Blog Post

Windows IT Pro Blog
3 MIN READ

Scan changes and certificates add security for Windows devices using WSUS for updates

AriaUpdated's avatar
AriaUpdated
Icon for Microsoft rankMicrosoft
Jan 12, 2021
To help prevent man-in-the-middle attacks, the January 2021 cumulative update for Windows 10 further improves security for devices that scan Windows Server Update Services (WSUS) for updates. These i...
Updated Feb 02, 2023
Version 5.0
security
servicing and updates
TristankMS's avatar
TristankMS
Icon for Microsoft rankMicrosoft
Jan 12, 2021

"To enable cert-pinning, simply add the correct certificates to the new WSUS certificate store." - could this be expanded please?

  • Where does one find the WSUS certificate store, on clients, on the WSUS server itself, in Group Policy, somewhere else...?
  • How does one provision certificates into this store? (If it's the server, obviously just a single operation; if it's clients, deployment might be tricky?)