Kepware The Installer Was Unable To Find Required Root Certificates Exclusive Jun 2026
Method 2: Manually Install Root Certificates (Best for Offline/Air-Gapped Systems)
Expand > Trusted Root Certification Authorities > Certificates .
Whether you choose to simply run Windows Update, contact PTC support, deploy a community patch, or manually import the certificate, the solution is well-documented and proven. By understanding the underlying cause, you can confidently resolve this error and proceed with your KEPServerEX installation, ensuring your industrial communication platform is both functional and secure. Method 2: Manually Install Root Certificates (Best for
Systems running Windows 7 Professional, Windows Server 2008 R2, or unpatched variants of Windows 10/11 lack the modern SHA-256 root certificates required by newer Kepware binaries. Diagnostic Steps: How to Verify the Issue
This problem is most prevalent on older Windows versions like and Windows Server 2016 , which do not have up-to-date root certificate stores. Over time, Microsoft has moved to stronger security standards (like SHA-256), and the root certificates on these older systems haven't been automatically updated, creating a kind of "trust gap" for newer software. Systems running Windows 7 Professional, Windows Server 2008
Modern PTC Kepware installation files are digitally signed to ensure authenticity and code integrity. The Windows CryptoAPI system validates these digital signatures against trusted root certificates stored locally on your machine.
This is the most frequent cause. If the target machine is running an older version of Windows (e.g., Windows 7, Windows Server 2008/2012, or an early build of Windows 10) and has not been updated recently, the local certificate store will be outdated. Newer Kepware installers are signed with certificates that rely on modern root authorities (such as DigiCert or Sectigo) that older OS versions do not recognize by default. Modern PTC Kepware installation files are digitally signed
[ Kepware Installer Executable ] │ ▼ Signed with modern digital certificate (e.g., Sectigo / Entrust) [ Windows Cryptographic API ] │ ▼ Checks Local Trusted Root Store [ Offline / Outdated Windows Server ] ──❌ Missing Updated Root Authority ──► [ INSTALLATION FAILS ] The underlying causes include:
