Purpose

The purpose of this article is to help resolve an error the user receives when trying to create a self-signed certificate.

Symptoms

When referring to this document:Creating, exporting, and importing a WSUS self-signed certificate with the Shavlik Patch Plugin on Step 2, instead of a warning prior to continuing the setup of the patch, the user will receive the following error:

Error creating a certificate. In order to create a certificate on the WSUS server:

- You must be an administrator on the WSUS server

- The connection to the WSUS server must use SSL.

Cause

The cause of the error can come from:

1) The user not being added to the Administrator Group on the SCCM and/or the WSUS Server.

2) The user not running Shavlik Patch as an Administrator.

3) The connection to the WSUS server is disabled or not using SSL.

Resolution

The resolution for each of the causes is as follows:

1) The user not being added to the Administrator Group on the SCCM and/or the WSUS Server.

1. Make sure that on the local SCCM and WSUS machine/server, the user is added to the Administrator group under Control Panel > User Accounts > Manage User Accounts.
2. Add the user into the Administrator group in Active Directory (Note: this will give the user Administrative rights for the domain they are on).
   

2) The user not running Shavlik Patch as an Administrator.

1. On the SCCM server, navigate to System Center 2012 R2 Configuration Manager (SCCM) and right-click on the application and select 'Run as Administrator'.

3) The connection to the WSUS server is disabled or not using SSL.

1. In SCCM, go to Software Library and in the Upper Pane, click on Software Updates and then right-click on Shavlik Patch and click on Settings.
2. On the right, click on WSUS Server and then next to Name, type in the machine name of the WSUS Server
3. Next to Port, select the Port you want to use to connect to the WSUS Server. Below are the selections and descriptions of the ports to choose from:
   1. Port 80, TCP, HTTP
   2. Port 443, TCP, SHTTP
   3. Port 8530, TCP, WSUS HTTP port
   4. Port 8531, TCP, WSUS SHTTP port
4. Check or uncheck 'Use Secure Socket Layer (SSL) to connect this server. (Note: Microsoft recommends using SSL to ensure security when connecting to your server.)
5. Click 'Test connection' button.
6. Dialog box will appear to let you know if the test was successful or not.
7. If the test was unsuccessful, for back and configure your settings above and try again
8. If the test was successful, you can continue on creating the self-signed certificate found in this article: Creating, exporting, and importing a WSUS self-signed certificate with the Shavlik Patch Plugin
   

Affected Product(s)

Shavlik Patch