Server 2008 R2 WSUS no longer syncing with Microsoft

[Gilgamesh1964]

Hello

I have an old 2008 R2 licence I use at home (in a VM) to run a WSUS 3.0 server to patch my systems rather than downloading direct from MS. I feel this gives me better control of patching (e.g, No Preview patches in Windows 10, etc.).

However earlier this year the synching to Microsoft to find new patches stopped working and it took me awhile to get around to it.

I couldn't figure out why but thought that some config or patch may have corrupted my system so I rebuilt a new 2008 R2 VM to reinstall WSUS from scratch.

During configuration to sync with Microsoft I now get the following error.

==============================================================

---------------------------
Synchronization Error Details
---------------------------
WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
at Microsoft.UpdateServices.ServerSync.ServerSyncCompressionProxy.GetWebResponse(WebRequest webRequest)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at Microsoft.UpdateServices.Serve

==============================================================

If someone knows how to fix this please let me know.

I realise that the server software and WSUS version I run are no longer supported by Microsoft but does anybody know if changes at MS have stopped WSUS synching altogether?

I haven't upgraded the software because, well, the current licencing models make it prohibitively expensive just to run a patch server.

Thanks in advance

[#2]

TLS 1.2 not enabled I guess? You can use this article to enable it https://blog.aelterman.com/2014/04/09/windows-8-1-update-cannot-connect-to-ssl-enabled-wsus-3-sp-2/

[#3]

Thank you for your response.
Based upon this article I did not have TLS enabled so I used the registry hack described there and rebooted.
Unfortunately it did not fix the problem.

[#4]

Ok, perhaps this page will help? https://community.spiceworks.com/topic/2312086-wsus-synchronization-failed-http-error (SHA2 signing update)

[#5]

Did that fix your issue ?