Do certificates have to be manually added to client machines?

Question

I am deploying a WCF based application that uses mutual-authentication, for this reason certificates need to be installed on the clients machine, I assume this must be done so manually? If not, what other options do I have? The software is being distributed internally via ClickOnce. Is it possible to distribute the certificate upon the software first being installed (automatically)?

Answer 1

Assuming that it is an internal Application and you have a Windows domain.

Then you can distribute the certificates using a domain policy. See: http://technet.microsoft.com/en-us/library/cc772491.aspx