Security Compliance

Remote certificate is invalid error in Patch Manager

This article addresses the following error that displays in Patch Manager during the validation procedure: The remote certificate is invalid.

First published date

10/12/2018 5:47 PM

Last published date

10/12/2018 5:47 PM

Overview

When the validation procedure runs in Patch Manager, an error displays stating that the remote certificate is invalid. 

Product section

Patch Manager

Cause

The SSL certificate is missing or mismatched between Patch Manager and a WSUS server using SSL.

Resolution

If you are using SSL in WSUS, be sure to import the certificate into Patch Manager. If the SSL options are enabled when you add a WSUS server, this action is performed automatically. 

If WSUS is currently configured in Patch Manager, the certificate must be installed again to trigger the import. This process removes the existing WSUS Inventory information associated with the WSUS server. When the installation is completed, the next inventory task will repopulate the report. This step is required so Patch Manager can import the SSL certificate. 

Remove an existing WSUS server 

  1. Log in to the Patch Manager Admin Console as an administrator. 
  2. In the navigation pane, expand Enterprise and select Update Services. 
  3. In the center pane, select the old WSUS server.
  4. In the Actions menu, click Delete.
  5. Click OK to purge the Inventory data. 

Reinstall the WSUS server 

  1. In the navigation pane, ensure that Update Services is selected.
  2. In the Actions pane, click Add or Configure WSUS Server.
  3. Enter the WSUS hostname and click Resolve.
  4. Specify the WSUS port.
    Port 443 is the default SSL port for Windows Server 2008.
    Port 8531 is the default SSL port for Windows Server 2012.
  5. Select the Operating System Version.
  6. Click Save.
    Patch Manager import the updated SSL certificate.