Submit a ticketCall us

whitepaperYour VM Perplexities Called, and They Need You to Read This.

Virtualization can give you enormous flexibility with future workloads and can be a key enabler for other areas, like cloud computing and disaster recovery. So, how can you get a handle on the performance challenges in your virtual environment and manage deployments without erasing the potential upside? Learn the four key areas you need to be focusing on to help deliver a healthy and well-performing data center.

Get your free white paper.

Home > Success Center > Patch Manager > Patch Manager - Knowledgebase Articles > How to create a self-signed WSUS certificate when the Server Publishing Setup Wizard fails

How to create a self-signed WSUS certificate when the Server Publishing Setup Wizard fails

Updated June 20th, 2017


When you generate a software publishing certificate in Patch Manager using the Server Publishing Setup Wizard, the procedure fails to create the self-signed certificate. 


  • All Patch Manager versions
  • WSUS 2012


Create a self-signed certificate by executing a command in a command prompt or the SolarWinds Utility. 


  1. Copy SolarWinds Utility (SolarWinds.Utilities.WSUS2012PlusCertManagement.exe) to the WSUS or If they are the same server open the Patch Manager install directory located at:
    C:\Program Files\Solarwinds\Patch Manager\Server
  2. Launch a Command Prompt as Administrator. In the command prompt, run the following command:

    SolarWinds.Utilities.WSUS2012PlusCertManagement.exe /operation createselfsigned /targetwsusname (wsus server name) /targetwsusport 8530 /targetgetwsususessl no

    The command prompt must be RUN AS ADMIN and the file must be in the server folder path listed in step 1.
    Alternatively, if the WSUS is running Microsoft® Windows Server® 2016, use a period ( . ) for the hostname in place of the WSUS server name. 

  3. If you did not receive an error message, go to step 4.
    If you receive an error message, check the registry for the createselfsignedcert key.

    1. Open the Registry Editor. 

    2. Create the following registry key:
      HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\
      Create DWORD value: EnableSelfSignedCertificates = 1

    3. Repeat step 2 to create the certificate. 

  4. Open the Certificate Manager store and locate the new WSUS keystore.

  5. In Patch Manager, expand Administration and Reporting and select Software Publishing.

  6. In the Actions menu, double-click Server Publishing Setup Wizard.

  7. Complete the Wizard to distribute the certificate to your Primary Application Server (PAS).

  8. In Patch Manager, expand Enterprise and select Update Services.

  9. Select your WSUS server.
    The Software Publishing Certificate should now be populated.






Last modified