Kepware The Installer Was Unable To Find Required Root Certificates Exclusive -
Delete the corrupted certificate store cache:
Right-click the downloaded .crt file and select . Choose Local Machine and click Next. Select Place all certificates in the following store .
This error typically halts the installation process immediately, preventing any Kepware product from being installed. Below is an exclusive breakdown of why this happens and how to resolve it permanently. You will need to identify and download the
If you cannot use the official patch and Windows Update is not an option, you can manually import the certificates. You will need to identify and download the specific certificate files (usually in .cer , .crt , or .p7b format).
At its core, a root certificate is the ultimate anchor of trust in the public key infrastructure (PKI). Issued by a trusted Certificate Authority (CA) such as DigiCert, GlobalSign, or Let’s Encrypt, the root certificate is self-signed and stored in a protected “Trusted Root Certification Authorities” store within the operating system. When Kepware—or any modern application—attempts to establish a secure HTTPS connection for licensing, updates, or IoT Gateway communication, it checks the server’s certificate against this local root store. If the chain of trust leads back to a missing or untrusted root, the connection fails. The word “exclusive” in the error message is particularly telling: it implies that the installer is looking for a specific , non-generic root certificate, likely tied to Kepware’s code-signing or a proprietary communication component (such as the ThingWorx or IoT Gateway add-on). Without that precise root, the installer refuses to proceed, prioritizing security over functionality. Without that precise root
Right-click the folder. Choose All Tasks > Import .
The simplest and most direct solution recommended by PTC is to ensure your Windows system is fully updated. the installer refuses to proceed
Locate the relevant root certificates (e.g., DigiCert Trusted Root G4 or Entrust Root Certification Authority ).
The most straightforward fix is to connect the machine to the internet and run Windows Update . This allows the OS to automatically update its Trusted Root Certification Authorities store.