For air-gapped industrial networks, create a . Regularly export the latest root certificates from a trusted online machine and deploy them via Group Policy.
There are several primary causes: