Submit a ticketCall us

whitepaperYour VM Perplexities Called, and They Need You to Read This.

Virtualization can give you enormous flexibility with future workloads and can be a key enabler for other areas, like cloud computing and disaster recovery. So, how can you get a handle on the performance challenges in your virtual environment and manage deployments without erasing the potential upside? Learn the four key areas you need to be focusing on to help deliver a healthy and well-performing data center.

Get your free white paper.

Home > Success Center > Patch Manager > Patch Manager - Knowledgebase Articles > Remote certificate is invalid error in Patch Manager

Remote certificate is invalid error in Patch Manager

Updated March 12, 2018


When the validation procedure runs in Patch Manager, an error displays stating that the remote certificate is invalid. 


All Patch Manager versions


The SSL certificate is missing or mismatched between Patch Manager and a WSUS server using SSL.


If you are using SSL in WSUS, be sure to import the certificate into Patch Manager. If the SSL options are enabled when you add a WSUS server, this action is performed automatically. 

If WSUS is currently configured in Patch Manager, the certificate must be installed again to trigger the import. This process removes the existing WSUS Inventory information associated with the WSUS server. When the installation is completed, the next inventory task will repopulate the report. This step is required so Patch Manager can import the SSL certificate. 

Remove an existing WSUS server

  1. Log in to the Patch Manager Admin Console as an administrator. 
  2. In the navigation pane, expand Enterprise and select Update Services. 
  3. In the center pane, select the old WSUS server.
  4. In the Actions menu, click Delete.
  5. Click OK to purge the Inventory data. 

Reinstall the WSUS server

  1. In the navigation pane, ensure that Update Services is selected.
  2. In the Actions pane, click Add or Configure WSUS Server.
  3. Enter the WSUS hostname and click Resolve.
  4. Specify the WSUS port.
    Port 443 is the default SSL port for Windows Server 2008.
    Port 8531 is the default SSL port for Windows Server 2012.
  5. Select the Operating System Version.
  6. Click Save.
    Patch Manager import the updated SSL certificate.


Last modified