An HTTP Error occured While configuring WSUS Server

Mohammad Zaid 11 Reputation points
2022-10-12T06:13:51.183+00:00

I've installed WSUS on a separate machine but when I came to Windows Server Configuration Wizard
while connecting to Microsoft facing this issue.

1-Connected to the internet.
2-Tried both firewall ON/OFF.
3-Addedd inbound rule in firewall.

Pasting the screenshot below.

249611-wsus-error.png

Windows for business | Windows Server | User experience | Other
{count} votes

5 answers

Sort by: Most helpful
  1. Mohammad Zaid 11 Reputation points
    2022-10-12T12:55:09.98+00:00

    Hello

    @Adam J. Marshall

    Yes it is Microsoft.
    I'm trying to connect to Microsoft to download the updates & after that I need to push these updates to some other systems.

    1 person found this answer helpful.

  2. JimmySalian-2011 44,721 Reputation points
    2022-10-12T08:29:19.543+00:00

    Hi @Mohammad Zaid ,

    Seem like a network related issue blocking access to the Microsoft Sites on port 80 and 443. You will need to open the below links from the server :

    our first WSUS server must have outbound access to ports 80 and 443 on the following domains:

    http://windowsupdate.microsoft.com

    http://*.windowsupdate.microsoft.com

    https://*.windowsupdate.microsoft.com

    http://*.update.microsoft.com

    https://*.update.microsoft.com

    http://*.windowsupdate.com

    http://download.windowsupdate.com

    https://download.microsoft.com

    http://*.download.windowsupdate.com

    http://wustat.windows.com

    http://ntservicepack.microsoft.com

    http://go.microsoft.com

    http://dl.delivery.mp.microsoft.com

    https://dl.delivery.mp.microsoft.com

    http://*.delivery.mp.microsoft.com

    https://*.delivery.mp.microsoft.com

    Important

    You must configure your firewall to allow the first WSUS server to access any URL within these domains. The IP addresses associated with these domains are constantly changing, so don't try to use IP address ranges instead.

    Hope this helps.

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

  3. Limitless Technology 45,051 Reputation points
    2022-10-12T09:49:53.387+00:00

    Hello

    Thank you for your question and reaching out. I can understand you are having issues related to WSUS.

    It looks it can not be connected to upstream server or the connection is blocked

    Clients and downstream servers that are configured to use Transport Layer Security (TLS) or HTTPS must also be configured to use a fully qualified domain name (FQDN) for their upstream WSUS server.

    Please try to first Disable or Uninstall any Antivirus program or Windows firewall you may have for temporary purpose and make sure in Network also ports are not blocked.

    ---------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

  4. Mohammad Zaid 11 Reputation points
    2022-10-12T11:25:24.807+00:00

    Hi
    @Limitless Technology

    -This WSUS server is fresh OS nothing installed no Antivirus
    -& I also added ports(80,443,8530,8530) Inbound/Outbound in firewall through which its interacting.

    0 comments No comments

  5. Adam J. Marshall 10,456 Reputation points MVP
    2022-10-12T12:30:11.327+00:00

    Is this trying to connect to Microsoft or an upstream server? You mentioned upstream in your question.

    Assuming an upstream and not Microsoft, is the upstream server using SSL (HTTPS://server.domain.local:8531)? The SSL Certificate must be trusted by the downstream server before syncing with the Upstream.

    Try to download the WSUS iuident CAB file from the client machine.

    http://server.domain.local:8530/selfupdate/iuident.cab
    https://server.domain.local:8531/selfupdate/iuident.cab

    and then try to browse to:

    http://server.domain.local:8530/ClientWebService/client.asmx
    https://server.domain.local:8531/ClientWebService/client.asmx

    If you get SSL certificate errors, fix those (Install the root certificate into the Trusted Roots Certificates). If you can download the cab file and access the website on both HTTP and HTTPS of the upstream, then you're now good to perform the initial sync on the downstream.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.