When installing or upgrading PTC Kepware products (such as or ThingWorx Kepware Server ), you may encounter a critical installation block. The software halts, displaying the message: "The installer was unable to find required root certificates. Please apply Windows updates. If unable to apply Windows updates, contact support for instructions on installing root certificates."
If manual installation of GlobalSign or Microsoft root certificates does not work, it is recommended to open a support ticket with the Kepware team for specific offline certificate packages.
Industrial PCs (IPCs) and servers isolated from the internet cannot use the automatic Windows Root Certificate Update mechanism. Over time, their built-in certificate stores become severely outdated. When installing or upgrading PTC Kepware products (such
Windows Update periodically downloads the latest list of trusted root CAs from Microsoft.
E. Workaround for offline/private CA environments If unable to apply Windows updates, contact support
Press Win + R , type , and press Enter to launch the Microsoft Management Console.
Depending on your security posture, there are two main approaches: updating Windows or manually installing the missing certificates. Windows Update periodically downloads the latest list of
B. Fix permissions or Group Policy restrictions