As Notes 11 uses OpenJDK/JVM, if the Admin imports certificates through commandline then Notes client should automatically store the certificates immediately after the installation for other users with out end-users intervention.
How to import certificates in the latest Notes client through the command line?
Before the possibility to register certificates was over ....\Notes\jvm\bin\ikeycmd.exe, but now it is changed from ikeyman to keytool and delivered it with Lotus Notes 11.
To import certificates end-user has to manually change the Java Keystore Password.
If Admin needs to distribute the certificates using Notes as a delivery vehicle, through command line then Notes client should automatically store the certificates immediately after the installation for other users without end-user intervention.