The "Installer was unable to find required root certificates" error in Kepware occurs primarily on offline systems due to missing root certificate authorities, which prevents digital signature verification. Resolving this issue involves manually importing the necessary DigiCert or GlobalSign root certificates into the Windows Trusted Root store using the For more details, visit PTC Support
A. Restore/update Windows Trusted Root Certificate store The "Installer was unable to find required root
: You can also use the certutil tool to add certificates: Run Command Prompt as Administrator. Execute: certutil -addstore "Root" . Troubleshooting Execute: certutil -addstore "Root"
Right-click the certificate file and select . Bypass (Not Recommended – Only for Trusted Internal
To fix the problem, you must understand the root cause. In modern Windows environments, software vendors digitally sign their installers and executables using code-signing certificates. These certificates are issued by trusted Certificate Authorities (CAs) like DigiCert, GlobalSign, or Sectigo.
E. Workaround for offline/private CA environments
If you are trying to install or update Kepware’s KEPServerEX and you’re hit with the error you aren't alone. This is a common roadblock, especially on industrial PCs (IPCs) or servers that are kept offline for security reasons. Why Is This Happening?