: Industrial control systems (ICS) and SCADA environments typically operate without internet access. Windows normally fetches missing root certificates automatically via Windows Update when it encounters a new file signature. Without an internet connection, this update mechanism fails.
Older operating systems lack the modern root certificates.
C:\Program Files (x86)\PTC\ThingWorxIndustrialConnectivity\bootstrap.log Look for entries like CheckRootCert, GlobalSign Failed to pinpoint the missing authority. Common Scenarios and Troubleshooting : Industrial control systems (ICS) and SCADA environments
Export the file as a format and save it to a USB flash drive. Step 2: Import the Certificate to the Offline Machine
By following the solutions in this guide—updating Windows root certificates, manually importing the missing CAs, or using advanced bypass switches—you will restore the ability to install Kepware on any industrial PC. Older operating systems lack the modern root certificates
certutil -verify -urlfetch C:\path\to\some\kepware\signed\file.dll
Run this from an before launching the installer: Step 2: Import the Certificate to the Offline
For industrial PCs that cannot connect to the internet, you must manually import the required root certificates.
: If manual installation fails, PTC Kepware Support recommends opening a ticket through My Kepware to receive the specific certificate chain files required for your server version.
Before running any Kepware installer, run this PowerShell script to check for common root certs:
The simplest and most direct solution recommended by PTC is to ensure your Windows system is fully updated.