Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS

 

Overview

• This guide covers considerations for third-party software updates in Configuration Manager when using a remote software update point (SUP) that is not configured for SSL.

Topics in Video

• Intro: (0:00​)
• Review remote site system running SUP in HTTP mode: (1:30​)
• Enable third-party updates and Configuration Manager managed the certificate: (2:15​)
• wsyncmgr.log error Warning: Remote WSUS connection is not HTTPS. This prevents software update point from getting the signing certificate for third-party updates.: (2:50​)
• Review the SMS_ISVUPDATES_SYNCAGENT.log: (3:45​)
• Stage the content for selected categories automatically: (6:00​)
• SMS_ISVUPDATES_SYNCAGENT.log syncing catalog: (7:15​)
• SMS_ISVUPDATES_SYNCAGENT.log: error NO_SIGNING_CERT: (8:00​)
• Create a WSUS Signing Certificate using Patch My PC’s Publisher: (11:00​)
• Export and Deploy WSUS Signing Certificate using a GPO: (14:15​)

Helpful Resources:

• What is the WSUS Signing Certificate and How to Create It – https://patchmypc.com/wsus-signing-certificate-options-for-third-party-updates-in-configuration-manager
• Download Publisher – https://patchmypc.com/docs
• How to Deploy the WSUS Signing Certificate for Third-Party Software Updates – https://patchmypc.com/how-to-deploy-the-wsus-signing-certificate-for-third-party-software-updates