SSMS installation on off-line computer

In secure networks I have several times found it necessary to install a tool station computer without internet access. Most tools like editors can easily be downloaded from another computer and the installed on the tool station. But Microsoft SQL Server Management Studio (SSMS) has some issues when installing without internet access.

This is an example on the type of error message I usually get. In this case it is from installing SSMS 17.2 on a danish Windows 7. But I have had similar messages on previous SSMS versions and on other Windows version.
I have not found a official description from Microsoft on this situation. One of the first times I ran into this I was actually sitting with several Microsoft SQL Server consultants and PFE's, and they came up with a solution by some mails.

When a SSMS Setup Failure happens it is also logged in a SsmsSetup log file. This log file is in the folder "C:\Users\<User Name>\AppData\Local\Temp\SsmsSetup".
(** Insert example **)

The short description is that SSMS is missing two certificates, that it is used to download during SSMS installation. The two certificates are

• MicRooCerAut2011_2011_03_22 (link)
• MicRooCerAut_2010-06-23 (link)

You will have to install the certificates before installing SSMS.
After you have downloaded the certificates as cer-files you will have to import the certificates into Windows. It does not matter where you place the cer-files.
I know there are several guides on  importing certificates into Windows, but I go through the details anyhow to avoid doubt.

1. Start Microsoft Management Console (mmc.exe)
2. Add the snap-in "Certificates" (Ctrl + M)
3. When you mark the snap-in to be added to MMC you will have to select which account type the snap-in should manage. Select Computer Account 
4. You will also have to select which computer the snap-in should manage. Select Local Computer
5. After adding the Certificates snap-in you should expand Certificates > Root Key Centers... (or Trusted Root Certification Authorities) > Certificates
6. Right-click the item Certificates and select All Tasks > Import...
7. This will start the guide Certificate Import
8. Select to place all certificates in the Certificate Store named Root Key Center... (or Trusted Root Certification Authorities)
9. When both certificates are imported with success you can close MMC

All this I am sure can to automated by a script, but as the computer is off-line there are also some issues getting the script file to the computer.