Skip to main content
G
GC_136103665-Regular Member
5-Regular Member
August 20, 2025
Solved

Kepware - Certificate issue - Not able to connect to Thingworx

  • August 20, 2025
  • 2 replies
  • 450 views

Hello, 

 

I have exactly the same issue as into this topic : 

Kepware Trust certificates - PTC Community

 

Can you please tell me if somebody has some solution regarding this topic ? 

On my side, I put on the Kepware Certificate Store the certificate of Thingworx Server. Do i need to put also the Root and Intermediate from my company ? 

 

Thank you 

 

Guillaume 

 

Thingworx version : 9.7
Kepware version : 6.17

Best answer by pshashipreetham

The issue is happening because only the ThingWorx server certificate was added to the Kepware Certificate Store. For the connection to be trusted, Kepware needs the full certificate chain, not just the server certificate.

That means you must also include:

  • The Root certificate from your company’s Certificate Authority

  • Any Intermediate certificates between the Root and the ThingWorx server certificate

Kepware relies on SSL/TLS to validate the connection. If the full chain isn’t present, Kepware can’t fully verify the certificate. The connection might only work if “Trust all certificates” is enabled, but that’s not recommended in production since it bypasses security checks.

Solution:
Import the full certificate chain (Root + Intermediate + ThingWorx server certificate) into Kepware’s Certificate Store. This ensures the connection is validated properly and securely.

 

Thanks,

2 replies

M
MKhatri15-Moonstone
15-Moonstone
September 5, 2025

Greetings,

Yes, you’ll need to add the full certificate chain to Kepware’s Certificate Store—not just the ThingWorx server certificate, but also your company’s Root and Intermediate certificates.

Kepware uses SSL/TLS, and without the full chain, it can’t properly validate the connection unless “Trust all certificates” is enabled, which isn’t ideal for production use.

 

Regards,
Mohit

P
18-Opal
pshashipreetham18-OpalAnswer
18-Opal
September 11, 2025

The issue is happening because only the ThingWorx server certificate was added to the Kepware Certificate Store. For the connection to be trusted, Kepware needs the full certificate chain, not just the server certificate.

That means you must also include:

  • The Root certificate from your company’s Certificate Authority

  • Any Intermediate certificates between the Root and the ThingWorx server certificate

Kepware relies on SSL/TLS to validate the connection. If the full chain isn’t present, Kepware can’t fully verify the certificate. The connection might only work if “Trust all certificates” is enabled, but that’s not recommended in production since it bypasses security checks.

Solution:
Import the full certificate chain (Root + Intermediate + ThingWorx server certificate) into Kepware’s Certificate Store. This ensures the connection is validated properly and securely.

 

Thanks,

Terms & ConditionsCookie settingsAccessibility statement