InstallRoot 5.6 UNCLASSIFIED
11
UNCLASSIFIED
InstallRoot 5.6 Quick Start Guide
Upon first use, the InstallRoot 5.6 Quick Start Tutorial on installing certificates will
launch automatically. After the initial run, the tutorial can be re-launched at any time
from the Help tab of the InstallRoot GUI.
1) By default, InstallRoot will launch without administrative privileges. This will
open the Microsoft Current User trust store upon launch and limit some features
of the tool.
To launch InstallRoot with administrative privileges, right-click and select Run
as Administrator or, if InstallRoot is already open, select Restart as
Administrator from the InstallRoot Home tab. This will launch InstallRoot and
open the Local Computer Certificate Store instead of the default Microsoft Current
User Store. See the InstallRoot User Privileges section for additional information
on Administrator features.
2) InstallRoot will scan for new NSS or Java stores upon startup. Click Yes to add
any new stores detected to InstallRoot. By default, InstallRoot will combine all
known NSS or Java store locations into a single store, known as a Multi-Store.
Stores may be added individually or as multi-stores using the Add button in the
Store tab.
3) Use the Store and Group tabs to Add, Remove, or toggle Subscriptions for each.
Administrator rights and domain access are required to add the NTAuth store.
To modify the online update locations for each group, use the Edit button. Select
Restore defaults to restore the default DoD, ECA, and JITC groups to a trust
store.
4) Subscribe, Export, and Uninstall certificates in the Certificates tab. Use
Certificate Cleanup to filter and remove problematic certificates from
configured InstallRoot stores. See the Certificate Cleanup section for more
information.
5) To install certificates, click the certificate store and ensure the store is subscribed
( ) to the desired certificate groups or individual certificates. Subscriptions to
certificate groups and individual certificates may be toggled by selecting the ( )
and ( ) icons located next to each group or certificate name, or by using the
functions located in the corresponding Group or Certificates tab.
Once ready, select Install Certificates from the Home tab.
6) Use Online Update to check for new Trust Anchor Management Protocol
(TAMP) messages from the GDS (CRL GDS) website. Online updates may occur
automatically by selecting the setting in the Preferences window. For more
information on TAMP messages, see the Online Update section.