For legacy systems where security validation is not critical, you can disable root certificate verification using a command-line switch (if supported by the Kepware installer version):

This error typically occurs when Kepware’s installer attempts to validate digital signatures or establish secure HTTPS connections during installation, but the Windows store is missing necessary certificates.

Reality: AV rarely deletes root certs. However, aggressive "HTTPS scanning" or "SSL inspection" features can intercept certificate validation. Try temporarily disabling AV during installation.

Alternative perspectives on Google Groups indicate that in some stubborn cases, even manual imports fail, requiring a direct support ticket for a remote session.

If the error persists after these steps, check the installation logs located at C:\Program Files (x86)\Kepware\KEPServerEX\bootstrap.log for specific certificate thumbprints that are failing. You may also find detailed guidance on the PTC Support Portal regarding this specific installer failure. The Installer was unable to find required root certificates

Ensure the terminal outputs the line: CertUtil: -addstore command completed successfully. Re-run the installer.

Identify the missing certificate (often a or DigiCert root used for code signing).

Visit the official repository of the certificate authority specified in your error log. Download the .crt or .cer files for the Root CA. Transfer and Install