there needs to be a file

C:\ProgramData\osquery\certs\certs.pem

that gets dropped by the windows package, that’s what the binary expects