Issue facing during WSUS SSL HTTPS (8531) client registration using self-signed certificate

Question

Below issue facing during WSUS SSL HTTPS(8531) client registration using self signed certificate.
End point Virtual machine hosted in different physical machine is not showing and reporting information in WSUS.

Also patches is not getting downloaded on end points. it is showing error as some update files are not signed. refer error screen shot
Any suggestion or advise or solution on this?

Answer 1

0x800b0109=A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

This error is usually due to the client certificate authentication is not configured properly. Check on the client if there is a self-signed certificate present in Trusted root Certification authorities certificate.

For more details:
valid-root-ca-certificates-untrusted

Answer 2

You need to make sure that you install the self signed certificate to each client device so that it is trusted.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-7-ssl-setup-for-wsus-and-why-you-should-care/