This error completely blocks the installation or upgrade of or ThingWorx Industrial Connectivity , prompting the user to apply Windows updates or contact support. Below is a comprehensive guide to understanding why this issue happens and how to fix it in offline, air-gapped, or legacy OT environments. Why This Error Occurs
Get-ChildItem -Path Cert:\LocalMachine\Root | Where-Object $_.Subject -like "*DigiCert*" | Format-List Subject, Thumbprint
Resolving the Kepware Installer "Missing Root Certificates" Error The error message This error completely blocks the installation or upgrade
: If manual installation fails, PTC Kepware Support recommends opening a ticket through My Kepware to receive the specific certificate chain files required for your server version.
If standard installation fails, users have reported success with these alternative methods: Registry Imports If standard installation fails, users have reported success
Once you have resolved the "kepware the installer was unable to find required root certificates exclusive" error, adopt these best practices for future rollouts:
This bypasses signature validation. Only use this in a trusted, isolated network where you are certain the installer binary has not been tampered with. This is not recommended for production SCADA environments but can resolve the "exclusive" lock error in lab/test settings. Click and allow the system to download and
Click and allow the system to download and install all critical security updates. Restart the machine and run the Kepware installer again.
The official recommendation from PTC, as stated in the error message itself, is to run Windows Update. This is the safest and most effective method for most users. The installer cannot find the required root certificates. Please apply windows updates.
: Ensure your system isn't blocking certificate updates: