Submit a ticketCall us

WebinarWebinar: A checklist for planning your Network Performance Monitor (NPM) upgrade

Are you ready for your next upgrade? To help you plan smoothly, join this webcast to learn more about, SolarWinds® Orion® Installer, SolarWinds Upgrade Advisor, Upgrades Guides, Training Videos, and other resources available. We’ll share key upgrade planning considerations, lessons learned from customers with practical advice from SolarWinds Product Experts. We’ll also give practical tips to identify the estimated time needed and resources, how to prepare the business and IT staff for changes, ways to plan for required system changes, and more.

Register now.

Home > Success Center > Patch Manager > Patch Manager - Knowledgebase Articles > Remote certificate is invalid error in Patch Manager

Remote certificate is invalid error in Patch Manager

Updated March 12, 2018


When the validation procedure runs in Patch Manager, an error displays stating that the remote certificate is invalid. 


All Patch Manager versions


The SSL certificate is missing or mismatched between Patch Manager and a WSUS server using SSL.


If you are using SSL in WSUS, be sure to import the certificate into Patch Manager. If the SSL options are enabled when you add a WSUS server, this action is performed automatically. 

If WSUS is currently configured in Patch Manager, the certificate must be installed again to trigger the import. This process removes the existing WSUS Inventory information associated with the WSUS server. When the installation is completed, the next inventory task will repopulate the report. This step is required so Patch Manager can import the SSL certificate. 

Remove an existing WSUS server

  1. Log in to the Patch Manager Admin Console as an administrator. 
  2. In the navigation pane, expand Enterprise and select Update Services. 
  3. In the center pane, select the old WSUS server.
  4. In the Actions menu, click Delete.
  5. Click OK to purge the Inventory data. 

Reinstall the WSUS server

  1. In the navigation pane, ensure that Update Services is selected.
  2. In the Actions pane, click Add or Configure WSUS Server.
  3. Enter the WSUS hostname and click Resolve.
  4. Specify the WSUS port.
    Port 443 is the default SSL port for Windows Server 2008.
    Port 8531 is the default SSL port for Windows Server 2012.
  5. Select the Operating System Version.
  6. Click Save.
    Patch Manager import the updated SSL certificate.


Last modified