TompkinsRND MeshCentral

Root CA and agent bootstrap distribution.

Downloads

• root-ca.cer — root CA used to sign agent binaries
• root-ca.crt — same cert, .crt extension
• install-agent.ps1 — Windows bootstrap script (trust + install)

One-shot install (Windows, elevated PowerShell)

Replace YOUR_MESH_ID with the device group ID from MeshCentral (look at the agent download URL in the web UI for meshid=...).

Set-ExecutionPolicy -Scope Process Bypass -Force
Invoke-WebRequest https://certs.mesh.tompkinsrnd.com/install-agent.ps1 -OutFile $env:TEMP\install-agent.ps1
& $env:TEMP\install-agent.ps1 -MeshId 'YOUR_MESH_ID'

Install just the root CA

If you only want to trust the CA without installing the agent:

Invoke-WebRequest https://certs.mesh.tompkinsrnd.com/root-ca.cer -OutFile $env:TEMP\mc-root.cer
certutil -addstore Root $env:TEMP\mc-root.cer
Remove-Item $env:TEMP\mc-root.cer