Ensure Windows Update is functioning. You can force a specific update for certificates:
Windows cannot automatically update its certificate store to verify the installer's signature. Outdated Windows Updates:
Browse to your transferred certificate file and click through the prompt to finish the installation.
In the interconnected world of industrial automation, Kepware stands as a ubiquitous bridge, translating disparate device protocols into a unified language for supervisory control and data acquisition (SCADA) systems. However, even the most robust software is susceptible to the invisible infrastructure of modern cybersecurity: digital certificates. A technician encountering the error message—“The installer was unable to find required root certificates exclusive”—has stumbled upon a silent, fundamental breakdown in trust. This error is not a mere glitch but a symptom of a missing link in the chain of cryptographic authentication, one that prevents Kepware from verifying its own integrity or communicating over secure channels. Understanding this error requires delving into the purpose of root certificates, the heightened security of contemporary Windows environments, and the specific conditions under which Kepware’s installer fails to locate them. Ensure Windows Update is functioning
Industrial environments often feature "air-gapped" computers that cannot access the internet. Windows normally updates its root certificates automatically via Windows Update. Without internet access, the machine cannot fetch the updated certificate chain required to validate the installer.
Open the on your domain controller.
This error occurs when the Kepware installer cannot verify the digital signature of its setup files because the required are missing or outdated on your Windows system . This is common on offline machines or older operating systems like Windows 7 that haven't received recent security updates . Immediate Solutions This error is not a mere glitch but
If an internet path is open but the feature is blocked by policy, verify that the policy is set to Disabled or Not Configured under: Local Computer Policy > Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings .
Depending on your security posture, there are two main approaches: updating Windows or manually installing the missing certificates.
If the server must remain offline or cannot be updated, you must manually install the required root certificates (often from issuers like GlobalSign or VeriSign): "Not Trusted" Warning:
Windows cannot perform a "Root AutoUpdate" to fetch the latest certificates from Microsoft.
to ensure it has permission to access the certificate store. "Not Trusted" Warning: