The certificate can be distributed by group policy.

From: http://unixwiz.net/techtips/deploy-webcert-gp.html

In the Group Policy Object Editor, navigate down to: Computer Configuration

Windows Settings Security Settings Public Key Policies Trusted Root Certification Authorities Then right-click and select Import.