The error message typically occurs during the installation or upgrade of PTC Kepware products when the Windows operating system lacks the necessary updated root certificates to verify the installer's digital signature. This is common on systems that are offline or have disabled Windows Updates, as they cannot automatically download new Certificate Revocation Lists (CRLs) or Trusted Root CAs. Primary Solutions
Obtain the necessary root certificate files ( .cer or .crt ) from a machine with internet access or directly from the PTC Support Portal . The error message typically occurs during the installation
If manual installation of GlobalSign or Microsoft root certificates does not work, it is recommended to open a support ticket with the Kepware team for specific offline certificate packages. If manual installation of GlobalSign or Microsoft root
The most straightforward fix is to connect the machine to the internet and run Windows Update . This allows the OS to automatically update its Trusted Root Certification Authorities store. : Users on older operating systems like Windows
: Users on older operating systems like Windows 7 or Windows XP SP3 frequently encounter this because these versions no longer receive automatic certificate updates.
If the error persists, review the installation logs to identify which specific certificate is missing. You can find these at: C:\Program Files (x86)\Kepware\KEPServerEX\bootstrap.log
In the Certificate Import Wizard, select as the store location.
