SCCM 2012: SCUP cannot create self-signed certificate when installed on Windows Server 2012 R2
September 22, 2014
Posted by on
When install System Center Update Publisher (SCUP) 2011 on Server 2012 R2 you cannot create a self-signed certificate. This is by design, since WSUS 4.1 shipped with Server 2012 R2 does not support issuing of self-signed certificate. More on this subject is here.
Workaround: Generate a certificate from internal certificate authority (CA) as described: “System Center Updates Publisher Signing Certificate Requirements & Step-by-Step Guide”
SCUP Support Statement update is here
UPDATE: WSUS team published a workaround, describing how you can re-enable the old behaviour. There is a note though saying self-signed API is considered and obsolete and can be removed at any moment