Hello,
I have exactly the same issue as into this topic :
Kepware Trust certificates - PTC Community
Can you please tell me if somebody has some solution regarding this topic ?
On my side, I put on the Kepware Certificate Store the certificate of Thingworx Server. Do i need to put also the Root and Intermediate from my company ?
Thank you
Guillaume
Thingworx version : 9.7
Kepware version : 6.17
Greetings,
Yes, you’ll need to add the full certificate chain to Kepware’s Certificate Store—not just the ThingWorx server certificate, but also your company’s Root and Intermediate certificates.
Kepware uses SSL/TLS, and without the full chain, it can’t properly validate the connection unless “Trust all certificates” is enabled, which isn’t ideal for production use.
Regards,
Mohit
The issue is happening because only the ThingWorx server certificate was added to the Kepware Certificate Store. For the connection to be trusted, Kepware needs the full certificate chain, not just the server certificate.
That means you must also include:
The Root certificate from your company’s Certificate Authority
Any Intermediate certificates between the Root and the ThingWorx server certificate
Kepware relies on SSL/TLS to validate the connection. If the full chain isn’t present, Kepware can’t fully verify the certificate. The connection might only work if “Trust all certificates” is enabled, but that’s not recommended in production since it bypasses security checks.
Solution:
Import the full certificate chain (Root + Intermediate + ThingWorx server certificate) into Kepware’s Certificate Store. This ensures the connection is validated properly and securely.
Thanks,