Kepware The Installer Was Unable To Find Required Root Certificates Exclusive Info
Only do this if you are confident in your environment's security. Re-enable it after installation. 4. Bypass Certificate Validation (Use Caution)
This error implies that the installer cannot verify the digital signature of the Kepware installation files, leading to a security failure. Below is a comprehensive guide to understanding and solving this issue. What Causes This Error?
[Start Menu] ──► Type "mmc" ──► Add "Certificates" Snap-in ──► Select "Computer Account" │ ▼ [Trusted Root Certification Authorities] ◄── Right-click & Import ◄── [Select .cer File] Press Win + R , type mmc into the Run box, and hit Enter.
certutil -syncWithWU
C. Enable Windows Crypto services
This is the most frequent cause. If the target machine is running an older version of Windows (e.g., Windows 7, Windows Server 2008/2012, or an early build of Windows 10) and has not been updated recently, the local certificate store will be outdated. Newer Kepware installers are signed with certificates that rely on modern root authorities (such as DigiCert or Sectigo) that older OS versions do not recognize by default.
The simplest fix is to connect the machine to the internet and run Windows Update Only do this if you are confident in
Summary
The most common missing certificates for Kepware are:
When installing , users might occasionally encounter a frustrating error message: "The installer was unable to find required root certificates." This error commonly occurs during the installation of newer versions (such as V6.15 and later) on Windows operating systems, preventing the installation from proceeding. If it says it's invalid
If the host system has disabled Windows Updates or runs an older OS image that lacks modern root certificates (such as updated VeriSign, DigiCert, or Sectigo roots), the validation process fails immediately.
Windows Update periodically downloads the latest list of trusted root CAs from Microsoft.
If it says "This digital signature is OK," your system just needs the root certificates mentioned above. If it says it's invalid, download a fresh copy from the PTC Kepware website. Pro-Tip for Industrial Environments or Sectigo roots)
Run the built-in Windows utility to force the certificates into the local computer store: