Configuring a WSUS server certificate

The topics in this section describe how to configure a digital certificate for a WSUSserver.

About this task

On the WSUS Server Certificate page, you can configure a digital certificate for the WSUS server.

Procedure

1. Select one of the following options to select or create a certificate:
   • Click Browse to navigate to and select a third-party certificate.
   • Click Create to generate a new, self-signed certificate.
   Note

   WSUS in the Windows Server 2012 R2 version and later versions, no longer issue self-signed certificates. You can create certificates by installing the certification authority. For more information, see Microsoft System Center – Install the Certification Authority webpage.
2. Click Next.

What to do next

A digital certificate is used to sign the updates. The certificate must be added, by copying it to the appropriate certificate folders on the System Center Configuration Manager update server, before the Lenovo updates can be published to the SCCM server. The certificate must also be copied to the Lenovo XClarity Integrator System Updates computer to ensure that the update server has the same certificate.

If there is no certificate on the WSUS server, Lenovo XClarity Integrator System Updates prompts you to generate a self-signed certificate on the WSUS server.

Note

Lenovo XClarity Integrator System Updates also supports importing a third-party certificate. To import a third-party certificate, click Browse and select the third-party certificate.