Error when generating a software publishing certificate in Patch Manager

Overview

You are trying to create and publish software publishing self-signed certificate for a WSUS server, the following error message displays after Server publishing wizard completes.

The provisioning process is complete. Failed to create the signing certificate. Access is denied

OR

Failure Message: Operation on TrustedPublisher failed. Access is denied Operation on root failed. Access is denied

Environment

• Patch Manager with WSUS

Cause

• Patch Manager is installed on the same server as your Certificate Authority (CA)
• Adding/updating Certificates Cert Stores is controlled by domain-level GPO Policy and unable to override local policy

Resolution 

Patch Manager is installed on the Same server as your CA: 

• SolarWinds recommends that you install and configure your CA on its own server, independent of both WSUS and Patch Manager.
• After Patch Manager is installed on a dedicated server, rerun the Server Publishing Setup Wizard to create and publish the WSUS Self Signed certificate.

Certificate management controlled via GPO:

• Publish/distribute the WSUS Software publishing certs through the GPO to all the WSUS servers and managed computers in your publishing environment. This may include multiple upstream/downstream WSUS servers.