Update windows root ca list – offline

Download the latest version of root ca list [SST] from windows update on a device that has network connection certutil.exe -generateSSTFromWU roots.sst copy the sst file to the offline machine and use powershell to import the root ca list. $sst = ( Get-ChildItem -Path C:\certs\roots.sst ) $sst | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root