title: A certificate chain could not be built to a trusted root authority
body: <p>During the installation of .NET Framework 4.6.2, I got an error:</p>
  
  <blockquote>
    <p>.NET Framework installation failed: -2146762486. A certificate chain
    could not be built to a trusted root authority</p>
  </blockquote>
  
  <p>A solution to the above-mentioned error is given at this <a href="https://blogs.msdn.microsoft.com/vsnetsetup/2016/03/28/a-certificate-chain-could-not-be-built-to-a-trusted-root-authority-2/" rel="noreferrer">MSDN Blog link</a>, which says to do the following steps:</p>
  
  <p><strong>1.</strong>  Download the certificate <a href="http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt" rel="noreferrer">http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt</a>  locally (Example: C:\Temp)</p>
  
  <p><strong>2.</strong> You can use the certmgr.exe utility to add the certificate by using the command line. For more information, see the Certmgr.exe (Certificate Manager Tool) topic at MSDN.</p>
  
  <p><strong>3.</strong> Open an admin command prompt and run this command: certmgr.exe /add  C:\Temp\MicRooCerAut2011_2011_03_22.cer /s /r localMachine root</p>
  
  <p><strong>4.</strong> Next, try installing the patch KB3135996 or KB3136000</p>
  
  <p><strong>MY QUESTION:</strong></p>
  
  <p>The installation of .NET framework 4.6.2 has to be done on several production systems so, <strong><em>are the above-mentioned steps standard</em></strong>? I mean, <strong><em>could it create problem to install the same certificate on several systems</em></strong>? When the systems will be connected to the internet at some point, could it create conflict?</p>
  
  <p><strong>PS:</strong> Solving this problem (managing certificates) by connecting the systems to the Internet is not an option for me since the whole process must be <strong>offline</strong>.</p>