Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.





Home > Success Center > Patch Manager > Create or replace a WSUS publishing certificate

Create or replace a WSUS publishing certificate

Table of contents
Created by Zaquan Henry, last modified by MindTouch on Jun 23, 2016

Views: 31 Votes: 1 Revisions: 6


Once you have Patch Manager up and running, you need to create your publishing certificate. This article provides guidelines to create or replace an existing certificate for third-party publishing. 


  • All Patch Manager versions
  • All WSUS versions


  1. In the left pane of the Patch Manager Console, select Administration and Reporting > Software Publishing.
  2. Click Server Publishing Setup Wizard from the Actions pane.
  3. On the first page of the wizard, select the upstream WSUS Server from the WSUS Server menu.
  4. Select Create self-signed certificate, which creates or replaces the existing certificate.
  5. Click Next.
  6. Select the Patch Manager servers, upstream servers, and downstream WSUS servers you want to distribute the publishing certificate, and then click Next.
  7. Click Finish


Once a certificate is created, see the Using Group Policy to Configure Managed Clients section of the Patch Manager Admin Guide on importing the certificate to your Group Policy (GPO).


Note: Key local stores that need this on client servers and SCCM server:

  • Trusted Root Certification Authorities 
  • Trusted Publishers stores
Last modified
01:01, 23 Jun 2016