I want to understand What will happen behind the scenes When installing a certificate via MMC and browsers on Windows OS.

While installing some certificates using Internet Explorer, I noticed that certificate has not been added to MMC. But certificate was working fine in IE.

If it try the same certificate with FireFox will not work.

Does every browser save internally certificates? How precedence work with browser's certificates over MMC ones?

  • Do you mean enrolling a client certificate? iE will create it in the same keystore as the MMC, but there are less management function. Firefox works with its own store, so there is no MMC alternative. – eckes Aug 29 '17 at 22:07
  • this is more of a Windows internals question than a security question – schroeder Aug 31 '17 at 16:49