Unable To Find Required Root Certificates Exclusive [patched]: Kepware The Installer Was
: Industrial control systems (ICS) and SCADA environments typically operate without internet access. Windows normally fetches missing root certificates automatically via Windows Update when it encounters a new file signature. Without an internet connection, this update mechanism fails.
If the standard update fails, manually download the specific root certificate from the vendor’s repository:
Right-click the certificate file and select . : Industrial control systems (ICS) and SCADA environments
If you are trying to install or upgrade KEPServerEX and hit the wall with a "Missing Root Certificates" error, you aren't alone. This safeguard ensures that the installer you are running is authentic and hasn't been tampered with. Why this happens
This is the most frequent cause. If the target machine is running an older version of Windows (e.g., Windows 7, Windows Server 2008/2012, or an early build of Windows 10) and has not been updated recently, the local certificate store will be outdated. Newer Kepware installers are signed with certificates that rely on modern root authorities (such as DigiCert or Sectigo) that older OS versions do not recognize by default. If the standard update fails, manually download the
Ensure the server’s system date and time are accurate. Incorrect times can invalidate certificate validity periods.
If the server cannot access the internet, manually import the required root certificates using an administrative command prompt. This method bypasses the need for an active internet connection or a full system upgrade. Why this happens This is the most frequent cause
: If the machine is offline, you must manually install the required root certificates (such as those from GlobalSign or VeriSign ).
Move the downloaded .cer or .crt files to the target machine via a secure USB drive or authorized data transfer path.
Once you have resolved the "kepware the installer was unable to find required root certificates exclusive" error, adopt these best practices for future rollouts:
When installing or upgrading like KEPServerEX or ThingWorx Kepware Server, you may encounter a critical installation failure. The setup wizard abruptly halts and displays a definitive error message: