>It surprises me there was a link that could automatically do it. Automatic installation of certs in a trusted store is a massive security hole e.g. the Lenovo Superfish fiasco.

This was not a new installation but a fix in regards to an issue that IE no longer shows an extended validation certificate as is anymore.

>AFAIK users should always install such certs manually e.g. http://www.poweradmin.com/help/sslhints/ie.aspx .

I will check that link.

Thanks