly, when it attempts to log me in, it asks me for about 5-6 certificates to install on my machine. If I select install and auto install in a location, by default it will save them under my user -> Enterprise Trust -> Certificates.

Once I saved all of them, I brought up regedit and browsed to path: HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates . exported them, saved them as a .reg and rolled it out via GPO to all users before rolling out the client.

Now when I tried to push the application to a machine, it makes the user install the certs again so I see double certs in this location (my user -> Enterprise Trust -> Certificates).

So question, how can I make this work? need to make it as easy as possible for the users when rolling out.

thanks guys,
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
You can use GPO Computer Configuration to push the certs out to the locations that you want rather than the Reg method.
This will not ask the users to do anything. Below is a screenshot of the different areas that you can place certs.  Please the 5 or 6 certs in the proper locations that they are supposed to be in.  You should be good to go.
Regarding the first part of your question:
Most installers have switches that will let you do a silent install.
Search for Silent in the webpage and follow the instructions.  I have not installed this before so I am just posting a google search that I came across.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
out2getyouAuthor Commented:
Hi yo_bee, thanks for your reply.
So if I install it manually like stated above, it will install it under my user -> Enterprise Trust -> Certificates.
The above screen shot are for GPO local computer certs, not my user certs?

Also whats the easiest way to place the certs in these locations in GPO?
yo_beeDirector of Information TechnologyCommented:
The enterprise trust is computer base and not user based.  The only item that I know that is user based is the Personal directory under the Cert Store.

I would give what I suggested a go and see if it gives you the desired results.  If not we can dig deeper.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

out2getyouAuthor Commented:
thanks yo_bee. ill try it out and let you know.
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
yo_beeDirector of Information TechnologyCommented:
Will there be any points awarded?
I did outline how to push Certificates using GPO
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.