locked
WSUS Server Sync to Microsoft Update RRS feed

  • Question

  • Hello

    I need some serious assistance wrt WSUS.

    I have WSUS 3.0 SP2 running on Server 2008 SP2.

    My Sync to Microsoft Update fails (also fails via Server Configuration Setup).

    I have tried to re-install.

    Re-install IIS, WSUS and ReportViewer. And start with new Database. Then the sync works but no clients can report to WSUS.

    I then installed WSUS-KB2734608 and then the clients start reporting in, but the sync fails.

    The error I get is: Webexception: The underlying connection was closed. Could not establish trust relationship for the SSL/TLS secure channel. Then something about: Remote certificate is invalid according to the validation procedure.

    But I have never used SSL on Wsus.

    I have checked permissions on server. Proxy settings. Reboots. Services restarts. Wsusutil.exe resets.

    I also see download failed on all updates. I only approved a few to test and see if they download. But to no avail.

    I think the whole WSUS is broken at the moment and I don't know what else to troubleshoot and what to do next to get the Sync to microsoft working and getting the updates to download.

    Please assist. Any tip or advice would be greatly appreciated.

    Please ask if anything above is unclear or confusing.

    Kind Regards

    Tuesday, June 30, 2015 1:02 PM

All replies

  • verify you can perform DNS resolution and access the URLs noted in this article:

    https://technet.microsoft.com/en-ca/library/bb693717.aspx?f=255&MSPPError=-2147217396

    I would not install KB2734608 and instead install KB2828185 which contains KB2734608 in addition to other updates.

    if you don't really care about your WSUS approvals (not sure if this is a new issue and it was working before), I suggest you blow away the WSUS role as well as IIS and internal DB (delete the SQL DB if you're using SQL) and clean up all their respective file system directories and reg keys and start again

    • Proposed as answer by Steven_Lee0510 Wednesday, July 1, 2015 3:14 AM
    Tuesday, June 30, 2015 5:30 PM
  • Hi,

    According to your description, your WSUS server uses the proxy. Please try to let the WSUS connect to internet directly. This issue may be caused by the proxy.

    If issue persists, please check the entries in SoftwareDistribution.log. It should tell us the reason why synchronization was failed.

    Best Regards.


    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, July 1, 2015 3:21 AM
  • Hello

    I can access all the links except: http://download.windowsupdate.com.

    I went through  KB2828185 and I can successfully export using wsusutil.exe export export.cab export.log and get a 549KB logfile and 8 MB export.zip file.

    Additionally,

    1) I can get to http://WSUSServer:8530/ - Displays a page where I can see a iuident.cab, web.config and WUTRACK.BIN files.

    2) I get the download of http://WSUSServer/selfupdate/wuident.cab

    Wednesday, July 1, 2015 9:07 AM