Kepware The Installer Was Unable To Find Required Root Certificates Exclusive <BEST ◆>

Kepware: "The installer was unable to find required root certificates (exclusive)" — Diagnosis and Fixes

Summary

Run Windows Update: The simplest fix is to connect the machine to the internet and run Windows Update. This automatically refreshes the Trusted Root Certification Authorities store . Kepware: "The installer was unable to find required

Right-click the certificate file and select Install Certificate . Choose Local Machine as the store location . On an internet-connected machine , download the Kepware

• On an internet-connected machine, download the Kepware installer.
• Run the installer until it fails. Navigate to %temp% and locate the extracted installer logs (e.g., Kepware_Install.log). Look for a line like:

  Error: Missing root certificate – SHA1:  xx xx xx ...
  

• Use certmgr.msc on a working machine to export the matching root certificate.
• Transfer and import it on the target machine via:

  certutil -addstore Root "path\to\exported.cer"
  

Step 1 – Identify the Required Certificate: Kepware installers typically require certificates from DigiCert, Sectigo, or Microsoft Windows Production PCA 2011. The exact root can vary by version, but DigiCert High Assurance EV Root CA is a common requirement. Use certmgr

6. Network and revocation checks

Missing Trust Chain: The installer is signed by authorities such as GlobalSign, VeriSign, or Microsoft. If their root certificates are not in the "Trusted Root Certification Authorities" store, the system views the installer as untrusted.

Official documentation from PTC Support confirms that this is a known issue for version 6.x and higher when digital signatures cannot be verified.