Share via

WSUS control manager errors

Skip B 91 Reputation points
2021-11-02T18:19:40.63+00:00

In our SCCM environment, we have a dedicated WSUS server and an IBCM server that has an instance of WSUS on it and is a downstream server. They were setup to communicate via SSL.

When I look in the SCCM console at Component Status, both of these servers are showing the SMS_WSUS_CONTROL_MANAGER in an error state. When I look at the errors, they are 7000 and 7003. They started at the time the WSUS instance was installed on the IBCM server.

When I run wsusutil.exe checkhealth on either server, the Application log shows errors 12002, 12052, 12042, 12022, 12032, and 12012.

What exactly is having a problem communicating via SSL?

The IBCM server is able to service internet clients just fine.

From poking around the internet, it looks like I need to issue the wsusutil.exe configuressl command.

If so, do I need to issue it on both servers?

Skip

Microsoft Security | Intune | Configuration Manager | Other
Windows for business | Windows Server | User experience | Other

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Adam J. Marshall 10,786 Reputation points MVP
    2021-11-02T19:01:29.557+00:00

    Yes, you'll want to follow either the self-signed setup or the Internal CA Setup that I've outlined here:

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-7-ssl-setup-for-wsus-and-why-you-should-care/

    You perform these steps on the WSUS server that is supposed to use SSL to communicate with CLIENT systems (including the downstream server acting as a client to the upstream). In best case, both WSUS servers are secured through SSL.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Skip B 91 Reputation points
    2022-02-28T15:54:28.49+00:00

    Thanks for your replies. They are appreciated despite me disappearing.

    I haven't had time to troubleshoot this issue much since it is not having any impact, as far as I can tell.

    What puzzles me is that a Microsoft tech helped setup the environment and signed off on the SSL settings and certificates. Furthermore, the system works.

    I will do some reading of the links you provided.

    Thanks,
    Skip

    Was this answer helpful?

    0 comments
  3. Rita Hu -MSFT 9,666 Reputation points
    2021-11-03T02:55:33.197+00:00

    Hello Skip,

    Thanks for your posting on Q&A.

    It seems that the configuration of SSL isn't correct. Please follow this link to configure the SSL first and then confirm whether the issue will be resolved or not. Please keep us in touch if there are any updates.

    Thanks for your time.

    Regards,
    Rita

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.