Select when prompted for the Store Location (this ensures all users, including the installer, can use it). Select Place all certificates in the following store .
C. Enable Windows Crypto services
Modern Kepware software binaries are signed using SHA-2 digital certificates issued by global Certificate Authorities (CAs), such as or DigiCert . During installation, the OS checks its internal certificate store to confirm the publisher is trusted. This verification fails in two primary scenarios: Select when prompted for the Store Location (this
In conclusion, the Kepware error “unable to find required root certificates exclusive” is far more than a nuisance message—it is a reflection of the tension between industrial longevity and modern cryptographic trust models. It reminds us that software installation is not merely a file-copying operation but a ritual of mutual authentication between publisher, operating system, and user. As Industry 4.0 pushes even legacy plants toward secure, encrypted communication, errors like this will become increasingly common. The solution lies not in bypassing security but in understanding it: ensuring that the invisible roots of digital trust are as well-maintained as the visible cables and controllers on the factory floor. Only then can Kepware—and the automation it enables—operate with both reliability and integrity.
To resolve this issue, follow the steps below in order of preference. It reminds us that software installation is not
This error typically halts the installation process immediately. It indicates that the Windows operating system on the target machine lacks the specific security certificates required to validate the digital signature of the Kepware installation files.
If the server cannot access the internet, manually import the required root certificates using an administrative command prompt. This method bypasses the need for an active internet connection or a full system upgrade. For further assistance
For further assistance, you can refer to the official PTC Kepware Support Article CS292168 or open a ticket at My Kepware if manual installation fails .
These codes are a clear signal that the installer failed to find the necessary GlobalSign, VeriSign, or Microsoft root certificates.