Deep Dive Configure a Software Update Point (WSUS) Server to Require SSL in SCCM

This video tutorial will describe how to configure WSUS to require SSL. This setting will ensure client scan for updates via your WSUS/SUP in Configuration Manager.

Introduction: (0:00)
Review SUP/WSUS server that does not require SSL: (0:45)
Review the SCCM and WSUS Lab Setup: (2:30)
Create the certificate template to create an SSL certificate for WSUS: (3:00)
Issue the template for enrollment: (6:06)
Request the SSL certificate on the WSUS server using certlm.msc: (6:17)
Bind the SSL certificate to the WSUS Administration website in IIS: (8:30)
Verify WSUS is using SSL/HTTPS: (9:03)
Configure SSL to be required on the WSUS server: (10:26)
Run wsusutil configuressl to configure WSUS to use SSL: (12:11)
Set the software update to point setting to require SSL communication to the WSUS server: (13:20)
Validate clients are now using SSL to scan against WSUS: (14:17)

Additional Resources:

- Last Microsoft Doc for WSUS SSL - https://docs.microsoft.com/en-us/mem/configmgr/sum/get-started/software-update-point-ssl
- https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh852346(v=ws.11)?redirectedfrom=MSDN#configure-ssl-on-the-wsus-server
- https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/network/example-deployment-of-pki-certificates#BKMK_webserver22008
- https://docs.microsoft.com/en-us/previous-versions/system-center/system-center-2012-R2/gg699362(v=technet.10)?redirectedfrom=MSDN

Скачать видео