WSUS SSL Setup on Downstream

Question

Hello,

I have one WSUS Upstream server setup on Windows Server 2016 and another WSUS Downstream server setup on Windows Server 2016 in DMZ.

The Upstream server WSUS01 is designed to provide an updates to the internal desktop and those desktop doesn't have any Internet connectivity.

The Downstream server WSUS02 is a replica of upstream server and only provides metadata to its client and clients need to download the updates from Microsoft Update server as most of the clients are roaming laptops.

The SSL is configured between server to client and server to server using domain generated certificate and binding and all steps were completed.

The clients are reporting to the Upstream server WSUS01 without any issues.

But for Downstream server WSUS02 and for its any random client, what exactly troubleshooting is needed.

For testing I have taken a workgroup laptop and using gpedit.msc I have configured local GPO with WSUS02 URL, which points it to the WSUS02 server. This laptop is not reaching out to the Downstream server WSUS02. If I check its WindowsUpdate logs I could see WSUS location configured as WSUS02 server.

Please advise.

Answer 1

Looks like certificate authority root CA is not available on the machine. Please import the certificate and check .