Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Patch Manager > Create a self-signed cert for WSUS when Server Publishing Setup Wizard fails

Create a self-signed cert for WSUS when Server Publishing Setup Wizard fails

Table of contents

Updated June 20th, 2017



This scenario is when the Server Publishing Setup Wizard fails to create the self signed certificate.


  • All Patch Manager versions
  • WSUS 2012


  1. Launch a command prompt as an administrator.
  2. In the prompt, browse to the Patch Manager install directory (the default path is C:\Program Files\Solarwinds\Patch Manager\Server).
  3. Run the following command in your command prompt:
    SolarWinds.Utilities.WSUS2012PlusCertManagement.exe /operation createselfsigned /targetwsusname (wsus server name) /targetwsusport 8530 /targetgetwsususessl no
    NOTE: For 2016 use a . for the hostname in place of the (wsus server name) also, copy the utility directly to the wsus server having the issue.

  4. After you run this command, open the Certificate Manager store and there should be a WSUS key store created.

  5. In Patch Manager, rerun the Server Publishing Setup Wizard and distribute the certificate to your PAS.

  6. In Patch Manager > Update Services,  highlight your WSUS server. The Software Publishing Certificate should now be populated.

If you get an error message when running this command check the registry for createselfsignedcert key:

  1. Create reg key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
    Create DWORD value: EnableSelfSignedCertificates = 1

  2. Attempt to create certificate again





Last modified
16:20, 12 Jul 2017