If you have obtained the required .cer or .crt files from PTC Support , follow these steps:
: If you are trying to connect via OPC UA after installation and see certificate errors, you may need to use the OPC UA Configuration Manager to manually trust the server's self-signed certificate.
Right-click the certificate file and select . Choose Local Machine as the store location. Select Place all certificates in the following store . Browse and select Trusted Root Certification Authorities . Click Finish to complete the import. Step 2: Run Windows Update
When installing , users might occasionally encounter a frustrating error message: "The installer was unable to find required root certificates." This error commonly occurs during the installation of newer versions (such as V6.15 and later) on Windows operating systems, preventing the installation from proceeding.
Kepware installers typically rely on standard authority certificates like VeriSign, DigiCert, or GlobalSign. If you have obtained the required
This message halts the installation process immediately, providing little context about what "exclusive" means or which certificates are missing. If you are facing this error, you are not alone. This article will dissect the root cause, explain the role of digital certificates in modern industrial software, and provide a definitive, step-by-step solution to bypass this issue permanently.
If the installer finishes but connections fail, use the to swap and trust client/server certificates.
This guide provides a comprehensive overview of why this error happens and practical, step-by-step methods to resolve it. Why the Error Occurs
For older systems, like Windows 7, the community and vendors have developed specialized, all-in-one certificate patches. These are small utilities designed specifically to pre-load the necessary root certificates for KEPServerEX. Select Place all certificates in the following store
: If the error persists, check the installation logs (typically found at C:\Program Files (x86)\Kepware\KEPServerEX\bootstrap.log
In the Certificate Import Wizard, select as the store location.
This definitive troubleshooting guide details why this error occurs during the PTC Kepware setup process and provides step-by-step methods to bypass it, even if your machine cannot access the internet. Why Does This Error Occur?
Run Windows Update to ensure all security certificates are current. Restart the installation. Step 2: Run Windows Update When installing ,
Step 2.3: Verification via Microsoft Management Console (MMC) To verify that the certificates were successfully placed: eligible version - PTC Community
Legacy platforms—such as Windows 7, Windows Server 2008 R2, or unpatched Windows 10/Server 2016 builds—lack the newer Certificate Authority (CA) public keys needed to validate recent Kepware builds. Solution 1: Run Windows Updates (Online Machines)
If Windows Update is not an option, follow these steps to manually update your certificate store: Identify Missing Certificates : Common required root certificates include those from GlobalSign . Specific critical roots often include: GlobalSign Root CA - R3 DigiCert Trusted Root G4 Microsoft Code Verification Root Import via MMC , and press Enter. File > Add/Remove Snap-in Certificates Computer account (Local Computer). Navigate to Trusted Root Certification Authorities > Certificates Right-click, select All Tasks > Import , and browse to your downloaded certificate file. Ensure Correct Storage
Sometimes the certificate store itself is corrupted, causing the "exclusive" access error.