Kepware The Installer Was Unable To Find Required Root Certificates Exclusive Better -
In the Certificate Import Wizard, select as the store location, then click Next .
Kepware is the gold standard for industrial connectivity, acting as the bridge between diverse automation devices and IT/OT systems (OPC, MQTT, REST, etc.). However, even the most robust software can be stopped in its tracks by a seemingly obscure operating system error.
If you cannot use Windows Update, follow these steps to manually trust the installer: Right-click the Kepware .exe installer. Select Properties > Digital Signatures .
A manufacturing plant attempts to upgrade Kepware 6.14 to 6.15 on a Siemens SIMATIC IPC (Windows 10 IoT LTSC, no internet).
This issue is not limited to a single version of KEPServerEX. According to official PTC support documentation, the problem has been observed across a wide range of versions on several Windows platforms. In the Certificate Import Wizard, select as the
The error regarding the inability to find required root certificates during Kepware installation can usually be resolved by ensuring your system is up to date, manually installing required certificates, or obtaining specific guidance from Kepware's support team. Always follow best practices for security when handling certificates and software installations.
You can download the "DigiCert Global Root CA" from the official DigiCert website. Install the certificate:
One of the most frustrating errors encountered during the installation or upgrade of Kepware products (including KEPServerEX, ThingWorx Kepware Edition, or LinkMaster) is:
At its core, this is a security feature. KEPServerEX installers are digitally signed using a code-signing certificate to guarantee their authenticity and that they haven't been tampered with. For Windows to trust this signature, it must trace it back to a trusted Root Certificate Authority (CA) stored in your system's "Trusted Root Certification Authorities" store. When this chain of trust is broken, the installation stops. If you cannot use Windows Update, follow these
Kepware, like most modern software, signs its installers with a secure digital certificate. The Windows operating system uses a "Trusted Root Certification Authorities" store to verify these signatures. If your machine is not updated, or if it is running in a locked-down environment (no internet access), it may not recognize the certificate authority used by Kepware, resulting in this failure. Step-by-Step Solutions to Fix Kepware Certificate Error
Do not let Windows "Automatically select the certificate store." Instead, choose Place all certificates in the following store and browse to Trusted Root Certification Authorities . Finish the import and restart the Kepware installer. Solution 3: Update via Windows Update (WSUS)
user wants a long article about the "kepware the installer was unable to find required root certificates exclusive" error. The plan outlines five search steps. I'll start by executing the search operations as specified. search results have provided several relevant links. The top result from PTC appears to be the official support article. The search results also include various community resources and potential solutions. To gather comprehensive information, I will now open the most promising links, including the PTC support article, the CSDN articles, the community discussions, and any other potentially useful resources. search results provide a wealth of information. I have identified official PTC support articles, community discussions, and various resources offering solutions. The PTC article (CS321323) is a key resource. The CSDN articles and community posts also provide detailed explanations and potential fixes. I will now organize the article to cover the error description, causes, solutions, and advanced troubleshooting. The article will be structured with an introduction, sections on understanding the error, why it occurs, impacted products and versions, a step-by-step solution guide, advanced scenarios, preventative measures, and a conclusion. I will cite the relevant sources throughout. "exclusive" error, often accompanied by the precise message, The installer was unable to find required root certificates. Please apply windows updates , is a classic and widespread installation blocker for KEPServerEX. It is a safety mechanism, not a bug, triggered by the installer's inability to verify the digital signature of the software due to missing or outdated root certificates in the Windows operating system. This article provides a comprehensive breakdown of why this happens, the exact systems it affects, and a definitive, step-by-step guide to resolving it.
This is the most frequent cause. If the target machine is running an older version of Windows (e.g., Windows 7, Windows Server 2008/2012, or an early build of Windows 10) and has not been updated recently, the local certificate store will be outdated. Newer Kepware installers are signed with certificates that rely on modern root authorities (such as DigiCert or Sectigo) that older OS versions do not recognize by default. This issue is not limited to a single version of KEPServerEX
E. Workaround for offline/private CA environments
Systems where automatic certificate updates are disabled via group policy. Solutions to Resolve the Installer Issue
Industrial environments often feature "air-gapped" computers that cannot access the internet. Windows normally updates its root certificates automatically via Windows Update. Without internet access, the machine cannot fetch the updated certificate chain required to validate the installer.