Distribute certificates to client computers using Group Policy

To distribute certificates to client computers using Group Policy

 1.   On a domain controller in the forest of the account partner organization, click [b]Start[/b], point to[b] Administrative Tools[/b], and then click [b]Domain Security Policy[/b].
 2.  In the console tree, double-click [b]Public Key Policies[/b], right-click [b]Trusted Root Certification Authorities,[/b] and then click [b]Import[/b].
 3.  On the Welcome to the Certificate Import Wizard page, click [b]Next[/b].
 4.  On the [b]File to Import page[/b], type the path to the appropriate certificate files (for example, c::\file.cer), and then click [b]Next[/b].
 5.  On the [b]Certificate Store[/b] page, click [b]Place all certificates in the following store[/b], and then click [b]Next[/b].
 6.  On the [b]Completing the Certificate Import Wizard page[/b], verify that the information you provided is accurate, and then click [b]Finish[/b].
 7. Repeat steps 2 through 6 to add additional certificates for each of the ADFS servers.
 8. [b]Reboot[/b] Computer Client.


https://technet.microsoft.com/en-us/library/cc782744%28v=ws.10%29.aspx