How to create a self-signed WSUS certificate when the Server Publishing Setup Wizard fails

The provisioning process is complete. Failed to create the signing certificate. This WSUS server cannot issue a self-signed certificate. To import a signing certificate into the WSUS server, use one of the following supported methods: 1. SetSigningCertificate(string, string) 2. SetSigningCertificate(string, SecureString) 

2020/05/12 15:18:38:868 PID: 12884 TID:  5172 [ERROR] Failed to retrieve the wsus server signing certificate. Message: The system cannot find the file specified
Stack Trace:    at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteGetSigningCertificate(String certificateFile)
   at EminentWare.UpdateServices.Administration.Publishing.PublishingCertificateAsString(UpdateServicesSearcher searcher, String& displayablecert, String& rawcertstring)

• Likely due to Account/ WMI / Firewall Permissions and policies
• This Registry key was missing on Patch manager server HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
  Create DWORD value: EnableSelfSignedCertificates = 1

1. Open the Registry Editor. 

2. Create the following registry key (Starting with SPM 2019.4 Release, the Server Publishing wizard can enable this key on remote WSUS servers)
   HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
   Create DWORD value: EnableSelfSignedCertificates = 1

3. Reboot(optional) the servers and run the generate a software publishing certificate from PM console.

1. Copy SolarWinds Utility (SolarWinds.Utilities.WSUS2012PlusCertManagement.exe) to the WSUS or If they are the same server open the Patch Manager install directory located at:
   C:\Program Files\Solarwinds\Patch Manager\Server

2. Launch a Command Prompt as Administrator. In the command prompt, run the following command:

   SolarWinds.Utilities.WSUS2012PlusCertManagement.exe /operation createselfsigned /targetwsusname (wsus server name) /targetwsusport 8530 /targetgetwsususessl no

   Note: The command prompt must be RUN AS ADMIN and the file must be in the server folder path listed in step 1.
   Alternatively, if the WSUS is running Microsoft^® Windows Server^® 2016, use a period ( . ) for the hostname in place of the WSUS server name. 

3. If you did not receive an error message, go to step 4.
   If you receive an error message, check the registry for the createselfsignedcert key.

   1. Open the Registry Editor. 

   2. Create the following registry key:
      HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
      Create DWORD value: EnableSelfSignedCertificates = 1

   3. Repeat step 2 to create the certificate. 

4. Open the Certificate Manager store and locate the new WSUS keystore.

5. In Patch Manager, expand Administration and Reporting and select Software Publishing.

6. In the Actions menu, double-click Server Publishing Setup Wizard.

7. Complete the Wizard to distribute the certificate to your Primary Application Server (PAS).

8. In Patch Manager, expand Enterprise and select Update Services.

9. Select your WSUS server.
   The Software Publishing Certificate should now be populated.