Note - if the GlobalSign Root CA - R3 was pushed out to machines via GroupPolicy, then it may show in the local machine certificate manager UI, but for some reason the KepServerEX 6.11 installer cannot find it. To resolve, re-install the Root CA into Trusted Root CA's, but manually select a physical location of "Registry" below that category.
@KepWare - it'd be great if you could resolve this in the installer software.
When it was pushed via Group Policy, "certutil -store Root 04000000000121585308a2" shows no match, but "certutil -store -grouppolicy Root 04000000000121585308a2" shows it just fine.
