Kepware The Installer Was Unable To Find Required Root Certificates Exclusive _verified_

Policies may explicitly disable automatic root certificate updates via registry settings like DisableRootAutoUpdate .

This error typically halts the installation process immediately, preventing any Kepware product from being installed. Below is an exclusive breakdown of why this happens and how to resolve it permanently.

2. Manually Install Root Certificates (Offline Environments)

When deploying Kepware to multiple industrial PCs, create a base Windows image that includes: This will refresh your system's trusted root certificate

For most users, especially those on a standard internet-connected PC, this is the only step required. The official PTC recommendation is to simply apply all available Windows updates. This will refresh your system's trusted root certificate store with the latest versions from Microsoft.

With this solution, John's Kepware installation was up and running, and he could finally connect to the plant's machinery. He made sure to share his findings with his colleagues, ensuring that they wouldn't face the same frustrating issue in the future.

The "unable to find required root certificates" error is a security safeguard. By ensuring your Windows machine has the latest , you can resolve the issue and successfully install KEPServerEX. For more detailed support, you may need to open a support ticket on the My Kepware page to get specific guidance. Keep Local computer selected

If your industrial server must remain completely offline, you will need to manually extract or download the required certificates on an internet-connected device, move them via a USB flash drive, and import them manually. Step 1: Open the Microsoft Management Console (MMC)

: The most direct fix is to connect the machine to the internet and run Windows Update to automatically refresh the local Trusted Root Certification Authorities store.

Select , click Add , choose Computer account , and click Next . Keep Local computer selected, click Finish , and hit OK . choose Computer account

For air-gapped networks, maintain a Windows Server Update Services (WSUS) server that distributes the Update for Root Certificates package to all OT machines.

Download from Microsoft: