Kepware The Installer Was Unable To Find Required Root Certificates Exclusive -

This error typically occurs when Kepware’s installer attempts to validate digital signatures or establish secure HTTPS connections during installation, but the Windows Trusted Root Certification Authorities store is missing necessary certificates.

Here’s a focused guide to resolve “The installer was unable to find required root certificates” in Kepware.

2. Use a Local Windows Server Update Services (WSUS)

A WSUS server can distribute root certificate updates without needing every machine to access the public internet.

Part 3: Prevention – How to Avoid This Error in Future Deployments

Once you resolve the error, implement these practices to ensure it never returns. Open Command Prompt as Administrator

Method 3: The Silent Install Bypass (For Advanced Users)

If you cannot update certificates, you can attempt to bypass the certificate check using command-line installation. Note: This does not fix security; it merely suppresses the check.

  1. Open Command Prompt as Administrator.
  2. Navigate to the folder containing the Kepware installer (e.g., KEPServerEX_6.15.exe).
  3. Run the following command: 
    KEPServerEX_6.15.exe /quiet /norestart
    Or use the generic installer switch: 
    setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART

Warning: This method may fail if the installer has hard-coded certificate validation. It works primarily for older versions.

2. Disconnected or Offline Networks

Industrial environments often feature "air-gapped" computers that cannot access the internet. Windows normally updates its root certificates automatically via Windows Update. Without internet access, the machine cannot fetch the updated certificate chain required to validate the installer. Or use the generic installer switch: setup

Conclusion: Dominate the Certificate Error

The error "The installer was unable to find required root certificates" is not a bug in Kepware but a reflection of Windows' evolving security model. As cyber-attacks on supply chains increase, code signing becomes more rigorous, and outdated Windows builds are left behind.

By following the methods in this guide—especially the manual import of root certificates for air-gapped networks—you can bypass this roadblock in minutes.

Final Checklist When You See This Error: Solve the certificate problem

  • [ ] Is the system date/time correct?
  • [ ] Does the machine have internet? (If yes, run Windows Update).
  • [ ] Is TLS 1.2 enabled?
  • [ ] If air-gapped: Have you manually imported the DigiCert/Sectigo root CAs?

Solve the certificate problem, and you’ll be back to connecting your industrial devices in no time.

Need further assistance? Contact PTC Kepware support with the installer log file (located in %temp%/PTC_Kepware_Install.log).