WSUS settings switch from http to https

Question

Hi,

Can we switch WSUS settings from http to https ?

Answer 1

Hi,

Of course you can. If you want force client contact WSUS using HTTPS but only metadata will use https. The update download will be through http.

If you want set https you should perform the following steps:

1. Create a certificate delivered by a certificate autority trusted by WSUS and all your windows machines.
2. Install certificate on IIS in WSUS server and setup the binding : HOW setup binding for HTTPS in IIS
3. Update GPO settings to replace the http WSUS URL by HTTPS one.
4. Open HTTPS port between WSUS and winows machines Please don't forget to mark helpful reply as answer

Answer 2

See my guide. It makes it easier than Microsoft's

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-7-ssl-setup-for-wsus-and-why-you-should-care/