If you have to do it on Windows and can compile the nss tools or find some binary, you could do something similar in Windows. See here for example: Link #2

I suppose it depends on the operating system. But if you have 1k Linux desktops it should be easy (hopefully you have an SSH key installed on each).

Put there IP addresses into a file and from a bash shell do something like this:

for compy in `cat file_with_addresses` ; do scp your_ca.crt root@$compy:/usr/share/ca-certificates/mozilla/ ; ssh root@$compy ‘ln -s /usr/share/ca-certificates/mozilla/your_ca.crt /etc/ssl/certs/your_ca.pem’ ; done

These paths are based on Ubuntu 9.04. If you are running some other distro, you’ll need to figure out the paths for yourself.