Problem with Signing Certificate for WSUS

%3CLINGO-SUB%20id%3D%22lingo-sub-1214241%22%20slang%3D%22en-US%22%3EProblem%20with%20Signing%20Certificate%20for%20WSUS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1214241%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20I%20am%20in%20the%20process%20of%20standing%20up%20a%20new%20ConfigMgr%201910%20on%20Server%202019.%26nbsp%3B%20My%20WSUS%20server%20is%20remote%20and%20I%20have%20SSL%20working%20between%20the%20site%20server%20and%20the%20SUP.%26nbsp%3B%20I%20am%20able%20to%20see%20and%20deploy%20MS%20updates%20in%20the%20CM%20console.%26nbsp%3B%20However%20CM%20is%20not%20creating%20the%20signing%20certificate.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20I%20have%20tried%20to%20load%20the%20certificate%20manually%20using%20SCUP%20but%20receive%20the%20following%20error.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22pfitchie_0-1583520790121.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F175685i4726B1631D96201F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22pfitchie_0-1583520790121.png%22%20alt%3D%22pfitchie_0-1583520790121.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tried%20removing%20the%20SUP%20and%20the%20uninstalling%20and%20reinstalling%20WSUS%20on%20the%20remote%20server%20as%20well%20I%20have%20tried%20to%20install%20the%20certificate%20on%20WSUS%20before%20configuring%20SSL%20and%20after%20and%20receive%20the%20same%20error.%26nbsp%3B%20I%20have%20also%20observed%20that%20the%20WSUS%20keystone%20is%20missing%20from%20the%20certificates%20console.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22pfitchie_1-1583520922660.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F175686i0E7D5541929FAED5%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22pfitchie_1-1583520922660.png%22%20alt%3D%22pfitchie_1-1583520922660.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EI%20am%20unable%20to%20find%20any%20errors%20in%20the%20logs.%26nbsp%3B%20Any%20help%20would%20be%20great!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPatrick%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1214241%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESoftware%20Update%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1214752%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20with%20Signing%20Certificate%20for%20WSUS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1214752%22%20slang%3D%22en-US%22%3E%3CP%3EAdditionally%20I%20have%20tried%20the%20following%20command%20to%20import%20the%20cert%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22pfitchie_0-1583533765189.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F175743i0501330A9C9AE46D%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22pfitchie_0-1583533765189.png%22%20alt%3D%22pfitchie_0-1583533765189.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EI%20have%20confirmed%20that%20the%20code%20signing%20cert%20is%20using%20SHA-2%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hello,

 

  I am in the process of standing up a new ConfigMgr 1910 on Server 2019.  My WSUS server is remote and I have SSL working between the site server and the SUP.  I am able to see and deploy MS updates in the CM console.  However CM is not creating the signing certificate.

 

  I have tried to load the certificate manually using SCUP but receive the following error.

pfitchie_0-1583520790121.png

 

I have tried removing the SUP and the uninstalling and reinstalling WSUS on the remote server as well I have tried to install the certificate on WSUS before configuring SSL and after and receive the same error.  I have also observed that the WSUS keystore is missing from the certificates console.

 

pfitchie_1-1583520922660.png

I am unable to find any errors in the logs.  Any help would be great!

 

Patrick

1 Reply
Highlighted

Additionally I have tried the following command to import the cert

pfitchie_0-1583533765189.png

I have confirmed that the code signing cert is using SHA-2