

The batch file "RootCertInstallUtility.bat" included here will install the following Root Certificates to the same locations in Certificate Store as performed by Windows Update.
1) Microsoft Root Certificate Authority 2011.crt
2) VeriSign Universal Root Certification Authority.cer
3) VeriSign Class 3 Public Primary Certification Authority - G5.cer

Microsoft Root Certificate Authority 2011.crt was obtained from http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt  
VeriSign Universal Root Certification Authority.cer was obtained from https://www.symantec.com/theme/roots
VeriSign Class 3 Public Primary Certification Authority - G5.cer was obtained from https://www.symantec.com/theme/roots